Adversarial Attack on Tiny-ImageNet (val)
0.113Median L2 DistanceSurFree
Evaluation results
| Method | Links | ||
|---|---|---|---|
| SurFreeTarget Model=ResNet-182021.12 | 0.113 | 0.652 | |
| PAR+SurFreeTarget Model=ResNet-182021.12 | 0.14 | 0.599 | |
| PAR+BBATarget Model=ResNet-182021.12 | 0.142 | 0.605 | |
| Biased Boundary AttackTarget Model=ResNet-182021.12 | 0.23 | 0.787 | |
| PAR+CABTarget Model=ResNet-182021.12 | 0.248 | 0.728 | |
| PAR+EvoTarget Model=ResNet-182021.12 | 0.294 | 0.882 | |
| PAR+BoundaryTarget Model=ResNet-182021.12 | 0.296 | 0.813 | |
| PAR+HSJATarget Model=ResNet-182021.12 | 0.396 | 1.067 | |
| CABTarget Model=ResNet-182021.12 | 0.397 | 0.977 | |
| PAR+Sign-OPTTarget Model=ResNet-182021.12 | 0.433 | 0.957 | |
| Patch-wise Adversarial RemovalTarget Model=ResNet-182021.12 | 0.45 | 1.104 | |
| Evolutionary AttackTarget Model=ResNet-182021.12 | 0.522 | 1.518 | |
| Boundary AttackTarget Model=ResNet-182021.12 | 0.577 | 1.194 | |
| SurFreeTarget Model=Inception-v32021.12 | 0.627 | 1.233 | |
| PAR+SurFreeTarget Model=Inception-v32021.12 | 0.629 | 1.171 | |
| PAR+BBATarget Model=Inception-v32021.12 | 0.723 | 1.25 | |
| PAR+CABTarget Model=Inception-v32021.12 | 0.803 | 1.326 | |
| PAR+BBATarget Model=NASNet2021.12 | 0.948 | 1.463 | |
| PAR+SurFreeTarget Model=NASNet2021.12 | 0.952 | 1.453 | |
| HSJATarget Model=ResNet-182021.12 | 0.959 | 2.762 | |
| SurFreeTarget Model=NASNet2021.12 | 0.963 | 1.639 | |
| PAR+CABTarget Model=NASNet2021.12 | 0.968 | 1.474 | |
| PAR+BoundaryTarget Model=Inception-v32021.12 | 1.034 | 1.457 | |
| PAR+SurFreeTarget Model=Inception-ResNet-v22021.12 | 1.087 | 1.479 | |
| Biased Boundary AttackTarget Model=Inception-v32021.12 | 1.091 | 1.669 | |
| CABTarget Model=Inception-v32021.12 | 1.102 | 1.819 | |
| PAR+CABTarget Model=Inception-ResNet-v22021.12 | 1.11 | 1.604 | |
| PAR+BBATarget Model=Inception-ResNet-v22021.12 | 1.126 | 1.59 | |
| SurFreeTarget Model=Inception-ResNet-v22021.12 | 1.126 | 1.772 | |
| PAR+EvoTarget Model=Inception-v32021.12 | 1.183 | 1.701 | |
| CABTarget Model=NASNet2021.12 | 1.23 | 2.301 | |
| Biased Boundary AttackTarget Model=NASNet2021.12 | 1.361 | 1.815 | |
| CABTarget Model=Inception-ResNet-v22021.12 | 1.372 | 2.245 | |
| PAR+HSJATarget Model=Inception-v32021.12 | 1.392 | 1.899 | |
| PAR+BoundaryTarget Model=NASNet2021.12 | 1.425 | 1.773 | |
| PAR+Sign-OPTTarget Model=Inception-v32021.12 | 1.426 | 1.926 | |
| Patch-wise Adversarial RemovalTarget Model=Inception-v32021.12 | 1.457 | 1.961 | |
| PAR+BoundaryTarget Model=Inception-ResNet-v22021.12 | 1.478 | 1.852 | |
| PAR+EvoTarget Model=NASNet2021.12 | 1.532 | 1.835 | |
| Boundary AttackTarget Model=Inception-v32021.12 | 1.552 | 2.091 | |
| Biased Boundary AttackTarget Model=Inception-ResNet-v22021.12 | 1.565 | 2.041 | |
| PAR+Sign-OPTTarget Model=NASNet2021.12 | 1.573 | 2.008 | |
| PAR+EvoTarget Model=Inception-ResNet-v22021.12 | 1.662 | 2.01 | |
| PAR+HSJATarget Model=NASNet2021.12 | 1.668 | 1.992 | |
| PAR+Sign-OPTTarget Model=Inception-ResNet-v22021.12 | 1.712 | 2.012 | |
| Patch-wise Adversarial RemovalTarget Model=NASNet2021.12 | 1.723 | 2.022 | |
| PAR+HSJATarget Model=Inception-ResNet-v22021.12 | 1.793 | 2.236 | |
| Patch-wise Adversarial RemovalTarget Model=Inception-ResNet-v22021.12 | 1.805 | 2.279 | |
| Boundary AttackTarget Model=NASNet2021.12 | 1.967 | 2.388 | |
| Evolutionary AttackTarget Model=Inception-v32021.12 | 2.043 | 2.971 | |
| Sign-OPTTarget Model=ResNet-182021.12 | 2.134 | 4.293 | |
| Boundary AttackTarget Model=Inception-ResNet-v22021.12 | 2.38 | 2.807 | |
| Evolutionary AttackTarget Model=NASNet2021.12 | 2.411 | 3.448 | |
| InitialTarget Model=ResNet-182021.12 | 2.542 | 5.024 | |
| Evolutionary AttackTarget Model=Inception-ResNet-v22021.12 | 2.892 | 3.516 | |
| HSJATarget Model=Inception-v32021.12 | 3.479 | 4.576 | |
| HSJATarget Model=NASNet2021.12 | 4.226 | 5.237 | |
| HSJATarget Model=Inception-ResNet-v22021.12 | 5.053 | 5.603 | |
| Sign-OPTTarget Model=Inception-v32021.12 | 6.669 | 7.268 | |
| Sign-OPTTarget Model=Inception-ResNet-v22021.12 | 7.037 | 8.274 | |
| Sign-OPTTarget Model=NASNet2021.12 | 7.332 | 7.394 | |
| InitialTarget Model=Inception-v32021.12 | 8.238 | 8.402 | |
| InitialTarget Model=NASNet2021.12 | 8.853 | 8.428 | |
| InitialTarget Model=Inception-ResNet-v22021.12 | 10.255 | 9.933 |