# Black-box Adversarial Attack (Image Retrieval) on In-Shop Clothes (test) Source: [Black-box Adversarial Attack (Image Retrieval) on In-Shop Clothes (test)]() Collection index: [llms.txt]() Data updated: 2026-02-26T06:01:21.687Z Evaluation of the effectiveness of black-box adversarial attacks against an Image Retrieval model deployed on the In-Shop Clothes test set, measured using Recall@K metrics alongside attack-specific metrics like AQ and ASR. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Black-box Adversarial Attack (Image Retrieval) | | Dataset (including any stated split) | In-Shop Clothes (test) | | Metric | Recall@1 | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 9 of 9 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Recall@1](): Higher is better; unit: PERCENT. - [Recall@10](): Higher is better; unit: PERCENT. - [Recall@20](): Higher is better; unit: PERCENT. - [Recall@30](): Higher is better; unit: PERCENT. - [Recall@40](): Higher is better; unit: PERCENT. - [Recall@50](): Higher is better; unit: PERCENT. - [AQ (Attack Quality)](): Higher is better; unit: PERCENT. - [ASR (Attack Success Rate)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Recall@1 | Result date | Report paper | | --- | --- | --- | --- | | Original | 64.2 | Not recorded | 68fa69901e209131cea22a7f | | QAIR\_C | 29.6 | Not recorded | 68fa69901e209131cea22a7f | | QAIR\_{C-I} | 7.2 | Not recorded | 68fa69901e209131cea22a7f | | QAIR\_{C-S} | 5.2 | Not recorded | 68fa69901e209131cea22a7f | | Sign-Opt | 1.4 | Not recorded | 68fa69901e209131cea22a7f | | QAIR | 0.8 | Not recorded | 68fa69901e209131cea22a7f | | QAIR\_{R-S} | 0.8 | Not recorded | 68fa69901e209131cea22a7f | | OptAttack | 0.4 | Not recorded | 68fa69901e209131cea22a7f | | HSJA | 0.4 | Not recorded | 68fa69901e209131cea22a7f | ### Original Recall@1: 64.2. Result ID: 698db6ac8b517eb4332345f7. [Reporting paper]() Recorded evaluation configuration: {"status":"No attack baseline"}. This record does not assert independent reproduction. ### QAIR\_C Recall@1: 29.6. Result ID: 698db6ac8b517eb4332345fc. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Component Analysis":"Candidate selection only"}. This record does not assert independent reproduction. ### QAIR\_{C-I} Recall@1: 7.2. Result ID: 698db6ac8b517eb4332345fd. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Component Analysis":"Inter-image relevance"}. This record does not assert independent reproduction. ### QAIR\_{C-S} Recall@1: 5.2. Result ID: 698db6ac8b517eb4332345fe. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Component Analysis":"Sequence importance relevance"}. This record does not assert independent reproduction. ### Sign-Opt Recall@1: 1.4. Result ID: 698db6ac8b517eb4332345f9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Attack Type":"Decision-based"}. This record does not assert independent reproduction. ### QAIR Recall@1: 0.8. Result ID: 698db6ac8b517eb4332345fb. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Attack Type":"Proposed"}. This record does not assert independent reproduction. ### QAIR\_{R-S} Recall@1: 0.8. Result ID: 698db6ac8b517eb4332345ff. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Component Analysis":"Full model / Range selection"}. This record does not assert independent reproduction. ### OptAttack Recall@1: 0.4. Result ID: 698db6ac8b517eb4332345f8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Attack Type":"Decision-based"}. This record does not assert independent reproduction. ### HSJA Recall@1: 0.4. Result ID: 698db6ac8b517eb4332345fa. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Attack Type":"Decision-based"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.