Adversarial Attack on ImageNet (val)
9,530ASR (General)RFPAR
Evaluation results
| Method | Links | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RFPARVictim Model=ResNeXt50, Model Test Accuracy=77.62%2025.02 | 9,530 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 138 | 442 | — | — | — | — | |
| RFPARVictim Model=MNASNet, Model Test Accuracy=73.46%2025.02 | 9,500 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 150 | 442 | — | — | — | — | |
| RFPARVictim Model=DenseNet161, Model Test Accuracy=77.14%2025.02 | 9,170 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 152 | 464 | — | — | — | — | |
| PixleVictim Model=ResNeXt50, Model Test Accuracy=77.62%2025.02 | 8,910 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 538 | 663 | — | — | — | — | |
| RFPARVictim Model=RegNetX-32GF, Model Test Accuracy=80.62%2025.02 | 8,840 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 164 | 484 | — | — | — | — | |
| RFPARVictim Model=MobileNet-V3, Model Test Accuracy=74.04%2025.02 | 8,660 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 213 | 596 | — | — | — | — | |
| PixleVictim Model=MNASNet, Model Test Accuracy=73.46%2025.02 | 8,370 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 240 | 607 | — | — | — | — | |
| PixleVictim Model=DenseNet161, Model Test Accuracy=77.14%2025.02 | 8,230 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 243 | 625 | — | — | — | — | |
| PixleVictim Model=RegNetX-32GF, Model Test Accuracy=80.62%2025.02 | 7,370 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 276 | 705 | — | — | — | — | |
| PixleVictim Model=MobileNet-V3, Model Test Accuracy=74.04%2025.02 | 6,960 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 306 | 769 | — | — | — | — | |
| ScratchThatVictim Model=MNASNet, Model Test Accuracy=73.46%2025.02 | 6,530 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 425 | 8,828 | — | — | — | — | |
| RFPARVictim Model=ViT-B, Model Test Accuracy=81.07%2025.02 | 6,410 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 211 | 613 | — | — | — | — | |
| ScratchThatVictim Model=RegNetX-32GF, Model Test Accuracy=80.62%2025.02 | 6,060 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 427 | 8,653 | — | — | — | — | |
| ScratchThatVictim Model=DenseNet161, Model Test Accuracy=77.14%2025.02 | 6,060 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 425 | 8,367 | — | — | — | — | |
| ScratchThatVictim Model=MobileNet-V3, Model Test Accuracy=74.04%2025.02 | 5,180 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 420 | 9,293 | — | — | — | — | |
| PixleVictim Model=ViT-B, Model Test Accuracy=81.07%2025.02 | 5,140 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 286 | 728 | — | — | — | — | |
| ScratchThatVictim Model=ViT-B, Model Test Accuracy=81.07%2025.02 | 4,090 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 420 | 9,418 | — | — | — | — | |
| ScratchThatVictim Model=ResNeXt50, Model Test Accuracy=77.62%2025.02 | 3,810 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 95 | 1,400 | — | — | — | — | |
| OnePixelVictim Model=MNASNet, Model Test Accuracy=73.46%2025.02 | 1,420 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 1,128 | — | — | — | — | |
| OnePixelVictim Model=DenseNet161, Model Test Accuracy=77.14%2025.02 | 1,410 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 1,248 | — | — | — | — | |
| OnePixelVictim Model=RegNetX-32GF, Model Test Accuracy=80.62%2025.02 | 1,230 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 1,358 | — | — | — | — | |
| OnePixelVictim Model=ViT-B, Model Test Accuracy=81.07%2025.02 | 930 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 1,453 | — | — | — | — | |
| OnePixelVictim Model=ResNeXt50, Model Test Accuracy=77.62%2025.02 | 810 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 5,100 | — | — | — | — | |
| OnePixelVictim Model=MobileNet-V3, Model Test Accuracy=74.04%2025.02 | 810 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 15 | 1,461 | — | — | — | — | |
| MIMSource Model=ViT-B/16, Target Model=ViT-B/162023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=ViT-B/16, Target Model=ViT-B/162023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=ViT-B/16, Target Model=ViT-B/162023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=ViT-B/16, Target Model=ViT-B/162023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MIMSource Model=PiT-B, Target Model=PiT-B2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=PiT-B, Target Model=PiT-B2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=PiT-B, Target Model=PiT-B2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=PiT-B2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=CaiT-S/24, Target Model=CaiT-S/242023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=CaiT-S/24, Target Model=CaiT-S/242023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=Visformer-S, Target Model=Visformer-S2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=Visformer-S, Target Model=Visformer-S2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=Visformer-S, Target Model=Visformer-S2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=Visformer-S, Target Model=Visformer-S2023.03 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SVRETarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| AdaEATarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MITarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MITarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MEFTarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MEFTarget Ensemble Model=Inc-v32026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MEFTarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| OPSTarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-OPSTarget Ensemble Model=Inc-v32026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-OPSTarget Ensemble Model=Res342026.02 | 100 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MIMSource Model=Visformer-S, Target Model=Visformer-S2023.03 | 99.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MITarget Ensemble Model=Inc-v32026.02 | 99.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MEFTarget Ensemble Model=Inc-v32026.02 | 99.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| OPSTarget Ensemble Model=Inc-v32026.02 | 99.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-OPSTarget Ensemble Model=Inc-v42026.02 | 99.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MIMSource Model=CaiT-S/24, Target Model=CaiT-S/242023.03 | 99.8 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-OPSTarget Ensemble Model=IncRes-v22026.02 | 99.8 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=PiT-B, Target Model=PiT-B2023.03 | 99.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=CaiT-S/24, Target Model=CaiT-S/242023.03 | 99.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| OPSTarget Ensemble Model=Inc-v42026.02 | 99.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=ViT-B/16, Target Model=ViT-B/162023.03 | 99.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| AdaEATarget Ensemble Model=Inc-v32026.02 | 99.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MITarget Ensemble Model=Inc-v32026.02 | 99.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| OPSTarget Ensemble Model=IncRes-v22026.02 | 99.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SVRETarget Ensemble Model=Inc-v32026.02 | 99.5 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=CaiT-S/24, Target Model=CaiT-S/242023.03 | 98.8 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=CaiT-S/24, Target Model=DeiT-B2023.03 | 98.8 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=CaiT-S/24, Target Model=ConViT-B2023.03 | 97.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MEFTarget Ensemble Model=Inc-v42026.02 | 97.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=CaiT-S/24, Target Model=DeiT-B2023.03 | 97.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MEFTarget Ensemble Model=Inc-v42026.02 | 97.1 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=CaiT-S/24, Target Model=ConViT-B2023.03 | 96.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MEFTarget Ensemble Model=IncRes-v22026.02 | 96.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=CaiT-S/24, Target Model=DeiT-B2023.03 | 95.7 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MEFTarget Ensemble Model=IncRes-v22026.02 | 95.2 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=CaiT-S/24, Target Model=ConViT-B2023.03 | 94 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=CaiT-S/24, Target Model=TNT-S2023.03 | 92.8 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=CaiT-S/24, Target Model=TNT-S2023.03 | 91.1 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MIMSource Model=CaiT-S/24, Target Model=DeiT-B2023.03 | 90.2 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MIMSource Model=CaiT-S/24, Target Model=ConViT-B2023.03 | 88.5 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=CaiT-S/24, Target Model=DeiT-B2023.03 | 88.5 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=CaiT-S/24, Target Model=ViT-B/162023.03 | 88.2 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=CaiT-S/24, Target Model=ConViT-B2023.03 | 88.1 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=Visformer-S2023.03 | 87.3 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=TNT-S2023.03 | 87.1 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=CaiT-S/24, Target Model=TNT-S2023.03 | 86.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=CaiT-S/24, Target Model=ViT-B/162023.03 | 86 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=ViT-B/16, Target Model=DeiT-B2023.03 | 85.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=ViT-B/16, Target Model=ConViT-B2023.03 | 85.4 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=ViT-B/16, Target Model=CaiT-S/242023.03 | 85 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=CaiT-S/24, Target Model=ViT-B/162023.03 | 82.4 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| VMISource Model=CaiT-S/24, Target Model=TNT-S2023.03 | 82.3 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=LeViT-2562023.03 | 81.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=CaiT-S/242023.03 | 80.2 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=ViT-B/16, Target Model=ConViT-B2023.03 | 79.5 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MDCS-MITarget Ensemble Model=Inc-v42026.02 | 79.3 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=ViT-B/16, Target Model=CaiT-S/242023.03 | 78.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| PNASource Model=ViT-B/16, Target Model=DeiT-B2023.03 | 78.6 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=ViT-B/16, Target Model=ConViT-B2023.03 | 78.4 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| TGRSource Model=PiT-B, Target Model=DeiT-B2023.03 | 78 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=ViT-B/16, Target Model=DeiT-B2023.03 | 77.9 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| SGMSource Model=ViT-B/16, Target Model=CaiT-S/242023.03 | 77.1 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — |