Adversarial Attack Transferability on ImageNet (test)

78.87VGG16 AccuracyAITL+SGM

Evaluation Results

Method
AITL+SGM2024.10	78.87	76.42	62.82	74.1	65.32	66.9	89.73	69.43	66.86	60.54
AITL+MUP2024.10	72.9	69.9	55.32	67.21	57.79	57.91	84.87	60.76	62.87	56.24
AITL2024.10	72.64	70.17	55.95	67.89	58.16	58.44	85.25	61.26	63.18	56.71
BSR+SGM2024.10	70.31	65.25	51.59	62.01	64.26	63.18	85.16	67.46	48.3	43.32
BSR2024.10	58.93	53.74	39.3	48.79	49.95	47.87	75.25	53.53	38.46	33.35
BSR+MUP2024.10	58.65	54.18	39.93	48.73	50.82	48.58	75.47	54.04	38.19	33.44
SIA+SGM2024.10	50.4	44.4	29.76	37.98	37.63	46.65	69.17	42.15	26.74	22.02
SIA2024.10	42.33	36.73	23.96	29.07	29.07	36.12	60.18	31.9	21.68	17.56
SIA +MUP2024.10	42.22	36.45	22.89	28.96	28.2	36.26	60.17	31.65	21.24	17.44
GI+SGM2024.10	40.35	37.36	23.18	30.44	23.83	41.61	55.14	27.37	20.23	17.94
GRA+SGM2024.10	39.04	37.15	22.33	27.89	19.79	37.1	54.64	22.82	19.38	17.43
GRA+MUP2024.10	38.82	36.93	22.23	28.2	19.63	36.95	54.59	22.8	19.13	17.18
GRA2024.10	38.08	36.98	22.22	27.32	18.94	35.51	53.18	21.67	19.33	17.14
DI+SGM2024.10	38.07	34.66	22.38	29.85	27.29	35.16	57.44	32.23	23.53	19.22
DTA+SGM2024.10	37.57	34.53	19.97	26.38	21.02	33.74	49.57	21.93	18.36	15.96
GI+MUP2024.10	37.4	35.07	22.13	28.27	21.99	37.46	49.35	24.47	19.7	17.77
GI2024.10	37.28	35.19	22.44	28.6	22.38	38.61	50.35	25.38	20.19	17.9
STM+SGM2024.10	36.06	32.64	19.02	24.8	17.24	37.36	52.91	22.77	16.85	14.32
MI+SGM2024.10	36	33.34	19.75	25.47	20.24	34.6	49.25	22.8	17.12	15.06
DTA+MUP2024.10	35.76	33.08	19.74	25.77	20.62	33.3	47.56	21.42	17.98	15.64
DTA2024.10	35.15	33.11	19.52	25.48	20.19	32.32	47.28	20.91	17.96	15.51
AI-FGTM+SGM2024.10	34.54	31.98	19.77	26.72	21.95	38.72	50.57	26.4	17.6	15.17
MI+MUP2024.10	33.16	31.62	18.95	23.98	18.48	32.02	45.17	20.45	16.82	14.98
MI2024.10	32.61	30.92	18.9	24.11	18.84	30.64	42.96	20.31	16.78	14.92
DI+MUP2024.10	30.96	28.04	17.37	22.8	20.17	25.19	46.88	23.26	19.17	15.69
DI2024.10	30.77	28.3	16.65	22.62	20.32	24.74	46.18	23.26	19.18	14.95
AI-FGTM+MUP2024.10	29.33	27.68	16.84	21.37	17.27	30.62	42.38	20.33	15.31	13.18
AI-FGTM2024.10	29.23	27.51	16.87	22.06	17.6	31.03	42.34	20.57	15.13	13.36
STM+MUP2024.10	29.16	26.87	14.79	18.68	12.7	27.65	42.98	16.22	13.36	11.22
STM2024.10	29.11	27.15	14.76	18.74	12.67	28.47	43.84	16.74	13.57	11.49
SMI-FRSM+SGM2024.10	28.65	26.37	14.87	19.24	14.7	25.13	40.82	16.63	12.09	10.89
MFAA+SGM2024.10	27.83	24.6	11.24	13.47	10.73	16.99	36.57	8.83	9.08	7.6
RPA+SGM2024.10	27.37	25.18	12.19	14.91	11.56	19.57	38.65	10.79	10.97	9.15
TAIG+SGM2024.10	26.42	23.59	12.46	15.72	12.34	20.8	39.78	12.73	10.21	8.97
ILPD+SGM2024.10	26.28	23.32	13.05	16.7	15.47	27.25	41.09	16.42	10.77	9.36
FMAA+SGM2024.10	26.05	23.75	10.78	12.03	9.41	15.4	35.72	7.45	9.21	7.5
S 2 I+SGM2024.10	25.6	22.9	11.84	14.73	10.16	17.13	33.45	11.21	9.98	8.83
FMAA +MUP2024.10	24.84	22.4	13.28	13.98	11.1	2.52	15.9	6.24	9.22	7.44
SMI-FRSM2024.10	24.75	23.32	12.72	16.4	11.98	20.74	34.88	13.41	11.14	9.72
SMI-FRSM +MUP2024.10	24.61	23.11	12.84	16.13	11.71	20.75	34.75	12.99	10.86	9.47
FIA+SGM2024.10	24.59	22.06	9.55	11.06	8.09	11.26	29.36	6.37	8.29	6.41
VAI+SGM2024.10	24.21	21.99	11.77	15.07	11.7	17.91	32.04	12.73	9.95	8.68
SIM+SGM2024.10	23.78	21.35	11.16	14.24	10.39	19.54	36.23	11.75	9.22	8.19
NAA+SGM2024.10	22.74	20.98	10.86	12.96	11.16	18.52	30.48	11.1	9.02	7.74
PGN+SGM2024.10	22.3	20.62	10.09	12.46	7.14	14.41	29.49	8.78	7.54	6.71
MFAA+MUP2024.10	22.04	18.75	8.72	10.57	7.89	14.33	30.27	6.43	7.14	5.75
RPA2024.10	21.83	20.27	9.6	11.88	8.87	17.61	32.77	8.33	8.48	6.93
MFA A2024.10	21.78	18.76	9.17	10.65	7.73	14.18	29.69	6.69	7.17	5.84
S 2 I+MUP2024.10	21.57	19.73	10.07	11.95	8.27	14.2	29.63	8.76	9.07	7.58
VAI2024.10	21.22	19.65	10.87	13.31	10.61	14.89	28.32	10.61	9.7	8.34
FMAA2024.10	21.07	19.11	8.91	9.95	7.25	14.41	30.46	6.11	7.4	5.95
S 2 I2024.10	21.03	19.06	9.93	11.9	7.85	13.52	28.87	8.53	8.89	7.4
VAI+MUP2024.10	20.87	19.95	10.69	12.93	10.3	14.79	28.07	10.42	9.57	8.11
Admix+SGM2024.10	20.55	18.69	9.59	12.5	9.89	17.13	30.72	11.35	7.62	7.11
PC-I+SGM2024.10	20.44	18.52	9.65	12.31	10.04	17.13	30.29	11.56	7.82	6.97
MaskBlock+SGM2024.10	20.29	18.57	9.51	11.73	9.61	16.48	29.92	10.7	7.23	6.51
TAIG2024.10	19.28	17.04	8.47	10.61	7.39	12.55	27.83	7.51	7.34	6.44
FIA2024.10	18.98	16.68	7.4	8.38	6.16	9.63	24.46	4.55	5.9	4.91
PGN2024.10	18.84	17.94	8.83	10.09	6.06	11.77	25.76	7.17	6.84	5.82
RAP+SGM2024.10	18.81	17.6	8.68	10.93	8.19	12.62	26.63	8.44	6.57	6.01
TAIG+MUP2024.10	18.8	17.29	8.59	10.76	7.25	12.72	27.74	7.55	7.09	6.55
PGN+MUP2024.10	18.74	17.46	8.18	10.05	5.78	11.12	24.76	6.71	6.53	5.68
PI+SGM2024.10	18.67	17.36	8.7	11.17	8.75	15.17	27.83	9.8	6.92	6.32
FIA+MUP2024.10	18.65	16.63	7.25	8.73	5.75	9.3	24.42	4.29	6.25	4.91
VT+SGM2024.10	18.63	17.26	9.13	11.22	8.23	17.51	29.91	10.43	6.89	5.92
RFA+SGM2024.10	18.41	16.15	8.67	10.74	8.43	12.56	22.42	8.18	5.88	5.66
PGD+SGM2024.10	18.38	17.58	8.65	11.05	8.87	14.91	27.06	9.57	6.75	6.01
SIM+MUP2024.10	18.35	16.15	7.9	9.7	6.55	12.32	27.19	7.28	6.86	6.12
SIM2024.10	18.02	15.93	8.12	9.77	6.52	11.59	25.66	7.02	6.76	5.85
NAA+MUP2024.10	17.9	16.32	9.28	10.86	9.16	17.18	27.52	9.66	7.94	6.58
ILPD+MUP2024.10	17.87	16.26	9.08	11.57	10.15	19.23	29.12	11.38	7.48	6.34
NAA2024.10	17.72	16.22	9.26	10.22	9.22	17.04	26.74	9.58	7.58	6.5
ILPD2024.10	17.53	16.41	9.26	11.45	10.34	18.47	28.91	11.11	7.47	6.2
Admix+MUP2024.10	16.97	15.55	7.6	9.28	7.55	12.59	25.24	8.32	6.25	5.55
Admix2024.10	16.13	14.96	7.62	9.16	6.77	11.64	23.47	7.66	5.84	5.47
MaskBlock2024.10	16.1	14.82	7.17	8.74	6.64	11.07	22.69	7.28	5.8	5.07
MaskBlock+MUP2024.10	16	14.68	7.41	8.97	6.61	11.23	23.07	7.12	5.74	5.07
PC-I2024.10	15.6	14.16	7.12	8.83	6.71	11.03	21.99	7.34	5.79	5.36
PC-I+MUP2024.10	15.36	14.68	7.2	9.31	6.48	11.33	22.45	7.25	5.99	5.41
RPA+MUP2024.10	15.07	13.63	6.76	8.09	6.32	9.14	19.98	6.27	5.44	4.89
VT+MUP2024.10	15	13.41	7	8.26	5.57	12.22	23.38	7.05	5.59	4.91
RAP2024.10	14.95	14.27	6.9	8.39	6.25	9.28	20.87	6.16	5.46	4.84
RAP+MUP2024.10	14.86	14.03	6.85	8.37	6.33	9.22	20.69	6.28	5.67	4.83
PGD2024.10	14.76	13.31	6.97	8.06	6.12	9.73	20.28	6.25	5.35	4.75
PI+MUP2024.10	14.67	13.25	6.96	7.9	6.31	9.76	20.32	6.38	5.34	4.63
PGD+MUP2024.10	14.31	13.62	6.61	8.26	6.07	10.05	20.66	6.72	5.2	4.61
PI2024.10	14.27	13.48	6.92	7.92	6.25	10	20.48	6.22	5.37	4.85
VT2024.10	14.25	13.5	7.15	8.19	5.57	12.14	23.14	6.88	5.51	4.8
RFA+MUP2024.10	12.89	11.75	6.19	7.32	5.57	8.02	15.86	5.13	4.11	3.87
RFA2024.10	12.85	11.65	5.76	6.97	5.33	7.06	15.27	4.5	4	3.96
DSM+SGM2024.10	9.23	8.35	2.9	3.11	1.41	1.33	7.32	1.27	2.1	1.64
DSM2024.10	8.82	7.93	2.56	2.83	1.09	1.05	6.76	0.99	1.74	1.48
DSM+MUP2024.10	8.78	7.91	2.7	2.68	1.03	1.09	6.91	0.99	1.83	1.41