Black-box Adversarial Attack (Image Retrieval) on CUB-200 (test)
61Recall@1Original
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Originalstatus=No attack baseline2021.03 | 61 | 73 | 87 | 91 | 98 | 99 | 0 | 0 | |
| QAIR_CComponent Analysis=Candidate selection only2021.03 | 59 | 76 | 83 | 94 | 96 | 97 | 199 | 1 | |
| QAIR_{C-I}Component Analysis=Inter-image relevance2021.03 | 36 | 51 | 60 | 74 | 80 | 92 | 152 | 32 | |
| QAIR_{C-S}Component Analysis=Sequence importance relevance2021.03 | 31 | 46 | 52 | 58 | 72 | 85 | 142 | 37 | |
| QAIRAttack Type=Proposed2021.03 | 16 | 23 | 32 | 45 | 56 | 76 | 93 | 69 | |
| QAIR_{R-S}Component Analysis=Full model / Range selection2021.03 | 16 | 23 | 32 | 45 | 56 | 76 | 93 | 69 | |
| HSJAAttack Type=Decision-based2021.03 | 13 | 23 | 41 | 47 | 60 | 92 | 10,000 | 0 | |
| Sign-OptAttack Type=Decision-based2021.03 | 11 | 21 | 35 | 57 | 70 | 88 | 8,833 | 0 | |
| OptAttackAttack Type=Decision-based2021.03 | 8 | 15 | 30 | 49 | 63 | 89 | 9,708 | 4 |