Black-box Adversarial Attack on CIFAR-10
100ASRCAC
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| CACTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 489.89 | 21.625 | 11.99 | 0.07 | 0.044 | |
| HOPSKIPJUMP l∞Target Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 500.01 | 60.742 | 40.929 | 0.292 | 0.226 | |
| PARTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 281.56 | 20.526 | 17.515 | 0.645 | 0.236 | |
| SIGNOPT + PARTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 481.18 | 26.968 | 27.324 | 0.454 | 0.221 | |
| HOPSKIPJUMP l2 + PARTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 500.2 | 30.352 | 25.589 | 0.438 | 0.244 | |
| HOPSKIPJUMP l∞ + PARTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 100 | 500.04 | 53.656 | 33.299 | 0.253 | 0.18 | |
| HOPSKIPJUMP l2Target Model=ViT-B, Label Setting=Hard-label2026.03 | 99 | 496.3 | 40.16 | 33.46 | 0.417 | 0.281 | |
| SIGNOPTTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 96 | 532.76 | 40.653 | 33.664 | 0.426 | 0.265 | |
| ADVVITTarget Model=ViT-B, Label Setting=Hard-label2026.03 | 96 | 530.21 | 17.741 | 16.191 | 0.319 | 0.215 | |
| GEODATarget Model=ViT-B, Label Setting=Hard-label2026.03 | 94 | 604.32 | 25.871 | 23.517 | 0.071 | 0.078 | |
| CACTarget Model=ResNet-50, Setting=hard-label2026.03 | 1 | 291 | 2.675 | 1.091 | 0.061 | 0.025 | |
| HOPSKIPJUMP l2Target Model=ResNet-50, Setting=hard-label2026.03 | 1 | 300.07 | 2.704 | 2.634 | 0.174 | 0.161 | |
| HOPSKIPJUMP l∞Target Model=ResNet-50, Setting=hard-label2026.03 | 1 | 310.66 | 3.281 | 3.232 | 0.082 | 0.085 | |
| GEODATarget Model=ResNet-50, Setting=hard-label2026.03 | 0.96 | 300.81 | 3.388 | 3.44 | 0.071 | 0.071 | |
| SIGNOPTTarget Model=ResNet-50, Setting=hard-label2026.03 | 0.92 | 288.59 | 3.642 | 3.351 | 0.242 | 0.209 |