Adversarial Video Purification on HMDB-51
97Clean AccuracyFMVP-CW
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| FMVP-CWAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 97 | 85 | 0.8779 | 30.1256 | 78.5 | |
| DiffPure-DDIMAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 97 | 83 | 0.8412 | 26.9593 | 79 | |
| DPAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 51 | 0.8514 | 29.6124 | 53.5 | |
| FlowPureAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 81 | 0.8711 | 29.6333 | 79 | |
| FlowPureAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 16 | 0.8891 | 28.0215 | 14 | |
| FlowPureAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 95 | 79 | 0.8625 | 28.9614 | 80.5 | |
| DPAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 95 | 21 | 0.8699 | 29.4152 | 20 | |
| FMVP-PGDAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 91 | 0.8812 | 29.5462 | 87.5 | |
| FMVP-GaussianAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 89 | 0.8881 | 30.2247 | 83.5 | |
| DPAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 94 | 49 | 0.8744 | 29.1258 | 46.5 | |
| FMVP-CWAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 94 | 90 | 0.8697 | 29.6149 | 89.5 | |
| FMVP-GaussianAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 94 | 88 | 0.8803 | 29.6493 | 85.5 | |
| FMVP-CWAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 19 | 0.8809 | 28.9134 | 17.5 | |
| DiffPure-DDIMAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 93 | 84 | 0.8531 | 30.221 | 78 | |
| FMVP-PGDAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 93 | 24 | 0.8799 | 29.4937 | 22 | |
| DiffPure-DDPMAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 92 | 82 | 0.8365 | 26.9951 | 81.5 | |
| FMVP-PGDAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 92 | 83 | 0.8737 | 30.8614 | 81 | |
| FMVP-GaussianAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 92 | 33 | 0.8762 | 28.6634 | 32 | |
| TSAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 91 | 70 | 0.9169 | 25.5281 | 74.5 | |
| DiffPure-DDIMAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 90 | 13 | 0.8526 | 26.9667 | 12 | |
| TSAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 90 | 5 | 0.9452 | 25.8199 | 5.5 | |
| DiffPure-DDPMAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 89 | 75 | 0.8364 | 29.0245 | 72.5 | |
| DiffPure-DDPMAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 89 | 9 | 0.841 | 27.9633 | 8.5 | |
| TSAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 88 | 71 | 0.9271 | 24.3389 | 72.5 |