Black-box Transfer Attack Robustness on CIFAR-10 (Target Model WRN-34-10)
41.9PGD Attack Success Rate (L-inf)SGD
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| SGDNorm=l_1, Optimizer=SGD, Checkpoint Selection=Best2026.05 | 41.9 | 41.69 | 45.52 | 45.57 | |
| AdamWNorm=l_1, Optimizer=AdamW, Checkpoint Selection=Best2026.05 | 59.98 | 59.85 | 63.61 | 63.66 | |
| AdamWNorm=l_2, Optimizer=AdamW, Checkpoint Selection=Best2026.05 | 66 | 65.94 | 70.75 | 70.88 | |
| AdamWNorm=l_inf, Optimizer=AdamW, Checkpoint Selection=Best2026.05 | 66.64 | 66.58 | 68.37 | 68.4 | |
| AdamWNorm=l_inf, Optimizer=AdamW, Checkpoint Selection=Last2026.05 | 68.44 | 68.63 | 70.66 | 70.78 | |
| AdamWNorm=l_1, Optimizer=AdamW, Checkpoint Selection=Last2026.05 | 68.6 | 68.5 | 73.46 | 73.6 | |
| MuonNorm=l_inf + l_1, Optimizer=Muon, Checkpoint Selection=Best2026.05 | 68.68 | 68.45 | 71.8 | 71.72 | |
| SGDNorm=l_2, Optimizer=SGD, Checkpoint Selection=Best2026.05 | 70.98 | 70.94 | 74.47 | 74.29 | |
| AdamWNorm=l_inf + l_1, Optimizer=AdamW, Checkpoint Selection=Best2026.05 | 71.76 | 71.58 | 74.17 | 74.05 | |
| MuonNorm=l_1, Optimizer=Muon, Checkpoint Selection=Best2026.05 | 72.5 | 71.71 | 76.91 | 76.9 | |
| AdamWNorm=l_inf + l_1, Optimizer=AdamW, Checkpoint Selection=Last2026.05 | 74.39 | 74.34 | 77.35 | 77.3 | |
| SGDNorm=l_inf + l_1, Optimizer=SGD, Checkpoint Selection=Best2026.05 | 74.56 | 74.32 | 77.06 | 76.97 | |
| SGDNorm=l_inf, Optimizer=SGD, Checkpoint Selection=Best2026.05 | 76.38 | 76.27 | 78.52 | 78.43 | |
| SGDNorm=l_inf + l_1, Optimizer=SGD, Checkpoint Selection=Last2026.05 | 77.97 | 78.08 | 80.2 | 80.19 | |
| SGDNorm=l_inf, Optimizer=SGD, Checkpoint Selection=Last2026.05 | 79.48 | 79.32 | 81.23 | 81.29 | |
| SGDNorm=l_1, Optimizer=SGD, Checkpoint Selection=Last2026.05 | 79.5 | 79.22 | 82.61 | 82.46 | |
| MuonNorm=l_inf, Optimizer=Muon, Checkpoint Selection=Best2026.05 | 79.83 | 79.66 | 81.72 | 81.65 | |
| AdamWNorm=l_2, Optimizer=AdamW, Checkpoint Selection=Last2026.05 | 81.81 | 81.66 | 84.65 | 84.61 | |
| MuonNorm=l_inf + l_1, Optimizer=Muon, Checkpoint Selection=Last2026.05 | 82.06 | 81.96 | 84.14 | 84.03 | |
| MuonNorm=l_1, Optimizer=Muon, Checkpoint Selection=Last2026.05 | 83.3 | 82.9 | 86.66 | 86.6 | |
| MuonNorm=l_inf, Optimizer=Muon, Checkpoint Selection=Last2026.05 | 83.4 | 83.44 | 84.96 | 85.06 | |
| SGDNorm=l_2, Optimizer=SGD, Checkpoint Selection=Last2026.05 | 83.82 | 83.93 | 86.29 | 86.21 | |
| MuonNorm=l_2, Optimizer=Muon, Checkpoint Selection=Best2026.05 | 86.86 | 86.74 | 89.07 | 88.98 | |
| MuonNorm=l_2, Optimizer=Muon, Checkpoint Selection=Last2026.05 | 86.86 | 86.71 | 89.19 | 89.1 |