Adversarial Video Purification on UCF-101
96Clean AccuracyFMVP-CW
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| FMVP-CWAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 72 | 0.8718 | 29.5671 | 78.5 | |
| FMVP-GaussianAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 78 | 0.8942 | 28.1649 | 83.5 | |
| FMVP-CWAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 96 | 89 | 0.8952 | 27.9621 | 89.5 | |
| FMVP-GaussianAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 96 | 83 | 0.9019 | 30.4552 | 85.5 | |
| DPAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 96 | 19 | 0.8692 | 28.1547 | 20 | |
| FMVP-PGDAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 95 | 84 | 0.8896 | 29.6415 | 87.5 | |
| FlowPureAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 95 | 12 | 0.8912 | 28.9106 | 14 | |
| FMVP-CWAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 95 | 16 | 0.8963 | 28.9452 | 17.5 | |
| DPAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 56 | 0.8758 | 28.8415 | 53.5 | |
| FlowPureAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 77 | 0.8815 | 29.0451 | 79 | |
| FMVP-GaussianAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 94 | 31 | 0.8971 | 27.9523 | 32 | |
| DPAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 93 | 44 | 0.8624 | 29.5208 | 46.5 | |
| FlowPureAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 93 | 82 | 0.8919 | 27.5526 | 80.5 | |
| TSAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 93 | 6 | 0.9531 | 26.4854 | 5.5 | |
| TSAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 92 | 74 | 0.9437 | 25.6626 | 72.5 | |
| FMVP-PGDAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 92 | 79 | 0.8837 | 31.6549 | 81 | |
| FMVP-PGDAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 92 | 20 | 0.8852 | 28.5159 | 22 | |
| TSAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 90 | 79 | 0.9468 | 25.8049 | 74.5 | |
| DiffPure-DDIMAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 89 | 72 | 0.8155 | 28.5201 | 78 | |
| DiffPure-DDIMAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 89 | 75 | 0.8384 | 26.9642 | 79 | |
| DiffPure-DDPMAttack Type=CW Attack, Attack Constraint=l_2, c=0.001, Victim Model=C3D2026.01 | 87 | 81 | 0.8275 | 27.6519 | 81.5 | |
| DiffPure-DDIMAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 87 | 11 | 0.8614 | 28.5521 | 12 | |
| DiffPure-DDPMAttack Type=DiffHammer, Attack Constraint=Adaptive, epsilon=8/255, Victim Model=C3D2026.01 | 85 | 8 | 0.8519 | 28.9061 | 8.5 | |
| DiffPure-DDPMAttack Type=PGD Attack, Attack Constraint=l_inf, epsilon=8/255, Victim Model=C3D2026.01 | 84 | 70 | 0.8256 | 28.0512 | 72.5 |