Black-box Adversarial Attack (Image Retrieval) on Stanford Online Products (test)
72.4Recall@1Original
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Originalstatus=No attack baseline2021.03 | 72.4 | 81.6 | 90.4 | 96 | 0 | 0 | |
| QAIR_CComponent Analysis=Candidate selection only2021.03 | 17.6 | 37.2 | 72.4 | 91.6 | 113 | 48 | |
| QAIR_{C-I}Component Analysis=Inter-image relevance2021.03 | 6 | 11.2 | 57.2 | 86.8 | 60 | 81.2 | |
| QAIR_{C-S}Component Analysis=Sequence importance relevance2021.03 | 5.6 | 8.8 | 53.2 | 84.8 | 51 | 83.6 | |
| QAIRAttack Type=Proposed2021.03 | 1.6 | 6.4 | 47.2 | 83.2 | 35 | 90.4 | |
| QAIR_{R-S}Component Analysis=Full model / Range selection2021.03 | 1.6 | 6.4 | 47.2 | 83.2 | 35 | 90.4 | |
| OptAttackAttack Type=Decision-based2021.03 | 1.2 | 3.2 | 74.4 | 92.8 | 7,931 | 28.8 | |
| Sign-OptAttack Type=Decision-based2021.03 | 0.8 | 2.4 | 69.6 | 91.6 | 6,746 | 37.2 | |
| HSJAAttack Type=Decision-based2021.03 | 0 | 0 | 63.2 | 88 | 5,888 | 42 |