# Adversarial Attack Transferability on ImageNet Target: DN201 5000 images (val) Source: [Adversarial Attack Transferability on ImageNet Target: DN201 5000 images (val)]() Collection index: [llms.txt]() Data updated: 2026-03-17T10:57:07.937Z Evaluation of the transferability of adversarial attacks when the target evaluation context is specifically defined by the DN201 model trained on 5000 images from the ImageNet validation set, measured by Attack Success Rate. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Adversarial Attack Transferability | | Dataset (including any stated split) | ImageNet Target: DN201 5000 images (val) | | Metric | Attack Success Rate | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 15 of 15 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Attack Success Rate](): Higher is better; unit: PERCENT. ## Recorded results | Method | Attack Success Rate | Result date | Report paper | | --- | --- | --- | --- | | RFA+SGM | 96.5 | Not recorded | 68fa75361e209131cea66753 | | RFA+MUP | 94.37 | Not recorded | 68fa75361e209131cea66753 | | RFA | 93.27 | Not recorded | 68fa75361e209131cea66753 | | MFAA+SGM | 91.49 | Not recorded | 68fa75361e209131cea66753 | | SIA+SGM | 90.24 | Not recorded | 68fa75361e209131cea66753 | | MFAA+MUP | 89.76 | Not recorded | 68fa75361e209131cea66753 | | MFAA | 88.67 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM+SGM | 87.85 | Not recorded | 68fa75361e209131cea66753 | | SIA+MUP | 84.91 | Not recorded | 68fa75361e209131cea66753 | | SIA | 84.88 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM+MUP | 84.3 | Not recorded | 68fa75361e209131cea66753 | | SMI-FRSM | 79.46 | Not recorded | 68fa75361e209131cea66753 | | PGD+SGM | 64.99 | Not recorded | 68fa75361e209131cea66753 | | PGD+MUP | 49.45 | Not recorded | 68fa75361e209131cea66753 | | PGD | 43.2 | Not recorded | 68fa75361e209131cea66753 | ### RFA+SGM Attack Success Rate: 96.5. Result ID: 69b9336f47f34ce924a2b875. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### RFA+MUP Attack Success Rate: 94.37. Result ID: 69b9336f47f34ce924a2b874. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### RFA Attack Success Rate: 93.27. Result ID: 69b9336f47f34ce924a2b873. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Parameter-related"}. This record does not assert independent reproduction. ### MFAA+SGM Attack Success Rate: 91.49. Result ID: 69b9336f47f34ce924a2b872. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### SIA+SGM Attack Success Rate: 90.24. Result ID: 69b9336f47f34ce924a2b86f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### MFAA+MUP Attack Success Rate: 89.76. Result ID: 69b9336f47f34ce924a2b871. [Reporting paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### MFAA Attack Success Rate: 88.67. Result ID: 69b9336f47f34ce924a2b870. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Feature-related"}. This record does not assert independent reproduction. ### SMI-FRSM+SGM Attack Success Rate: 87.85. Result ID: 69b9336f47f34ce924a2b86c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### SIA+MUP Attack Success Rate: 84.91. Result ID: 69b9336f47f34ce924a2b86e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### SIA Attack Success Rate: 84.88. Result ID: 69b9336f47f34ce924a2b86d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Augmentation-related"}. This record does not assert independent reproduction. ### SMI-FRSM+MUP Attack Success Rate: 84.3. Result ID: 69b9336f47f34ce924a2b86b. [Reporting paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### SMI-FRSM Attack Success Rate: 79.46. Result ID: 69b9336f47f34ce924a2b86a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"Gradient-related"}. This record does not assert independent reproduction. ### PGD+SGM Attack Success Rate: 64.99. Result ID: 69b9336f47f34ce924a2b869. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. ### PGD+MUP Attack Success Rate: 49.45. Result ID: 69b9336f47f34ce924a2b868. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. ### PGD Attack Success Rate: 43.2. Result ID: 69b9336f47f34ce924a2b867. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Source Model":"ResNet-50","Attack Category":"White-box"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.