Adversarial Attack on Mini-ImageNet
84.4Attack Success RateSDM
Evaluation Results
| Method | Links | |
|---|---|---|
| SDMTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 84.4 | |
| SDMTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 83.03 | |
| C&WTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 81.74 | |
| APGDTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 81.52 | |
| SDMTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 81.46 | |
| SDMTarget Architecture=WideResNet-28-10, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 81.06 | |
| PGDTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 80.8 | |
| C&WTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 80.47 | |
| SDMTarget Architecture=ResNet-34, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 80.24 | |
| SDMTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 79.97 | |
| APGDTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 79.15 | |
| SDMTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 79.05 | |
| SDMTarget Architecture=WideResNet-28-10, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 79.03 | |
| C&WTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 78.96 | |
| C&WTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 78.88 | |
| PGDTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 78.34 | |
| APGDTarget Architecture=WideResNet-28-10, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 78.26 | |
| APGDTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 77.57 | |
| PGDTarget Architecture=WideResNet-28-10, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 77.52 | |
| SDMTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 77.32 | |
| SDMTarget Architecture=ResNet-34, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 77.14 | |
| C&WTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 76.8 | |
| SDMTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 76.69 | |
| APGDTarget Architecture=ResNet-34, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 76.52 | |
| SDMTarget Architecture=WideResNet-28-10, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 76.2 | |
| PGDTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 75.97 | |
| PGDTarget Architecture=ResNet-34, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 75.51 | |
| SDMTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 75.44 | |
| C&WTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 74.82 | |
| SDMTarget Architecture=WideResNet-28-10, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 74.59 | |
| C&WTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 74.42 | |
| SDMTarget Architecture=ResNet-34, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 74.24 | |
| APGDTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 74.2 | |
| APGDTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 73.89 | |
| APGDTarget Architecture=WideResNet-28-10, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 73.75 | |
| PGDTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 73.52 | |
| PGDTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 73.49 | |
| C&WTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 73.03 | |
| PGDTarget Architecture=WideResNet-28-10, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 72.96 | |
| APGDTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 71.85 | |
| APGDTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 71.82 | |
| APGDTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 71.69 | |
| SDMTarget Architecture=ResNet-34, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 71.47 | |
| PGDTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 71.14 | |
| PGDTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 71.1 | |
| PGDTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 70.95 | |
| APGDTarget Architecture=WideResNet-28-10, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 70.65 | |
| PGDTarget Architecture=WideResNet-28-10, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 69.93 | |
| APGDTarget Architecture=ResNet-34, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 68.71 | |
| PGDTarget Architecture=ResNet-34, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 67.96 | |
| APGDTarget Architecture=WideResNet-28-10, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 67.93 | |
| PGDTarget Architecture=WideResNet-28-10, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 67.35 | |
| APGDTarget Architecture=ResNet-34, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 65.93 | |
| PGDTarget Architecture=ResNet-34, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 65.25 | |
| C&WTarget Architecture=WideResNet-28-10, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 65.13 | |
| APGDTarget Architecture=ResNet-34, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 63.83 | |
| PGDTarget Architecture=ResNet-34, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 63.25 | |
| C&WTarget Architecture=WideResNet-28-10, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 58.96 | |
| C&WTarget Architecture=WideResNet-28-10, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 56.35 | |
| C&WTarget Architecture=WideResNet-28-10, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 54.83 | |
| C&WTarget Architecture=ResNet-34, Target Defense Method=VAT, Norm Constraint=l2-norm2026.05 | 53.22 | |
| C&WTarget Architecture=ResNet-34, Target Defense Method=MART, Norm Constraint=l2-norm2026.05 | 48.55 | |
| C&WTarget Architecture=ResNet-34, Target Defense Method=HAT, Norm Constraint=l2-norm2026.05 | 46.81 | |
| C&WTarget Architecture=ResNet-34, Target Defense Method=LOAT, Norm Constraint=l2-norm2026.05 | 45.62 |