Adversarial Attack Transferability on ImageNet 1k (val)
86.93ASR (VGG16)AITL+SGM
Evaluation results
| Method | Links | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AITL+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 86.93 | — | — | — | — | — | — | 86.9 | 84.76 | 87.89 | 73.89 | 44.39 | 78.71 | 61.18 | 82.08 | 78.87 | |
| AITL+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 85.87 | — | — | — | — | — | — | 85.84 | 84.03 | 87.79 | 73.86 | 40.5 | 76.02 | 58.75 | 81.45 | 78.61 | |
| AITLSource Model=P-DARTS, Category=Augmentation-related2024.10 | 85.58 | — | — | — | — | — | — | 85.44 | 83.24 | 87.25 | 73.4 | 40.13 | 76.48 | 59.19 | 81.31 | 78.49 | |
| BSR+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 82.99 | — | — | — | — | — | — | 79.7 | 71.42 | 69.21 | 62.15 | 21.59 | 62.2 | 50.81 | 52.35 | 46.98 | |
| GRA+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 75.55 | — | — | — | — | — | — | 74.97 | 65.34 | 69.1 | 51.46 | 26.04 | 64.3 | 38.96 | 53.12 | 50.25 | |
| BSR+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 72.57 | — | — | — | — | — | — | 71.2 | 56.05 | 57.14 | 43.92 | 9.89 | 42.27 | 31.56 | 40.09 | 35.35 | |
| BSRSource Model=P-DARTS, Category=Augmentation-related2024.10 | 72.11 | — | — | — | — | — | — | 70.88 | 56.43 | 57.41 | 44.24 | 9.69 | 41.86 | 31.57 | 40.65 | 35.28 | |
| GRA+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 71.66 | — | — | — | — | — | — | 73.53 | 64.96 | 68.97 | 50.01 | 20.8 | 58.1 | 32.94 | 52.74 | 49.73 | |
| GRASource Model=P-DARTS, Category=Gradient-related2024.10 | 66.34 | — | — | — | — | — | — | 67.56 | 56.31 | 60.9 | 42.16 | 16.17 | 50.78 | 26.86 | 43.86 | 41.52 | |
| MI+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 66.28 | — | — | — | — | — | — | 65.14 | 47.01 | 43.12 | 16.31 | 10.47 | 40.15 | 21.38 | 25.49 | 19.89 | |
| S^2I+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 66.12 | — | — | — | — | — | — | 63.63 | 51.22 | 51.62 | 41.17 | 15.27 | 57.49 | 32.3 | 38.49 | 36.07 | |
| SIA+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 60.87 | — | — | — | — | — | — | 55.74 | 41.93 | 42.73 | 36.86 | 10.31 | 42.09 | 26.9 | 27.3 | 23.71 | |
| GI+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 58.48 | — | — | — | — | — | — | 53.41 | 39.85 | 45.33 | 36.34 | 13.97 | 46.22 | 26.07 | 29.77 | 26.8 | |
| DTA+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 55.97 | — | — | — | — | — | — | 51.55 | 39.28 | 43.2 | 37.05 | 11.54 | 45.01 | 25.37 | 28.6 | 25.86 | |
| TAIG+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 55.42 | — | — | — | — | — | — | 52.81 | 42.07 | 44.28 | 39.44 | 11.64 | 50.11 | 27.85 | 30.16 | 26.37 | |
| MI+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 55.17 | — | — | — | — | — | — | 52.12 | 36.93 | 42.33 | 11.51 | 8.96 | 37.51 | 19.35 | 24.48 | 18.99 | |
| SIM+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 54.13 | — | — | — | — | — | — | 51.44 | 42.75 | 45.77 | 37.45 | 13.2 | 47.19 | 30.45 | 30.03 | 26.92 | |
| SMI-FRSM+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 52.66 | — | — | — | — | — | — | 50.06 | 39.05 | 41.86 | 34.49 | 12.31 | 43.3 | 25.71 | 28.17 | 25.25 | |
| DI+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 51.64 | — | — | — | — | — | — | 49.68 | 40.38 | 43.53 | 36.49 | 13.67 | 42.65 | 28.33 | 33.85 | 29.67 | |
| RFA+SGMSource Model=P-DARTS, Category=Parameter-related, SGM γ=0.62024.10 | 51.58 | — | — | — | — | — | — | 48.63 | 42.48 | 43.55 | 34.99 | 13.27 | 45.77 | 28.78 | 25.91 | 23.06 | |
| DSM+SGMSource Model=P-DARTS, Category=Parameter-related, SGM γ=0.62024.10 | 51.57 | — | — | — | — | — | — | 48.59 | 42.51 | 43.55 | 35 | 13.26 | 45.84 | 28.78 | 25.89 | 23.08 | |
| SIASource Model=P-DARTS, Category=Augmentation-related2024.10 | 51.11 | — | — | — | — | — | — | 47.95 | 30.43 | 31.67 | 22.62 | 4.02 | 28.19 | 13.39 | 19.95 | 16.81 | |
| SIA+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 51.11 | — | — | — | — | — | — | 48.24 | 30.37 | 31.72 | 22.95 | 4.15 | 28.79 | 13.32 | 20.42 | 16.91 | |
| GI+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 50.71 | — | — | — | — | — | — | 48.97 | 35.95 | 42.02 | 31.19 | 10.66 | 36.16 | 20.06 | 29.18 | 26.58 | |
| GISource Model=P-DARTS, Category=Gradient-related2024.10 | 50.37 | — | — | — | — | — | — | 48.12 | 35.23 | 41.15 | 30.48 | 10.07 | 36.33 | 20.11 | 28.86 | 26.08 | |
| DTA+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 49.92 | — | — | — | — | — | — | 47.12 | 33.41 | 38.65 | 29.44 | 7.95 | 33.99 | 17.3 | 26.62 | 23.45 | |
| DTASource Model=P-DARTS, Category=Gradient-related2024.10 | 49.16 | — | — | — | — | — | — | 46.86 | 33 | 38.16 | 28.51 | 7.82 | 33.23 | 16.86 | 25.79 | 23.21 | |
| S^2I+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 47.43 | — | — | — | — | — | — | 47.69 | 33.75 | 35.5 | 22.13 | 7.02 | 36.85 | 15.25 | 24.18 | 22.47 | |
| S^2ISource Model=P-DARTS, Category=Augmentation-related2024.10 | 46.43 | — | — | — | — | — | — | 46.03 | 32.93 | 34.24 | 21.61 | 6.42 | 35.69 | 14.87 | 23.22 | 22.08 | |
| PGN+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 45.55 | — | — | — | — | — | — | 43.42 | 30.41 | 33.82 | 21.74 | 10.77 | 36.5 | 17.8 | 21.01 | 18.27 | |
| MISource Model=P-DARTS, Category=Gradient-related2024.10 | 44.27 | — | — | — | — | — | — | 42.02 | 29.61 | 34.64 | 15.09 | 7.95 | 31.09 | 16.17 | 24.16 | 18.95 | |
| Admix+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 43.75 | — | — | — | — | — | — | 40.85 | 29.2 | 30.25 | 26.17 | 7.09 | 35.94 | 18.87 | 18.89 | 16.8 | |
| STM+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 42.69 | — | — | — | — | — | — | 40.6 | 28.92 | 32.82 | 20.96 | 10.13 | 33.15 | 16.91 | 20.15 | 17.07 | |
| DI+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 42.66 | — | — | — | — | — | — | 41.94 | 33.59 | 38.18 | 27.13 | 7.99 | 30.15 | 17.97 | 29.86 | 26.18 | |
| AI-FGTM+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 42.3 | — | — | — | — | — | — | 39.18 | 27.57 | 31.31 | 25.43 | 8.64 | 34.08 | 18.62 | 20.26 | 18.03 | |
| PC-I+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 42.18 | — | — | — | — | — | — | 39.51 | 28.72 | 30.5 | 25.82 | 8.01 | 34.54 | 19.56 | 19.98 | 17.54 | |
| SIM+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 42.06 | — | — | — | — | — | — | 41.86 | 30.67 | 34.62 | 22.03 | 6.11 | 32.65 | 15.44 | 21.35 | 19.45 | |
| SMI-FRSM+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 41.71 | — | — | — | — | — | — | 42.37 | 30.45 | 34.16 | 22.83 | 7.25 | 30.6 | 15.85 | 22.95 | 20.18 | |
| DISource Model=P-DARTS, Category=Augmentation-related2024.10 | 41.58 | — | — | — | — | — | — | 41.23 | 32.39 | 37.15 | 25.58 | 7.89 | 29.73 | 17.41 | 29.04 | 26.02 | |
| SMI-FRSMSource Model=P-DARTS, Category=Gradient-related2024.10 | 40.31 | — | — | — | — | — | — | 39.9 | 29.1 | 33.09 | 22.32 | 6.86 | 29.58 | 15.1 | 22.1 | 19.75 | |
| MFAA+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 39.74 | — | — | — | — | — | — | 36.24 | 24.03 | 23.49 | 21.87 | 5.51 | 29.34 | 12.69 | 15.56 | 12.72 | |
| STMSource Model=P-DARTS, Category=Augmentation-related2024.10 | 39.41 | — | — | — | — | — | — | 38.76 | 26.14 | 30.41 | 15.02 | 5.28 | 23.9 | 9.75 | 18.85 | 16.37 | |
| STM+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 39.36 | — | — | — | — | — | — | 39.53 | 26.75 | 30.83 | 14.82 | 5.55 | 24.2 | 9.86 | 18.61 | 16.67 | |
| RPA+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 38.55 | — | — | — | — | — | — | 33.84 | 23.32 | 22.64 | 20.61 | 5.35 | 28.49 | 12.81 | 14.67 | 12.13 | |
| ILPD+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 38.31 | — | — | — | — | — | — | 34.51 | 24.28 | 24.7 | 21.69 | 6.57 | 29.14 | 14.91 | 16.13 | 13.32 | |
| TAIG+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 38.24 | — | — | — | — | — | — | 38.28 | 29.85 | 32.77 | 21.26 | 6.2 | 31.44 | 15.25 | 20.74 | 18.66 | |
| RFA+MUPSource Model=P-DARTS, Category=Parameter-related2024.10 | 38.17 | — | — | — | — | — | — | 38.22 | 29.82 | 32.75 | 22.45 | 6.82 | 30.93 | 16.13 | 19.59 | 17.14 | |
| FIA+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 37.88 | — | — | — | — | — | — | 33.66 | 21.68 | 21.94 | 20.24 | 5.18 | 27.98 | 12.1 | 14.64 | 11.62 | |
| FMAA+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 37.66 | — | — | — | — | — | — | 33.24 | 21.62 | 21.98 | 20.28 | 5.16 | 27.88 | 12.2 | 14.56 | 11.51 | |
| NAA+SGMSource Model=P-DARTS, Category=Feature-related, SGM γ=0.62024.10 | 37.54 | — | — | — | — | — | — | 33.56 | 23.66 | 24.08 | 21.08 | 6.66 | 28.82 | 13.92 | 15.7 | 13.1 | |
| RFASource Model=P-DARTS, Category=Parameter-related2024.10 | 36.46 | — | — | — | — | — | — | 36.06 | 28.71 | 30.99 | 20.79 | 6.25 | 29.16 | 15.37 | 18.34 | 16.77 | |
| PGN+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 36.3 | — | — | — | — | — | — | 36.97 | 23.68 | 26.46 | 13.27 | 5.11 | 24.82 | 8.77 | 15.8 | 14.08 | |
| AI-FGTM+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 35.85 | — | — | — | — | — | — | 34.36 | 23.28 | 26.73 | 19.45 | 5.72 | 25.51 | 12.74 | 17.79 | 16 | |
| TAIGSource Model=P-DARTS, Category=Feature-related2024.10 | 35.81 | — | — | — | — | — | — | 35.3 | 26.83 | 29.98 | 19.72 | 5.74 | 28.65 | 14.45 | 19.41 | 17.02 | |
| PGNSource Model=P-DARTS, Category=Gradient-related2024.10 | 35.74 | — | — | — | — | — | — | 35.99 | 22.82 | 25.6 | 12.79 | 4.69 | 23.73 | 8.38 | 15.29 | 13.47 | |
| MaskBlock+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 35.15 | — | — | — | — | — | — | 31.94 | 21.78 | 23.33 | 20.01 | 5.65 | 28.51 | 14.27 | 13.56 | 11.66 | |
| AI-FGTMSource Model=P-DARTS, Category=Gradient-related2024.10 | 33.52 | — | — | — | — | — | — | 32.79 | 21.99 | 24.87 | 17.86 | 4.89 | 23.8 | 11.51 | 16.71 | 14.56 | |
| Admix+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 33.39 | — | — | — | — | — | — | 32.15 | 18.84 | 21.19 | 14.06 | 3.27 | 23.93 | 8.71 | 12.6 | 10.91 | |
| SIMSource Model=P-DARTS, Category=Augmentation-related2024.10 | 32.96 | — | — | — | — | — | — | 32.62 | 24.57 | 27.67 | 17.59 | 5.1 | 26.32 | 12.68 | 17.65 | 14.96 | |
| PI+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 30.95 | — | — | — | — | — | — | 28.68 | 19.33 | 20.39 | 17.07 | 5.04 | 25.94 | 12.71 | 12.62 | 10.85 | |
| PGD+SGMSource Model=P-DARTS, Category=White-box, SGM γ=0.62024.10 | 30.53 | — | — | — | — | — | — | 29.03 | 18.97 | 20.46 | 17.29 | 5.02 | 25.72 | 12.75 | 12.61 | 10.82 | |
| DSM+MUPSource Model=P-DARTS, Category=Parameter-related2024.10 | 30.35 | — | — | — | — | — | — | 29.71 | 14.36 | 15.62 | 8.99 | 1.92 | 18.39 | 5 | 8.24 | 6.71 | |
| VT+SGMSource Model=P-DARTS, Category=Augmentation-related, SGM γ=0.62024.10 | 28.83 | — | — | — | — | — | — | 26.91 | 18.17 | 19.31 | 12.98 | 5.38 | 23.44 | 10.74 | 11.79 | 9.82 | |
| VAI+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 28.13 | — | — | — | — | — | — | 26.45 | 14.38 | 15.49 | 12.46 | 3.19 | 21.45 | 7.37 | 9.92 | 8.56 | |
| DSMSource Model=P-DARTS, Category=Parameter-related2024.10 | 27.66 | — | — | — | — | — | — | 26.02 | 11.94 | 13.15 | 7.4 | 1.37 | 16.45 | 4 | 7.05 | 5.44 | |
| AdmixSource Model=P-DARTS, Category=Augmentation-related2024.10 | 27.65 | — | — | — | — | — | — | 26.59 | 16.08 | 18.03 | 11.54 | 2.78 | 20.42 | 7.75 | 10.93 | 9.66 | |
| MFAA+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 26.78 | — | — | — | — | — | — | 23.58 | 14.52 | 15.66 | 11.85 | 2.68 | 17.19 | 6.58 | 10.64 | 8.23 | |
| ILPD+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 26.41 | — | — | — | — | — | — | 23.93 | 15.38 | 16.58 | 12.11 | 3.1 | 17.68 | 7.26 | 10.99 | 8.77 | |
| PC-ISource Model=P-DARTS, Category=Gradient-related2024.10 | 25.81 | — | — | — | — | — | — | 25.66 | 15.93 | 17.56 | 11.04 | 2.94 | 18.33 | 7.5 | 11.17 | 9.57 | |
| FIA+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 25.7 | — | — | — | — | — | — | 23.31 | 13.73 | 14.52 | 11.25 | 2.71 | 16.26 | 6.19 | 9.82 | 7.83 | |
| NAA+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 25.48 | — | — | — | — | — | — | 23.57 | 14.71 | 15.79 | 12.08 | 3.3 | 17.47 | 7.17 | 10.33 | 8.47 | |
| FMAA+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 25.46 | — | — | — | — | — | — | 23.44 | 14.46 | 14.3 | 11.48 | 2.56 | 16.36 | 6.62 | 10.62 | 8.16 | |
| VAI+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 25.31 | — | — | — | — | — | — | 23.74 | 12.98 | 14.75 | 10.59 | 2.25 | 16.54 | 5.39 | 9.52 | 8.14 | |
| VAISource Model=P-DARTS, Category=Gradient-related2024.10 | 25.29 | — | — | — | — | — | — | 23.86 | 13.28 | 14.47 | 10.56 | 2.24 | 16.25 | 5.16 | 9.84 | 8.28 | |
| MFAASource Model=P-DARTS, Category=Feature-related2024.10 | 25.21 | — | — | — | — | — | — | 23.18 | 13.83 | 14.69 | 11.39 | 2.63 | 15.82 | 6.36 | 10 | 7.87 | |
| ILPDSource Model=P-DARTS, Category=Feature-related2024.10 | 25.06 | — | — | — | — | — | — | 23.4 | 15.08 | 15.82 | 11.79 | 3.1 | 17.28 | 7.15 | 11.05 | 8.63 | |
| RPASource Model=P-DARTS, Category=Feature-related2024.10 | 25 | — | — | — | — | — | — | 22.43 | 13.81 | 14.38 | 10.96 | 2.52 | 16.04 | 5.99 | 9.6 | 7.79 | |
| FMAASource Model=P-DARTS, Category=Feature-related2024.10 | 24.84 | — | — | — | — | — | — | 22.4 | 13.28 | 13.98 | 11.1 | 2.52 | 15.9 | 6.24 | 9.22 | 7.44 | |
| NAASource Model=P-DARTS, Category=Feature-related2024.10 | 24.46 | — | — | — | — | — | — | 22.71 | 14.2 | 15.07 | 11.62 | 3.04 | 16.63 | 7.15 | 10.23 | 7.95 | |
| RAP+SGMSource Model=P-DARTS, Category=Gradient-related, SGM γ=0.62024.10 | 24.31 | — | — | — | — | — | — | 23.18 | 12.69 | 13.64 | 11.18 | 2.53 | 19.95 | 7.16 | 8.73 | 7.25 | |
| FIASource Model=P-DARTS, Category=Feature-related2024.10 | 24.2 | — | — | — | — | — | — | 22.3 | 13.14 | 13.78 | 10.94 | 2.34 | 16.1 | 6.04 | 9.86 | 7.58 | |
| VT+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 24.09 | — | — | — | — | — | — | 24.32 | 15.14 | 16.01 | 8.37 | 2.58 | 16.54 | 6.09 | 10.1 | 8.65 | |
| MaskBlock+MUPSource Model=P-DARTS, Category=Augmentation-related2024.10 | 23.73 | — | — | — | — | — | — | 22.71 | 13.08 | 14.15 | 8.87 | 2.17 | 16.22 | 5.67 | 8.31 | 7.27 | |
| MaskBlockSource Model=P-DARTS, Category=Augmentation-related2024.10 | 23.2 | — | — | — | — | — | — | 22.64 | 12.48 | 13.8 | 9.1 | 2.17 | 16 | 5.64 | 8.56 | 7.17 | |
| VTSource Model=P-DARTS, Category=Augmentation-related2024.10 | 23.18 | — | — | — | — | — | — | 23.3 | 14.49 | 15.67 | 7.96 | 2.5 | 16.06 | 5.62 | 9.44 | 8.31 | |
| PGD+MUPSource Model=P-DARTS, Category=White-box2024.10 | 20.96 | — | — | — | — | — | — | 20.11 | 11.15 | 11.94 | 7.82 | 1.77 | 14.52 | 4.91 | 7.43 | 6.68 | |
| PI+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 20.71 | — | — | — | — | — | — | 19.56 | 11.3 | 12.19 | 7.9 | 1.86 | 14.12 | 4.85 | 7.93 | 6.7 | |
| PC-I+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 20.71 | — | — | — | — | — | — | 19.56 | 11.3 | 12.19 | 7.9 | 1.86 | 14.12 | 4.85 | 7.93 | 6.7 | |
| PISource Model=P-DARTS, Category=Gradient-related2024.10 | 20.2 | — | — | — | — | — | — | 19.99 | 10.75 | 11.83 | 7.55 | 1.74 | 14.15 | 4.72 | 7.56 | 6.75 | |
| PGDSource Model=P-DARTS, Category=White-box2024.10 | 19.89 | — | — | — | — | — | — | 19.89 | 11.32 | 11.96 | 7.68 | 1.74 | 13.97 | 4.97 | 7.61 | 6.8 | |
| RAP+MUPSource Model=P-DARTS, Category=Gradient-related2024.10 | 18.79 | — | — | — | — | — | — | 17.73 | 9.58 | 10.7 | 6.98 | 1.65 | 13.09 | 4.07 | 7.01 | 5.81 | |
| RAPSource Model=P-DARTS, Category=Gradient-related2024.10 | 18.7 | — | — | — | — | — | — | 18.28 | 10.23 | 10.58 | 6.87 | 1.62 | 13.02 | 4.23 | 7.32 | 5.98 | |
| RPA+MUPSource Model=P-DARTS, Category=Feature-related2024.10 | 0 | — | — | — | — | — | — | 0 | 0 | 0 | 0 | 0.12 | 1.74 | 0.26 | 0.24 | 0.24 | |
| AutoAttackSource Model=Res50, Target Model=Res50, Attack Category=Gradient-based, Attack Setting=White-box2026.02 | — | 0.995 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| BenignSurrogate model=VGG19, Black-box target=(a) Res50, Target Architecture=CNN2025.06 | — | — | 0.746 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| BIASurrogate model=VGG19, Black-box target=Average (Avg.)2025.06 | — | — | — | — | 1.1 | — | — | — | — | — | — | — | — | — | — | — | |
| BIASurrogate model=Res152, Black-box target=Average (Avg.)2025.06 | — | — | — | — | 2.74 | — | — | — | — | — | — | — | — | — | — | — | |
| BIASurrogate model=Dense169, Black-box target=Average (Avg.)2025.06 | — | — | — | — | 3.69 | — | — | — | — | — | — | — | — | — | — | — | |
| BIASurrogate model=VGG19, Black-box target=(a) Res50, Target Architecture=CNN2025.06 | — | — | — | — | 1.93 | — | — | — | — | — | — | — | — | — | — | — | |
| BIASurrogate model=VGG19, Black-box target=(j), Target Architecture=CNN2025.06 | — | — | — | — | 5.18 | — | — | — | — | — | — | — | — | — | — | — |