Black-box Adversarial Attack on ImageNet (val)
56.67Attack Success RateSIA+SGM
Evaluation Results
| Method | Links | |
|---|---|---|
| SIA+SGMSource Model=ViT-B, Attack Category=Augmentation-related2024.10 | 56.67 | |
| SIA+MUPSource Model=ViT-B, Attack Category=Augmentation-related2024.10 | 47.57 | |
| SIASource Model=ViT-B, Attack Category=Augmentation-related2024.10 | 47.42 | |
| RFA+SGMSource Model=ViT-B, Attack Category=Parameter-related2024.10 | 46.69 | |
| MFAA+SGMSource Model=ViT-B, Attack Category=Feature-related2024.10 | 40.8 | |
| RFA+MUPSource Model=ViT-B, Attack Category=Parameter-related2024.10 | 40.8 | |
| RFASource Model=ViT-B, Attack Category=Parameter-related2024.10 | 40.06 | |
| SMI-FRSM+SGMSource Model=ViT-B, Attack Category=Gradient-related2024.10 | 34.21 | |
| TGR+SGMSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 30.41 | |
| SMI-FRSM+MUPSource Model=ViT-B, Attack Category=Gradient-related2024.10 | 30.39 | |
| SMI-FRSMSource Model=ViT-B, Attack Category=Gradient-related2024.10 | 29.76 | |
| TGR+MUPSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 27.83 | |
| MFAASource Model=ViT-B, Attack Category=Feature-related2024.10 | 27.25 | |
| MFAA+MUPSource Model=ViT-B, Attack Category=Feature-related2024.10 | 27.02 | |
| TGRSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 25.99 | |
| VDC+SGMSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 24.08 | |
| PGD+SGMSource Model=ViT-B, Attack Category=White-box2024.10 | 21.04 | |
| VDC+MUPSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 21 | |
| VDCSource Model=ViT-B, Attack Category=ViT-specific2024.10 | 20.05 | |
| PGD+MUPSource Model=ViT-B, Attack Category=White-box2024.10 | 17.39 | |
| PGDSource Model=ViT-B, Attack Category=White-box2024.10 | 16.34 |