Adversarial Attack Transferability on Stanford Cars
93.56AccuracyBenign
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| Benign2025.06 | 93.56 | — | — | — | |
| CDA2025.06 | 77.68 | 21.88 | 15.38 | 24.07 | |
| BIA2025.06 | 59.89 | 37.22 | 13.96 | 38.97 | |
| LTP2025.06 | 57.98 | 39.02 | 13.03 | 40.85 | |
| GAMA2025.06 | 54.59 | 42.58 | 11.94 | 44.28 | |
| FACL2025.06 | 51.23 | 48.23 | 12.9 | 49.71 | |
| PDCL2025.06 | 50.41 | 46.85 | 12.31 | 48.46 | |
| PDCL w/ Oursmode=improvement (Δ%p)2025.06 | -0.71 | 0.75 | 0.69 | -0.32 | |
| GAMA w/ Oursmode=improvement (Δ%p)2025.06 | -2.33 | 2.24 | 2.1 | -0.6 | |
| CDA w/ Oursmode=improvement (Δ%p)2025.06 | -5.86 | 2.38 | 2.35 | -0.24 | |
| BIA w/ Oursmode=improvement (Δ%p)2025.06 | -6.89 | 6.89 | 6.7 | -2 | |
| FACL w/ Oursmode=improvement (Δ%p)2025.06 | -7.26 | 2.34 | 4.72 | -4.49 | |
| LTP w/ Oursmode=improvement (Δ%p)2025.06 | -10.62 | 10.98 | 10.68 | -2.16 |