Fooling Attack on ImageNet-1K
0.2Runtime (h)SPOOF
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| SPOOFClassifier=AlexNet2025.12 | 0.2 | 96.85 | 89.12 | 2.35 | |
| Direct-FoolClassifier=AlexNet, Attack Protocol=Original2025.12 | 0.42 | 25.89 | 65.4 | 100 | |
| SPOOFClassifier=ResNet-502025.12 | 0.58 | 98.02 | 96.04 | 1.25 | |
| Direct-FoolClassifier=ResNet-50, Attack Protocol=Original2025.12 | 0.69 | 28.67 | 81.34 | 100 | |
| Direct-FoolClassifier=ViT-B/16, Attack Protocol=Original2025.12 | 1.53 | 95.08 | 100 | 100 | |
| SPOOFClassifier=ViT-B/162025.12 | 1.65 | 99.61 | 100 | 3.62 | |
| Direct-FoolClassifier=AlexNet, Attack Protocol=Extended2025.12 | 1.92 | 99.91 | 99.14 | 100 | |
| CPPN-FoolClassifier=AlexNet, Attack Protocol=Original2025.12 | 2.81 | 90.81 | 93.44 | 100 | |
| CPPN-FoolClassifier=ViT-B/16, Attack Protocol=Original2025.12 | 2.83 | 79.48 | 93.94 | 100 | |
| CPPN-FoolClassifier=ResNet-50, Attack Protocol=Original2025.12 | 2.84 | 51.62 | 87 | 100 | |
| Direct-FoolClassifier=ResNet-50, Attack Protocol=Extended2025.12 | 3.06 | 79.51 | 96.44 | 100 | |
| Direct-FoolClassifier=ViT-B/16, Attack Protocol=Extended2025.12 | 6.39 | 99.49 | 100 | 100 | |
| CPPN-FoolClassifier=AlexNet, Attack Protocol=Extended2025.12 | 73.8 | 99.15 | 98.72 | 100 | |
| CPPN-FoolClassifier=ResNet-50, Attack Protocol=Extended2025.12 | 75.28 | 81.82 | 97.12 | 100 | |
| CPPN-FoolClassifier=ViT-B/16, Attack Protocol=Extended2025.12 | 77.8 | 92.41 | 99.68 | 100 |