Adversarial Attack on Pascal
0.38T ScoreGLOW
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| GLOWAttack Setting=Zero query black-box, Similarity Constraint=R2-52023.02 | 0.38 | 0.14 | 0.1 | |
| GLOWAttack Setting=Zero query black-box, Similarity Constraint=R2-952023.02 | 0.38 | 0.23 | 0.19 | |
| CaiAttack Setting=Zero query black-box, Similarity Constraint=R2-52023.02 | 0.37 | 0.09 | 0.07 | |
| GLOWAttack Setting=White-box, Similarity Constraint=R2-52023.02 | 0.35 | 0.5 | 0.24 | |
| GLOWAttack Setting=White-box, Similarity Constraint=R2-502023.02 | 0.35 | 0.55 | 0.29 | |
| GLOWAttack Setting=Zero query black-box, Similarity Constraint=R2-502023.02 | 0.35 | 0.18 | 0.15 | |
| GLOWAttack Setting=White-box, Similarity Constraint=R2-952023.02 | 0.33 | 0.48 | 0.29 | |
| TOG+SAMEAttack Setting=Zero query black-box, Similarity Constraint=R2-52023.02 | 0.3 | 0.1 | 0.06 | |
| TOG+RANDAttack Setting=Zero query black-box, Similarity Constraint=R2-52023.02 | 0.28 | 0.08 | 0.03 | |
| TOGAttack Setting=Zero query black-box, Similarity Constraint=R2-52023.02 | 0.26 | 0.08 | 0.04 | |
| CaiAttack Setting=Zero query black-box, Similarity Constraint=R2-502023.02 | 0.26 | 0.12 | 0.13 | |
| TOG+SAMEAttack Setting=Zero query black-box, Similarity Constraint=R2-952023.02 | 0.26 | 0.17 | 0.16 | |
| TOGAttack Setting=Zero query black-box, Similarity Constraint=R2-502023.02 | 0.25 | 0.15 | 0.12 | |
| TOG+SAMEAttack Setting=Zero query black-box, Similarity Constraint=R2-502023.02 | 0.25 | 0.19 | 0.18 | |
| TOG+RANDAttack Setting=Zero query black-box, Similarity Constraint=R2-952023.02 | 0.25 | 0.15 | 0.07 | |
| CaiAttack Setting=White-box, Similarity Constraint=R2-52023.02 | 0.24 | 0.3 | 0.1 | |
| TOG+SAMEAttack Setting=White-box, Similarity Constraint=R2-52023.02 | 0.23 | 0.35 | 0.22 | |
| TOG+RANDAttack Setting=White-box, Similarity Constraint=R2-52023.02 | 0.22 | 0.29 | 0.09 | |
| TOG+SAMEAttack Setting=White-box, Similarity Constraint=R2-502023.02 | 0.22 | 0.43 | 0.27 | |
| CaiAttack Setting=White-box, Similarity Constraint=R2-502023.02 | 0.22 | 0.38 | 0.15 | |
| TOGAttack Setting=Zero query black-box, Similarity Constraint=R2-952023.02 | 0.21 | 0.12 | 0.15 | |
| CaiAttack Setting=Zero query black-box, Similarity Constraint=R2-952023.02 | 0.21 | 0.14 | 0.18 | |
| TOGAttack Setting=White-box, Similarity Constraint=R2-502023.02 | 0.2 | 0.44 | 0.21 | |
| TOGAttack Setting=White-box, Similarity Constraint=R2-952023.02 | 0.2 | 0.34 | 0.15 | |
| TOG+RANDAttack Setting=White-box, Similarity Constraint=R2-952023.02 | 0.2 | 0.34 | 0.15 | |
| TOG+RANDAttack Setting=Zero query black-box, Similarity Constraint=R2-502023.02 | 0.2 | 0.12 | 0.05 | |
| TOG+SAMEAttack Setting=White-box, Similarity Constraint=R2-952023.02 | 0.19 | 0.38 | 0.26 | |
| CaiAttack Setting=White-box, Similarity Constraint=R2-952023.02 | 0.19 | 0.37 | 0.16 | |
| TOGAttack Setting=White-box, Similarity Constraint=R2-52023.02 | 0.18 | 0.38 | 0.14 | |
| TOG+RANDAttack Setting=White-box, Similarity Constraint=R2-502023.02 | 0.18 | 0.35 | 0.23 |