# Adversarial Attack Transferability on ImageNet Target: ConViT-B 5000 images (val) Source: [Adversarial Attack Transferability on ImageNet Target: ConViT-B 5000 images (val)]() Collection index: [llms.txt]() Data updated: 2026-03-17T10:57:07.986Z Evaluation of the transferability of adversarial attacks when the target evaluation context is specifically defined by the ConViT-B model trained on 5000 images from the ImageNet validation set, measured by Attack Success Rate. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Adversarial Attack Transferability | | Dataset (including any stated split) | ImageNet Target: ConViT-B 5000 images (val) | | Metric | Attack Success Rate (ASR) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 15 of 15 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Attack Success Rate (ASR)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Attack Success Rate (ASR) | Result date | Report paper | | --- | --- | --- | --- | | RFA+SGM | 51.37 | Not recorded | 68fa75361e209131cea66753 | | RFA+MUP | 38.93 | Not recorded | 68fa75361e209131cea66753 | | RFA | 36.82 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM+SGM | 18.64 | Not recorded | 68fa75361e209131cea66753 | | MFAA+SGM | 15.04 | Not recorded | 68fa75361e209131cea66753 | | SIA+SGM | 12.4 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM+MUP | 11.46 | Not recorded | 68fa75361e209131cea66753 | | MFAA+MUP | 10.81 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM | 10.77 | Not recorded | 68fa75361e209131cea66753 | | MFAA | 10.14 | Not recorded | 68fa75361e209131cea66753 | | PGD+SGM | 7.92 | Not recorded | 68fa75361e209131cea66753 | | SIA | 6.63 | Not recorded | 68fa75361e209131cea66753 | | SIA+MUP | 6.48 | Not recorded | 68fa75361e209131cea66753 | | PGD+MUP | 2.96 | Not recorded | 68fa75361e209131cea66753 | | PGD | 2.78 | Not recorded | 68fa75361e209131cea66753 | ### RFA+SGM Attack Success Rate (ASR): 51.37. Result ID: 69b9336f47f34ce924a2b893. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### RFA+MUP Attack Success Rate (ASR): 38.93. Result ID: 69b9336f47f34ce924a2b892. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### RFA Attack Success Rate (ASR): 36.82. Result ID: 69b9336f47f34ce924a2b891. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### SMI-FRSM+SGM Attack Success Rate (ASR): 18.64. Result ID: 69b9336f47f34ce924a2b88a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### MFAA+SGM Attack Success Rate (ASR): 15.04. Result ID: 69b9336f47f34ce924a2b890. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### SIA+SGM Attack Success Rate (ASR): 12.4. Result ID: 69b9336f47f34ce924a2b88d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### SMI-FRSM+MUP Attack Success Rate (ASR): 11.46. Result ID: 69b9336f47f34ce924a2b889. [Reporting paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### MFAA+MUP Attack Success Rate (ASR): 10.81. Result ID: 69b9336f47f34ce924a2b88f. [Reporting paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### SMI-FRSM Attack Success Rate (ASR): 10.77. Result ID: 69b9336f47f34ce924a2b888. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### MFAA Attack Success Rate (ASR): 10.14. Result ID: 69b9336f47f34ce924a2b88e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### PGD+SGM Attack Success Rate (ASR): 7.92. Result ID: 69b9336f47f34ce924a2b887. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. ### SIA Attack Success Rate (ASR): 6.63. Result ID: 69b9336f47f34ce924a2b88b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### SIA+MUP Attack Success Rate (ASR): 6.48. Result ID: 69b9336f47f34ce924a2b88c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### PGD+MUP Attack Success Rate (ASR): 2.96. Result ID: 69b9336f47f34ce924a2b886. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. ### PGD Attack Success Rate (ASR): 2.78. Result ID: 69b9336f47f34ce924a2b885. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.