Adversarial Attack Transferability on ImageNet Target: SE154 5000 images (val)
83.47Attack Success Rate (%)RFA+SGM
Evaluation Results
| Method | Links | |
|---|---|---|
| RFA+SGMSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 83.47 | |
| MFAA+SGMSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 77.91 | |
| RFA+MUPSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 77.13 | |
| RFASource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 75.16 | |
| SIA+SGMSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 72.44 | |
| MFAA+MUPSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 69.91 | |
| MFAASource Model=ResNet-50, Attack Category=Feature-related2024.10 | 67.88 | |
| SMI-FRSM+SGMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 62.09 | |
| SIA+MUPSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 57.72 | |
| SIASource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 57.24 | |
| SMI-FRSM+MUPSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 53.27 | |
| SMI-FRSMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 47.96 | |
| PGD+SGMSource Model=ResNet-50, Attack Category=White-box2024.10 | 37.86 | |
| PGD+MUPSource Model=ResNet-50, Attack Category=White-box2024.10 | 21.17 | |
| PGDSource Model=ResNet-50, Attack Category=White-box2024.10 | 17.76 |