Adversarial Attack on Visual Wake Words
91.3AccuracyZOO
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| ZOOPrecision=DNN (32-bit floating-point), Attack Category=Gray-Box2026.06 | 91.3 | 54 | 37.3 | 0.2 | |
| Square-L2Precision=DNN (32-bit floating-point), Attack Category=Gray-Box2026.06 | 91.3 | 45.3 | 46 | 0.28 | |
| Square-L∞Precision=DNN (32-bit floating-point), Attack Category=Gray-Box2026.06 | 91.3 | 37.6 | 53.7 | 0.01 | |
| BoundaryPrecision=DNN (32-bit floating-point), Attack Category=Black-Box2026.06 | 91.3 | 91.3 | 0 | 0 | |
| GeoDAPrecision=DNN (32-bit floating-point), Attack Category=Black-Box2026.06 | 91.3 | 91.3 | 0 | 0.03 | |
| ZOOPrecision=QNN (8-bit integer), Attack Category=Gray-Box2026.06 | 91 | 84 | 7 | 0.09 | |
| Square-L2Precision=QNN (8-bit integer), Attack Category=Gray-Box2026.06 | 91 | 64.6 | 26.4 | 0.32 | |
| Square-L∞Precision=QNN (8-bit integer), Attack Category=Gray-Box2026.06 | 91 | 86 | 5 | 0.01 | |
| BoundaryPrecision=QNN (8-bit integer), Attack Category=Black-Box2026.06 | 91 | 91 | 0 | 0 | |
| GeoDAPrecision=QNN (8-bit integer), Attack Category=Black-Box2026.06 | 91 | 91 | 0 | 0.03 | |
| PGDPrecision=DNN (32-bit floating-point), Attack Category=Extraction → White-Box2026.06 | 86.5 | 74.4 | 12.1 | 0.03 | |
| FGSMPrecision=DNN (32-bit floating-point), Attack Category=Extraction → White-Box2026.06 | 86.5 | 75.5 | 11 | 0.03 | |
| PGDPrecision=QNN (8-bit integer), Attack Category=Extraction → White-Box2026.06 | 86.1 | 75.7 | 10.4 | 0.03 | |
| FGSMPrecision=QNN (8-bit integer), Attack Category=Extraction → White-Box2026.06 | 86.1 | 73.4 | 12.7 | 0.03 |