Adversarial Attack Transferability on ImageNet Target: Visformer-S 5000 images (val)
73.28Attack Success RateRFA+SGM
Evaluation Results
| Method | Links | |
|---|---|---|
| RFA+SGMSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 73.28 | |
| RFA+MUPSource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 63.28 | |
| RFASource Model=ResNet-50, Attack Category=Parameter-related2024.10 | 60.68 | |
| MFAA+SGMSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 42.25 | |
| SIA+SGMSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 41.9 | |
| SMI-FRSM+SGMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 41.56 | |
| MFAA+MUPSource Model=ResNet-50, Attack Category=Feature-related2024.10 | 35.94 | |
| MFAASource Model=ResNet-50, Attack Category=Feature-related2024.10 | 34.6 | |
| SMI-FRSM+MUPSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 30.31 | |
| SMI-FRSMSource Model=ResNet-50, Attack Category=Gradient-related2024.10 | 28.03 | |
| SIASource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 27.88 | |
| SIA+MUPSource Model=ResNet-50, Attack Category=Augmentation-related2024.10 | 27.59 | |
| PGD+SGMSource Model=ResNet-50, Attack Category=White-box2024.10 | 22.09 | |
| PGD+MUPSource Model=ResNet-50, Attack Category=White-box2024.10 | 9.75 | |
| PGDSource Model=ResNet-50, Attack Category=White-box2024.10 | 8.76 |