Adversarial Attack on Oxford Pets 2012 (test)
100ASR (ResNet-50)PGD
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| PGDSurrogate Model=ResNet-502025.05 | 100 | 10.3 | 3.8 | 38 | — | — | |
| AASurrogate Model=ResNet-502025.05 | 100 | 8.1 | 4.3 | 37.5 | — | — | |
| AdvClassSurrogate Model=ResNet-50, Targeting strategy=random targeted (T)2025.05 | 99.5 | 17.3 | 19.5 | 45.4 | 5.3 | 80.9 | |
| AdvClassSurrogate Model=ResNet-50, Targeting strategy=similarity targeted (U)2025.05 | 98.9 | 19.5 | 16.8 | 45 | 5 | 81.3 | |
| NatADiffSurrogate Model=ResNet-50, Targeting strategy=random targeted (T)2025.05 | 97.8 | 30.8 | 27.6 | 52.1 | 4.2 | 78.9 | |
| NatADiffSurrogate Model=ResNet-50, Targeting strategy=similarity targeted (U)2025.05 | 96.8 | 37.3 | 35.7 | 56.6 | 5.5 | 80.2 | |
| NatADiffSurrogate Model=ResNet-152, Targeting strategy=similarity targeted (U)2025.05 | 57.8 | 98.9 | 48.6 | 68.5 | 5.2 | 79.6 | |
| NatADiffSurrogate Model=ViT, Targeting strategy=random targeted (T)2025.05 | 56.2 | 29.2 | 100 | 61.8 | 4.9 | 80.3 | |
| NatADiffSurrogate Model=ViT, Targeting strategy=similarity targeted (U)2025.05 | 54.6 | 46.5 | 100 | 67 | 5.3 | 80.1 | |
| NatADiffSurrogate Model=ResNet-152, Targeting strategy=random targeted (T)2025.05 | 51.9 | 95.7 | 37.3 | 61.6 | 5.7 | 79.4 | |
| AdvClassSurrogate Model=ResNet-152, Targeting strategy=similarity targeted (U)2025.05 | 37.3 | 98.9 | 26.5 | 54.2 | 6.9 | 80.9 | |
| AdvClassSurrogate Model=ResNet-152, Targeting strategy=random targeted (T)2025.05 | 34.6 | 98.4 | 22.2 | 51.7 | 7.2 | 80.3 | |
| AdvClassSurrogate Model=ViT, Targeting strategy=random targeted (T)2025.05 | 28.1 | 22.2 | 100 | 50.1 | 6.7 | 80.2 | |
| AdvClassSurrogate Model=ViT, Targeting strategy=similarity targeted (U)2025.05 | 24.3 | 24.3 | 100 | 49.5 | 6.7 | 80.1 | |
| PGDSurrogate Model=ResNet-1522025.05 | 14.6 | 99.5 | 9.2 | 41.1 | — | — | |
| PGDSurrogate Model=ViT2025.05 | 13 | 10.8 | 100 | — | — | — | |
| AASurrogate Model=ResNet-1522025.05 | 12.4 | 100 | 6.5 | 39.6 | — | — | |
| AASurrogate Model=ViT2025.05 | 7.6 | 8.6 | 97.3 | 37.8 | — | — | |
| CleanSurrogate Model=None2025.05 | 6 | 8.6 | 3.8 | 6.1 | — | — |