Adversarial Attack Transferability on ImageNet (test)
78.87VGG16 AccuracyAITL+SGM
Evaluation results
| Method | Links | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| AITL+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 78.87 | 76.42 | 62.82 | 74.1 | 65.32 | 66.9 | 89.73 | 69.43 | 66.86 | 60.54 | |
| AITL+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 72.9 | 69.9 | 55.32 | 67.21 | 57.79 | 57.91 | 84.87 | 60.76 | 62.87 | 56.24 | |
| AITLCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 72.64 | 70.17 | 55.95 | 67.89 | 58.16 | 58.44 | 85.25 | 61.26 | 63.18 | 56.71 | |
| BSR+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 70.31 | 65.25 | 51.59 | 62.01 | 64.26 | 63.18 | 85.16 | 67.46 | 48.3 | 43.32 | |
| BSRCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 58.93 | 53.74 | 39.3 | 48.79 | 49.95 | 47.87 | 75.25 | 53.53 | 38.46 | 33.35 | |
| BSR+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 58.65 | 54.18 | 39.93 | 48.73 | 50.82 | 48.58 | 75.47 | 54.04 | 38.19 | 33.44 | |
| SIA+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 50.4 | 44.4 | 29.76 | 37.98 | 37.63 | 46.65 | 69.17 | 42.15 | 26.74 | 22.02 | |
| SIACategory=Augmentation-related, Source Model=Mixer-B2024.10 | 42.33 | 36.73 | 23.96 | 29.07 | 29.07 | 36.12 | 60.18 | 31.9 | 21.68 | 17.56 | |
| SIA +MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 42.22 | 36.45 | 22.89 | 28.96 | 28.2 | 36.26 | 60.17 | 31.65 | 21.24 | 17.44 | |
| GI+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 40.35 | 37.36 | 23.18 | 30.44 | 23.83 | 41.61 | 55.14 | 27.37 | 20.23 | 17.94 | |
| GRA+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 39.04 | 37.15 | 22.33 | 27.89 | 19.79 | 37.1 | 54.64 | 22.82 | 19.38 | 17.43 | |
| GRA+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 38.82 | 36.93 | 22.23 | 28.2 | 19.63 | 36.95 | 54.59 | 22.8 | 19.13 | 17.18 | |
| GRACategory=Gradient-related, Source Model=Mixer-B2024.10 | 38.08 | 36.98 | 22.22 | 27.32 | 18.94 | 35.51 | 53.18 | 21.67 | 19.33 | 17.14 | |
| DI+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 38.07 | 34.66 | 22.38 | 29.85 | 27.29 | 35.16 | 57.44 | 32.23 | 23.53 | 19.22 | |
| DTA+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 37.57 | 34.53 | 19.97 | 26.38 | 21.02 | 33.74 | 49.57 | 21.93 | 18.36 | 15.96 | |
| GI+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 37.4 | 35.07 | 22.13 | 28.27 | 21.99 | 37.46 | 49.35 | 24.47 | 19.7 | 17.77 | |
| GICategory=Gradient-related, Source Model=Mixer-B2024.10 | 37.28 | 35.19 | 22.44 | 28.6 | 22.38 | 38.61 | 50.35 | 25.38 | 20.19 | 17.9 | |
| STM+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 36.06 | 32.64 | 19.02 | 24.8 | 17.24 | 37.36 | 52.91 | 22.77 | 16.85 | 14.32 | |
| MI+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 36 | 33.34 | 19.75 | 25.47 | 20.24 | 34.6 | 49.25 | 22.8 | 17.12 | 15.06 | |
| DTA+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 35.76 | 33.08 | 19.74 | 25.77 | 20.62 | 33.3 | 47.56 | 21.42 | 17.98 | 15.64 | |
| DTACategory=Gradient-related, Source Model=Mixer-B2024.10 | 35.15 | 33.11 | 19.52 | 25.48 | 20.19 | 32.32 | 47.28 | 20.91 | 17.96 | 15.51 | |
| AI-FGTM+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 34.54 | 31.98 | 19.77 | 26.72 | 21.95 | 38.72 | 50.57 | 26.4 | 17.6 | 15.17 | |
| MI+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 33.16 | 31.62 | 18.95 | 23.98 | 18.48 | 32.02 | 45.17 | 20.45 | 16.82 | 14.98 | |
| MICategory=Gradient-related, Source Model=Mixer-B2024.10 | 32.61 | 30.92 | 18.9 | 24.11 | 18.84 | 30.64 | 42.96 | 20.31 | 16.78 | 14.92 | |
| DI+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 30.96 | 28.04 | 17.37 | 22.8 | 20.17 | 25.19 | 46.88 | 23.26 | 19.17 | 15.69 | |
| DICategory=Augmentation-related, Source Model=Mixer-B2024.10 | 30.77 | 28.3 | 16.65 | 22.62 | 20.32 | 24.74 | 46.18 | 23.26 | 19.18 | 14.95 | |
| AI-FGTM+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 29.33 | 27.68 | 16.84 | 21.37 | 17.27 | 30.62 | 42.38 | 20.33 | 15.31 | 13.18 | |
| AI-FGTMCategory=Gradient-related, Source Model=Mixer-B2024.10 | 29.23 | 27.51 | 16.87 | 22.06 | 17.6 | 31.03 | 42.34 | 20.57 | 15.13 | 13.36 | |
| STM+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 29.16 | 26.87 | 14.79 | 18.68 | 12.7 | 27.65 | 42.98 | 16.22 | 13.36 | 11.22 | |
| STMCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 29.11 | 27.15 | 14.76 | 18.74 | 12.67 | 28.47 | 43.84 | 16.74 | 13.57 | 11.49 | |
| SMI-FRSM+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 28.65 | 26.37 | 14.87 | 19.24 | 14.7 | 25.13 | 40.82 | 16.63 | 12.09 | 10.89 | |
| MFAA+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 27.83 | 24.6 | 11.24 | 13.47 | 10.73 | 16.99 | 36.57 | 8.83 | 9.08 | 7.6 | |
| RPA+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 27.37 | 25.18 | 12.19 | 14.91 | 11.56 | 19.57 | 38.65 | 10.79 | 10.97 | 9.15 | |
| TAIG+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 26.42 | 23.59 | 12.46 | 15.72 | 12.34 | 20.8 | 39.78 | 12.73 | 10.21 | 8.97 | |
| ILPD+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 26.28 | 23.32 | 13.05 | 16.7 | 15.47 | 27.25 | 41.09 | 16.42 | 10.77 | 9.36 | |
| FMAA+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 26.05 | 23.75 | 10.78 | 12.03 | 9.41 | 15.4 | 35.72 | 7.45 | 9.21 | 7.5 | |
| S 2 I+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 25.6 | 22.9 | 11.84 | 14.73 | 10.16 | 17.13 | 33.45 | 11.21 | 9.98 | 8.83 | |
| FMAA +MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 24.84 | 22.4 | 13.28 | 13.98 | 11.1 | 2.52 | 15.9 | 6.24 | 9.22 | 7.44 | |
| SMI-FRSMCategory=Gradient-related, Source Model=Mixer-B2024.10 | 24.75 | 23.32 | 12.72 | 16.4 | 11.98 | 20.74 | 34.88 | 13.41 | 11.14 | 9.72 | |
| SMI-FRSM +MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 24.61 | 23.11 | 12.84 | 16.13 | 11.71 | 20.75 | 34.75 | 12.99 | 10.86 | 9.47 | |
| FIA+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 24.59 | 22.06 | 9.55 | 11.06 | 8.09 | 11.26 | 29.36 | 6.37 | 8.29 | 6.41 | |
| VAI+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 24.21 | 21.99 | 11.77 | 15.07 | 11.7 | 17.91 | 32.04 | 12.73 | 9.95 | 8.68 | |
| SIM+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 23.78 | 21.35 | 11.16 | 14.24 | 10.39 | 19.54 | 36.23 | 11.75 | 9.22 | 8.19 | |
| NAA+SGMCategory=Feature-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 22.74 | 20.98 | 10.86 | 12.96 | 11.16 | 18.52 | 30.48 | 11.1 | 9.02 | 7.74 | |
| PGN+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 22.3 | 20.62 | 10.09 | 12.46 | 7.14 | 14.41 | 29.49 | 8.78 | 7.54 | 6.71 | |
| MFAA+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 22.04 | 18.75 | 8.72 | 10.57 | 7.89 | 14.33 | 30.27 | 6.43 | 7.14 | 5.75 | |
| RPACategory=Feature-related, Source Model=Mixer-B2024.10 | 21.83 | 20.27 | 9.6 | 11.88 | 8.87 | 17.61 | 32.77 | 8.33 | 8.48 | 6.93 | |
| MFA ACategory=Feature-related, Source Model=Mixer-B2024.10 | 21.78 | 18.76 | 9.17 | 10.65 | 7.73 | 14.18 | 29.69 | 6.69 | 7.17 | 5.84 | |
| S 2 I+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 21.57 | 19.73 | 10.07 | 11.95 | 8.27 | 14.2 | 29.63 | 8.76 | 9.07 | 7.58 | |
| VAICategory=Gradient-related, Source Model=Mixer-B2024.10 | 21.22 | 19.65 | 10.87 | 13.31 | 10.61 | 14.89 | 28.32 | 10.61 | 9.7 | 8.34 | |
| FMAACategory=Feature-related, Source Model=Mixer-B2024.10 | 21.07 | 19.11 | 8.91 | 9.95 | 7.25 | 14.41 | 30.46 | 6.11 | 7.4 | 5.95 | |
| S 2 ICategory=Augmentation-related, Source Model=Mixer-B2024.10 | 21.03 | 19.06 | 9.93 | 11.9 | 7.85 | 13.52 | 28.87 | 8.53 | 8.89 | 7.4 | |
| VAI+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 20.87 | 19.95 | 10.69 | 12.93 | 10.3 | 14.79 | 28.07 | 10.42 | 9.57 | 8.11 | |
| Admix+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 20.55 | 18.69 | 9.59 | 12.5 | 9.89 | 17.13 | 30.72 | 11.35 | 7.62 | 7.11 | |
| PC-I+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 20.44 | 18.52 | 9.65 | 12.31 | 10.04 | 17.13 | 30.29 | 11.56 | 7.82 | 6.97 | |
| MaskBlock+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 20.29 | 18.57 | 9.51 | 11.73 | 9.61 | 16.48 | 29.92 | 10.7 | 7.23 | 6.51 | |
| TAIGCategory=Feature-related, Source Model=Mixer-B2024.10 | 19.28 | 17.04 | 8.47 | 10.61 | 7.39 | 12.55 | 27.83 | 7.51 | 7.34 | 6.44 | |
| FIACategory=Feature-related, Source Model=Mixer-B2024.10 | 18.98 | 16.68 | 7.4 | 8.38 | 6.16 | 9.63 | 24.46 | 4.55 | 5.9 | 4.91 | |
| PGNCategory=Gradient-related, Source Model=Mixer-B2024.10 | 18.84 | 17.94 | 8.83 | 10.09 | 6.06 | 11.77 | 25.76 | 7.17 | 6.84 | 5.82 | |
| RAP+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 18.81 | 17.6 | 8.68 | 10.93 | 8.19 | 12.62 | 26.63 | 8.44 | 6.57 | 6.01 | |
| TAIG+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 18.8 | 17.29 | 8.59 | 10.76 | 7.25 | 12.72 | 27.74 | 7.55 | 7.09 | 6.55 | |
| PGN+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 18.74 | 17.46 | 8.18 | 10.05 | 5.78 | 11.12 | 24.76 | 6.71 | 6.53 | 5.68 | |
| PI+SGMCategory=Gradient-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 18.67 | 17.36 | 8.7 | 11.17 | 8.75 | 15.17 | 27.83 | 9.8 | 6.92 | 6.32 | |
| FIA+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 18.65 | 16.63 | 7.25 | 8.73 | 5.75 | 9.3 | 24.42 | 4.29 | 6.25 | 4.91 | |
| VT+SGMCategory=Augmentation-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 18.63 | 17.26 | 9.13 | 11.22 | 8.23 | 17.51 | 29.91 | 10.43 | 6.89 | 5.92 | |
| RFA+SGMCategory=Parameter-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 18.41 | 16.15 | 8.67 | 10.74 | 8.43 | 12.56 | 22.42 | 8.18 | 5.88 | 5.66 | |
| PGD+SGMCategory=White-box, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 18.38 | 17.58 | 8.65 | 11.05 | 8.87 | 14.91 | 27.06 | 9.57 | 6.75 | 6.01 | |
| SIM+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 18.35 | 16.15 | 7.9 | 9.7 | 6.55 | 12.32 | 27.19 | 7.28 | 6.86 | 6.12 | |
| SIMCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 18.02 | 15.93 | 8.12 | 9.77 | 6.52 | 11.59 | 25.66 | 7.02 | 6.76 | 5.85 | |
| NAA+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 17.9 | 16.32 | 9.28 | 10.86 | 9.16 | 17.18 | 27.52 | 9.66 | 7.94 | 6.58 | |
| ILPD+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 17.87 | 16.26 | 9.08 | 11.57 | 10.15 | 19.23 | 29.12 | 11.38 | 7.48 | 6.34 | |
| NAACategory=Feature-related, Source Model=Mixer-B2024.10 | 17.72 | 16.22 | 9.26 | 10.22 | 9.22 | 17.04 | 26.74 | 9.58 | 7.58 | 6.5 | |
| ILPDCategory=Feature-related, Source Model=Mixer-B2024.10 | 17.53 | 16.41 | 9.26 | 11.45 | 10.34 | 18.47 | 28.91 | 11.11 | 7.47 | 6.2 | |
| Admix+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 16.97 | 15.55 | 7.6 | 9.28 | 7.55 | 12.59 | 25.24 | 8.32 | 6.25 | 5.55 | |
| AdmixCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 16.13 | 14.96 | 7.62 | 9.16 | 6.77 | 11.64 | 23.47 | 7.66 | 5.84 | 5.47 | |
| MaskBlockCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 16.1 | 14.82 | 7.17 | 8.74 | 6.64 | 11.07 | 22.69 | 7.28 | 5.8 | 5.07 | |
| MaskBlock+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 16 | 14.68 | 7.41 | 8.97 | 6.61 | 11.23 | 23.07 | 7.12 | 5.74 | 5.07 | |
| PC-ICategory=Gradient-related, Source Model=Mixer-B2024.10 | 15.6 | 14.16 | 7.12 | 8.83 | 6.71 | 11.03 | 21.99 | 7.34 | 5.79 | 5.36 | |
| PC-I+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 15.36 | 14.68 | 7.2 | 9.31 | 6.48 | 11.33 | 22.45 | 7.25 | 5.99 | 5.41 | |
| RPA+MUPCategory=Feature-related, Source Model=Mixer-B2024.10 | 15.07 | 13.63 | 6.76 | 8.09 | 6.32 | 9.14 | 19.98 | 6.27 | 5.44 | 4.89 | |
| VT+MUPCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 15 | 13.41 | 7 | 8.26 | 5.57 | 12.22 | 23.38 | 7.05 | 5.59 | 4.91 | |
| RAPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 14.95 | 14.27 | 6.9 | 8.39 | 6.25 | 9.28 | 20.87 | 6.16 | 5.46 | 4.84 | |
| RAP+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 14.86 | 14.03 | 6.85 | 8.37 | 6.33 | 9.22 | 20.69 | 6.28 | 5.67 | 4.83 | |
| PGDCategory=White-box, Source Model=Mixer-B2024.10 | 14.76 | 13.31 | 6.97 | 8.06 | 6.12 | 9.73 | 20.28 | 6.25 | 5.35 | 4.75 | |
| PI+MUPCategory=Gradient-related, Source Model=Mixer-B2024.10 | 14.67 | 13.25 | 6.96 | 7.9 | 6.31 | 9.76 | 20.32 | 6.38 | 5.34 | 4.63 | |
| PGD+MUPCategory=White-box, Source Model=Mixer-B2024.10 | 14.31 | 13.62 | 6.61 | 8.26 | 6.07 | 10.05 | 20.66 | 6.72 | 5.2 | 4.61 | |
| PICategory=Gradient-related, Source Model=Mixer-B2024.10 | 14.27 | 13.48 | 6.92 | 7.92 | 6.25 | 10 | 20.48 | 6.22 | 5.37 | 4.85 | |
| VTCategory=Augmentation-related, Source Model=Mixer-B2024.10 | 14.25 | 13.5 | 7.15 | 8.19 | 5.57 | 12.14 | 23.14 | 6.88 | 5.51 | 4.8 | |
| RFA+MUPCategory=Parameter-related, Source Model=Mixer-B2024.10 | 12.89 | 11.75 | 6.19 | 7.32 | 5.57 | 8.02 | 15.86 | 5.13 | 4.11 | 3.87 | |
| RFACategory=Parameter-related, Source Model=Mixer-B2024.10 | 12.85 | 11.65 | 5.76 | 6.97 | 5.33 | 7.06 | 15.27 | 4.5 | 4 | 3.96 | |
| DSM+SGMCategory=Parameter-related, Source Model=Mixer-B, gamma (SGM)=0.62024.10 | 9.23 | 8.35 | 2.9 | 3.11 | 1.41 | 1.33 | 7.32 | 1.27 | 2.1 | 1.64 | |
| DSMCategory=Parameter-related, Source Model=Mixer-B2024.10 | 8.82 | 7.93 | 2.56 | 2.83 | 1.09 | 1.05 | 6.76 | 0.99 | 1.74 | 1.48 | |
| DSM+MUPCategory=Parameter-related, Source Model=Mixer-B2024.10 | 8.78 | 7.91 | 2.7 | 2.68 | 1.03 | 1.09 | 6.91 | 0.99 | 1.83 | 1.41 |