Adversarial Attack Transferability on ImageNet Target: ConViT-B 5000 images (val)
51.37Attack Success Rate (ASR)RFA+SGM
Evaluation Results
| Method | Links | |
|---|---|---|
| RFA+SGMSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 51.37 | |
| RFA+MUPSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 38.93 | |
| RFASource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 36.82 | |
| SMI-FRSM+SGMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 18.64 | |
| MFAA+SGMSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 15.04 | |
| SIA+SGMSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 12.4 | |
| SMI-FRSM+MUPSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 11.46 | |
| MFAA+MUPSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 10.81 | |
| SMI-FRSMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 10.77 | |
| MFAASource Model=ResNet-50, Attack Category=Feature-related2024.10 | 10.14 | |
| PGD+SGMSource Model=ResNet-50, Attack Category=White-box2024.10 | 7.92 | |
| SIASource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 6.63 | |
| SIA+MUPSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 6.48 | |
| PGD+MUPSource Model=ResNet-50, Attack Category=White-box2024.10 | 2.96 | |
| PGDSource Model=ResNet-50, Attack Category=White-box2024.10 | 2.78 |