Adversarial Attack Transferability on ImageNet Target: RN152 5000 images (val)
99.98Attack Success RatePGD+SGM
Evaluation Results
| Method | Links | |
|---|---|---|
| PGD+SGMSource Model=ResNet-50, Attack Category=White-box2024.10 | 99.98 | |
| RFA+SGMSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 97.29 | |
| RFA+MUPSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 96.15 | |
| MFAA+SGMSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 96.12 | |
| MFAA+MUPSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 95.39 | |
| MFAASource Model=ResNet-50, Attack Category=Feature-related2024.10 | 95.32 | |
| RFASource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 95.3 | |
| SIA+SGMSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 93.22 | |
| SMI-FRSM+SGMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 92.89 | |
| SMI-FRSM+MUPSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 91.16 | |
| SIA+MUPSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 89.3 | |
| SIASource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 88.71 | |
| SMI-FRSMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 86.68 | |
| PGD+MUPSource Model=ResNet-50, Attack Category=White-box2024.10 | 61.41 | |
| PGDSource Model=ResNet-50, Attack Category=White-box2024.10 | 54.54 |