Black-box Adversarial Motion Attack on 100STYLE

100Success RateQuality-Preserving Adversarial Attack

Evaluation results

Method
Quality-Preserving Adversarial Attack2026.06	100	20.02	0.012	11.21	3.06
Quality-Preserving Adversarial Attack2026.06	99.64	19.51	0.012	10.97	2.86
Quality-Preserving Adversarial Attack2026.06	97.49	39.76	0.017	17.34	4.48
Quality-Preserving Adversarial Attack2026.06	96.42	57.5	0.02	21.74	5.9
Quality-Preserving Adversarial Attack2026.06	93.9	62.01	0.023	25.42	6.1
MIG2026.06	70.97	336.28	0.156	552.29	77.84
MIG2026.06	67.38	307.14	0.105	414.82	66.07
MIG2026.06	65.95	297.48	0.104	293.88	52.5
MIG2026.06	64.88	295.32	0.108	339.51	53.69
MIG2026.06	55.2	240.37	0.066	97.03	18.34
TASAR2026.06	51.97	182.23	0.06	46.87	4.96
MI-FGSM2026.06	51.61	283.7	0.098	87.51	12.61
I-FGSM2026.06	49.46	281	0.097	79.29	11.43
SMART2026.06	49.46	240.27	0.071	57.87	4.83
TASAR2026.06	48.75	243.41	0.079	104.72	7.42
TASAR2026.06	45.7	171.8	0.05	52.5	4.82
MI-FGSM2026.06	45.52	284.8	0.103	124.31	18.07
MI-FGSM2026.06	44.71	226.81	0.072	70.38	11.79
SMART2026.06	43.37	266.16	0.099	123.33	8.56
MI-FGSM2026.06	42.65	138.07	0.037	20.23	4.02
TASAR2026.06	42.3	99.25	0.023	15.21	2.01
SMART2026.06	41.76	202.67	0.062	64.18	5.03
I-FGSM2026.06	41.67	221.27	0.069	68.18	10.64
I-FGSM2026.06	41.22	134.05	0.036	18.77	3.7
TASAR2026.06	39.78	162.31	0.039	43.21	4.9
I-FGSM2026.06	39.78	275.96	0.098	111.98	16.22
MI-FGSM2026.06	39.07	200.65	0.048	69.48	12.47
SMART2026.06	39.07	111.17	0.028	17.74	1.91
I-FGSM2026.06	36.2	194.05	0.046	62.67	11.21
SMART2026.06	35.13	193.07	0.049	57.76	4.8