Adversarial Attack on ImageNet Undefended Models
99.8Inc-v3 Robustness ScoreMIM-PD
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| MIM-PDSource Model=Inc-v32022.03 | 99.8 | 70 | 67.6 | 53.6 | |
| NAA-PDSource Model=Inc-v32022.03 | 98.8 | 89.4 | 88.4 | 83.6 | |
| FIA-PDSource Model=Inc-v32022.03 | 98.7 | 87.2 | 86.1 | 80.1 | |
| NAA-PDSource Model=Res-v22022.03 | 92 | 90.7 | 90.3 | 98.7 | |
| NAA-PDSource Model=Inc-v42022.03 | 91.5 | 97.7 | 89.7 | 86.5 | |
| FDA-PDSource Model=Inc-v42022.03 | 91.4 | 99.2 | 87.1 | 82.2 | |
| FIA-PDSource Model=Inc-v42022.03 | 90.6 | 97.1 | 88.8 | 84.9 | |
| FIA-PDSource Model=Res-v22022.03 | 90 | 88.4 | 87.9 | 98.7 | |
| NRDM-PDSource Model=Inc-v42022.03 | 88.8 | 97 | 80.2 | 78.4 | |
| NRDM-PDSource Model=Inc-v32022.03 | 87.3 | 66.7 | 62.8 | 59.5 | |
| NAA-PDSource Model=IncRes-v22022.03 | 85.5 | 82.5 | 93.9 | 79.3 | |
| FIA-PDSource Model=IncRes-v22022.03 | 85.1 | 79.9 | 90.9 | 76.5 | |
| MIM-PDSource Model=Res-v22022.03 | 81.8 | 76.7 | 75.7 | 99.4 | |
| MIM-PDSource Model=Inc-v42022.03 | 81.4 | 99.3 | 72 | 59.4 | |
| MIM-PDSource Model=IncRes-v22022.03 | 80.6 | 76.5 | 98.1 | 64 | |
| FDA-PDSource Model=IncRes-v22022.03 | 78.6 | 76 | 80.3 | 66.3 | |
| NRDM-PDSource Model=IncRes-v22022.03 | 76.5 | 75.4 | 79.6 | 66.3 | |
| FDA-PDSource Model=Inc-v32022.03 | 76 | 50.4 | 46.5 | 39.2 | |
| FDA-PDSource Model=Res-v22022.03 | 64.7 | 60.1 | 56.5 | 92.1 | |
| NRDM-PDSource Model=Res-v22022.03 | 60.6 | 55.9 | 50 | 87.2 |