Black-box Adversarial Attack (Image Retrieval) on In-Shop Clothes (test)
64.2Recall@1Original
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Originalstatus=No attack baseline2021.03 | 64.2 | 86.8 | 91 | 92.6 | 93.8 | 94.5 | 0 | 0 | |
| QAIR_CComponent Analysis=Candidate selection only2021.03 | 29.6 | 55.6 | 71.6 | 76.4 | 80 | 83.2 | 14,700 | 31 | |
| QAIR_{C-I}Component Analysis=Inter-image relevance2021.03 | 7.2 | 16.4 | 27.2 | 39.6 | 47.6 | 52 | 6,500 | 78.4 | |
| QAIR_{C-S}Component Analysis=Sequence importance relevance2021.03 | 5.2 | 12.4 | 20.4 | 32 | 40.4 | 43.2 | 5,000 | 84.4 | |
| Sign-OptAttack Type=Decision-based2021.03 | 1.4 | 3.2 | 46.4 | 56 | 66 | 72.8 | 556,400 | 49.2 | |
| QAIRAttack Type=Proposed2021.03 | 0.8 | 4.4 | 13.2 | 25.6 | 31.2 | 35.2 | 3,500 | 91.6 | |
| QAIR_{R-S}Component Analysis=Full model / Range selection2021.03 | 0.8 | 4.4 | 13.2 | 25.6 | 31.2 | 35.2 | 3,500 | 91.6 | |
| OptAttackAttack Type=Decision-based2021.03 | 0.4 | 2 | 56.4 | 68 | 76.4 | 82.8 | 301,700 | 94.8 | |
| HSJAAttack Type=Decision-based2021.03 | 0.4 | 2.4 | 31.6 | 47 | 56.4 | 62.4 | 537,900 | 47.2 |