Adversarial Attack Transferability on CUB-200 2011
86.91AccuracyBenign
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| Benign2025.06 | 86.91 | — | — | — | |
| CDA2025.06 | 67.73 | 21.48 | 14.16 | 26.66 | |
| LTP2025.06 | 48.74 | 45.32 | 8.75 | 49.31 | |
| GAMA2025.06 | 48.72 | 45.41 | 9.51 | 49.67 | |
| BIA2025.06 | 47.92 | 46.13 | 8.54 | 50.26 | |
| PDCL2025.06 | 42.36 | 52.32 | 7.48 | 55.93 | |
| FACL2025.06 | 40.85 | 54.36 | 7.21 | 58.01 | |
| FACL w/ Oursmode=improvement (Δ%p)2025.06 | 3.12 | -3.79 | -3.58 | 0.7 | |
| BIA w/ Oursmode=improvement (Δ%p)2025.06 | -0.02 | 0.08 | 0.09 | 0.49 | |
| PDCL w/ Oursmode=improvement (Δ%p)2025.06 | -0.46 | 0.61 | 0.66 | 0.4 | |
| GAMA w/ Oursmode=improvement (Δ%p)2025.06 | -2.41 | 2.59 | 2.3 | -0.67 | |
| LTP w/ Oursmode=improvement (Δ%p)2025.06 | -10.43 | 11.72 | 10.87 | -0.9 | |
| CDA w/ Oursmode=improvement (Δ%p)2025.06 | -16.92 | 21.48 | 20.63 | -3.94 |