Adversarial Attack on SVHN D
65ASRRL Min Norm
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| RL Min NormVictim Model=VGG-162025.03 | 65 | 191 | 0.41 | |
| RL Min NormVictim Model=VGG-162025.03 | 65 | 186 | 0.42 | |
| RL Max LossVictim Model=VGG-162025.03 | 60 | 255 | 0.3 | |
| RL Max LossVictim Model=VGG-162025.03 | 59 | 278 | 0.29 | |
| RL Min NormVictim Model=ResNet-502025.03 | 53 | 249 | 0.36 | |
| RL Min NormVictim Model=ResNet-502025.03 | 49 | 265 | 0.34 | |
| SquareVictim Model=ResNet-502025.03 | 48 | 263 | 0.3 | |
| SquareVictim Model=VGG-162025.03 | 48 | 273 | 0.3 | |
| BanditsVictim Model=VGG-162025.03 | 46 | 537 | 0.3 | |
| RL Max LossVictim Model=ResNet-502025.03 | 45 | 285 | 0.3 | |
| RL Max LossVictim Model=ResNet-502025.03 | 43 | 287 | 0.29 | |
| BanditsVictim Model=ResNet-502025.03 | 39 | 556 | 0.3 | |
| HSJAVictim Model=VGG-162025.03 | 38 | 639 | 0.3 | |
| RL Max LossVictim Model=ViT-B/162025.03 | 32 | 336 | 0.3 | |
| RL Max LossVictim Model=ViT-B/162025.03 | 32 | 344 | 0.3 | |
| HSJAVictim Model=ResNet-502025.03 | 30 | 705 | 0.3 | |
| SquareVictim Model=ViT-B/162025.03 | 29 | 262 | 0.3 | |
| RL Min NormVictim Model=ViT-B/162025.03 | 20 | 187 | 0.15 | |
| RL Min NormVictim Model=ViT-B/162025.03 | 18 | 192 | 0.18 | |
| BanditsVictim Model=ViT-B/162025.03 | 14 | 589 | 0.3 | |
| HSJAVictim Model=ViT-B/162025.03 | 12 | 923 | 0.3 |