Black-box Adversarial Attack on ImageNet (test)
100Success Rate (Res34)MI
Evaluation results
| Method | Links | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MISource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 36.8 | 47.2 | 23.4 | 17.4 | 26 | 22.9 | 15.1 | 30.262 | |
| AdaMI-GSource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 37.8 | 49.7 | 21.8 | 17.3 | 24.2 | 22.4 | 15.8 | 37.304 | |
| AdaMISource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 38.4 | 51.5 | 24.6 | 19.1 | 28 | 25.1 | 15.5 | 34.599 | |
| RAPSource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 50.3 | 67.4 | 32.4 | 24.7 | 38.5 | 35.4 | 20.4 | 68.034 | |
| PGNSource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 59.5 | 77.3 | 46.7 | 30.8 | 44.8 | 47.4 | 32.5 | 56.38 | |
| ANDASource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 62.4 | 81.9 | 53.8 | 31.8 | 44.1 | 45.9 | 29.9 | 78.817 | |
| NCSSource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 62.8 | 80.2 | 51.5 | 35.6 | 49.5 | 52.2 | 34.9 | 60.695 | |
| AdaNCSSource Model=Res34, Attack Category=momentum-based2025.12 | 100 | — | — | — | — | — | — | — | — | 64.5 | 83.2 | 53.9 | 37.4 | 52.2 | 54.3 | 36.5 | 63.471 | |
| AdaGradSource Model=Res34, Attack Category=gradient-based2025.12 | 99.8 | — | — | — | — | — | — | — | — | 21.4 | 28.4 | 10.4 | 8.9 | 14.4 | 11.2 | 9.2 | 13.469 | |
| I-FGSMSource Model=Res34, Attack Category=gradient-based2025.12 | 99.6 | — | — | — | — | — | — | — | — | 20.6 | 24.9 | 10.3 | 8.6 | 13.5 | 10.3 | 8.8 | 11.724 | |
| APGDSource Model=Res34, Attack Category=gradient-based2025.12 | 99.6 | — | — | — | — | — | — | — | — | 20.8 | 22.2 | 10.1 | 8.7 | 11.5 | 10.6 | 8.2 | 10.519 | |
| AutoAttackSource Model=Res34, Attack Category=gradient-based2025.12 | 99.6 | — | — | — | — | — | — | — | — | 20.7 | 21.5 | 10 | 8.7 | 10.7 | 10.4 | 7.9 | 10.125 | |
| PGDSource Model=Res34, Attack Category=gradient-based2025.12 | 98.7 | — | — | — | — | — | — | — | — | 20.5 | 20.6 | 9.8 | 8.8 | 12.2 | 10 | 8.8 | 12.985 | |
| FDA-PDSource Model=Inc-v3, Transformation Methods=PIM & DIM2022.03 | — | 16.3 | 23.1 | 37 | 37.7 | 27.8 | 41.5 | 30.5 | 30.6 | — | — | — | — | — | — | — | — | |
| FIA-PDSource Model=Inc-v3, Transformation Methods=PIM & DIM2022.03 | — | 36.4 | 51.2 | 76.7 | 74.3 | 38.4 | 44.9 | 42.3 | 52 | — | — | — | — | — | — | — | — | |
| MIM-PDSource Model=Inc-v3, Transformation Methods=PIM & DIM2022.03 | — | 22.4 | 28.8 | 62.5 | 59.5 | 31.4 | 42.6 | 33.6 | 40.1 | — | — | — | — | — | — | — | — | |
| NAA-PDSource Model=Inc-v3, Transformation Methods=PIM & DIM2022.03 | — | 46.8 | 62.9 | 83.2 | 80.9 | 40.4 | 46.8 | 43.9 | 57.9 | — | — | — | — | — | — | — | — | |
| NRDM-PDSource Model=Inc-v3, Transformation Methods=PIM & DIM2022.03 | — | 16.9 | 23.9 | 43.2 | 43.8 | 28 | 41.8 | 34 | 33.1 | — | — | — | — | — | — | — | — |