Image Classification on ImageNet ILSVRC 2012 (val) (Adversarial Robustness)
100Attack Success RateMIM
Evaluation results
| Method | Links | |
|---|---|---|
| MIMSource Model=Inc-v3, Target Model=Inc-v32022.03 | 100 | |
| MIMSource Model=Inc-v4, Target Model=Inc-v42022.03 | 99.7 | |
| FDASource Model=Inc-v4, Target Model=Inc-v42022.03 | 99.6 | |
| MIMSource Model=Res-v2, Target Model=Res-v22022.03 | 99.4 | |
| MIMSource Model=IncRes-v2, Target Model=IncRes-v22022.03 | 99.2 | |
| FIASource Model=Res-v2, Target Model=Res-v22022.03 | 98.9 | |
| FIASource Model=Inc-v3, Target Model=Inc-v32022.03 | 98.3 | |
| NAASource Model=Res-v2, Target Model=Res-v22022.03 | 98.2 | |
| NAASource Model=Inc-v3, Target Model=Inc-v32022.03 | 98.1 | |
| NRDMSource Model=Inc-v4, Target Model=Inc-v42022.03 | 97.4 | |
| NAASource Model=Inc-v4, Target Model=Inc-v42022.03 | 96.5 | |
| FIASource Model=Inc-v4, Target Model=Inc-v42022.03 | 95.7 | |
| NAASource Model=IncRes-v2, Target Model=IncRes-v22022.03 | 93 | |
| NRDMSource Model=Inc-v3, Target Model=Inc-v32022.03 | 90.9 | |
| NRDMSource Model=Res-v2, Target Model=Res-v22022.03 | 90.4 | |
| FDASource Model=Res-v2, Target Model=Res-v22022.03 | 89.1 | |
| FIASource Model=IncRes-v2, Target Model=IncRes-v22022.03 | 88.7 | |
| NAASource Model=Inc-v4, Target Model=Inc-v32022.03 | 86 | |
| NAASource Model=Res-v2, Target Model=Inc-v32022.03 | 85.9 | |
| NAASource Model=Inc-v3, Target Model=Inc-v42022.03 | 85 | |
| NAASource Model=Res-v2, Target Model=Inc-v42022.03 | 85 | |
| FDASource Model=Inc-v4, Target Model=Inc-v32022.03 | 84.8 | |
| FIASource Model=Inc-v4, Target Model=Inc-v32022.03 | 84.1 | |
| FDASource Model=Res-v2, Target Model=Inc-v42022.03 | 84.1 | |
| FDASource Model=Res-v2, Target Model=Inc-v32022.03 | 83.9 | |
| NAASource Model=Res-v2, Target Model=IncRes-v22022.03 | 83.6 | |
| FIASource Model=Inc-v3, Target Model=Inc-v42022.03 | 83.2 | |
| FIASource Model=Res-v2, Target Model=Inc-v32022.03 | 83 | |
| NAASource Model=Inc-v3, Target Model=IncRes-v22022.03 | 82.4 | |
| NAASource Model=IncRes-v2, Target Model=Inc-v32022.03 | 82.4 | |
| FIASource Model=IncRes-v2, Target Model=Inc-v32022.03 | 81.6 | |
| FIASource Model=Res-v2, Target Model=Inc-v42022.03 | 81.6 | |
| FDASource Model=Inc-v3, Target Model=Inc-v32022.03 | 81.3 | |
| NAASource Model=Inc-v4, Target Model=IncRes-v22022.03 | 81 | |
| FIASource Model=Inc-v3, Target Model=IncRes-v22022.03 | 79.1 | |
| FIASource Model=Inc-v4, Target Model=IncRes-v22022.03 | 78.6 | |
| FIASource Model=Res-v2, Target Model=IncRes-v22022.03 | 78.4 | |
| FDASource Model=IncRes-v2, Target Model=IncRes-v22022.03 | 78.3 | |
| NRDMSource Model=Inc-v4, Target Model=Inc-v32022.03 | 78.2 | |
| NAASource Model=IncRes-v2, Target Model=Inc-v42022.03 | 78 | |
| NRDMSource Model=IncRes-v2, Target Model=IncRes-v22022.03 | 77.3 | |
| NAASource Model=Inc-v3, Target Model=Res-v22022.03 | 77.1 | |
| FIASource Model=IncRes-v2, Target Model=Inc-v42022.03 | 77.1 | |
| NAASource Model=Inc-v4, Target Model=Res-v22022.03 | 75.5 | |
| NAASource Model=IncRes-v2, Target Model=Res-v22022.03 | 74.4 | |
| FDASource Model=Res-v2, Target Model=IncRes-v22022.03 | 73.9 | |
| NRDMSource Model=Res-v2, Target Model=Inc-v32022.03 | 73.6 | |
| FIASource Model=Inc-v4, Target Model=Res-v22022.03 | 72 | |
| FDASource Model=Inc-v4, Target Model=IncRes-v22022.03 | 71.9 | |
| FIASource Model=Inc-v3, Target Model=Res-v22022.03 | 71.6 | |
| NRDMSource Model=IncRes-v2, Target Model=Inc-v32022.03 | 71 | |
| FIASource Model=IncRes-v2, Target Model=Res-v22022.03 | 71 | |
| NRDMSource Model=Res-v2, Target Model=Inc-v42022.03 | 70.9 | |
| NAASource Model=Res-v2, Target Model=IncRes-v2_adv2022.03 | 69.8 | |
| FDASource Model=IncRes-v2, Target Model=Inc-v32022.03 | 69.3 | |
| FDASource Model=Inc-v4, Target Model=Res-v22022.03 | 68.7 | |
| FDASource Model=IncRes-v2, Target Model=Inc-v42022.03 | 67.7 | |
| NAASource Model=IncRes-v2, Target Model=IncRes-v2_adv2022.03 | 67.1 | |
| NRDMSource Model=IncRes-v2, Target Model=Inc-v42022.03 | 66.8 | |
| NAASource Model=Res-v2, Target Model=Inc-v3_adv2022.03 | 66.1 | |
| FIASource Model=IncRes-v2, Target Model=IncRes-v2_adv2022.03 | 65 | |
| NAASource Model=IncRes-v2, Target Model=Inc-v3_adv2022.03 | 64.9 | |
| FIASource Model=IncRes-v2, Target Model=Inc-v3_adv2022.03 | 63.8 | |
| NAASource Model=Inc-v3, Target Model=IncRes-v2_adv2022.03 | 62.7 | |
| NRDMSource Model=Inc-v4, Target Model=IncRes-v22022.03 | 61.9 | |
| NRDMSource Model=Inc-v4, Target Model=Res-v22022.03 | 61.9 | |
| NAASource Model=Res-v2, Target Model=Inc-v3_ens32022.03 | 61.6 | |
| NAASource Model=Inc-v3, Target Model=Inc-v3_adv2022.03 | 61.5 | |
| NRDMSource Model=Inc-v3, Target Model=Inc-v42022.03 | 61.3 | |
| NAASource Model=IncRes-v2, Target Model=Inc-v3_ens32022.03 | 60 | |
| MIMSource Model=IncRes-v2, Target Model=Inc-v32022.03 | 59.5 | |
| NAASource Model=Res-v2, Target Model=Inc-v3_ens42022.03 | 59.2 | |
| NRDMSource Model=Res-v2, Target Model=IncRes-v22022.03 | 58.8 | |
| MIMSource Model=Inc-v4, Target Model=Inc-v32022.03 | 58.2 | |
| FIASource Model=Res-v2, Target Model=Inc-v3_adv2022.03 | 58.2 | |
| FIASource Model=Res-v2, Target Model=IncRes-v2_adv2022.03 | 58.2 | |
| NRDMSource Model=IncRes-v2, Target Model=Res-v22022.03 | 57.8 | |
| NAASource Model=IncRes-v2, Target Model=Inc-v3_ens42022.03 | 56.7 | |
| FDASource Model=IncRes-v2, Target Model=Res-v22022.03 | 56.3 | |
| NAASource Model=Inc-v4, Target Model=IncRes-v2_adv2022.03 | 56 | |
| MIMSource Model=Res-v2, Target Model=Inc-v32022.03 | 54.1 | |
| NRDMSource Model=Inc-v3, Target Model=IncRes-v22022.03 | 53.9 | |
| FIASource Model=Inc-v3, Target Model=Inc-v3_adv2022.03 | 53.3 | |
| NAASource Model=Inc-v4, Target Model=Inc-v3_adv2022.03 | 52.4 | |
| FDASource Model=Res-v2, Target Model=Inc-v3_adv2022.03 | 51.2 | |
| MIMSource Model=IncRes-v2, Target Model=Inc-v42022.03 | 51 | |
| NRDMSource Model=Inc-v3, Target Model=Res-v22022.03 | 50.8 | |
| FIASource Model=Inc-v3, Target Model=IncRes-v2_adv2022.03 | 50.8 | |
| NAASource Model=Inc-v3, Target Model=Inc-v3_ens42022.03 | 50.8 | |
| NAASource Model=Inc-v3, Target Model=Inc-v3_ens32022.03 | 50.5 | |
| NAASource Model=Inc-v4, Target Model=Inc-v3_ens32022.03 | 50.5 | |
| FIASource Model=IncRes-v2, Target Model=Inc-v3_ens32022.03 | 49.8 | |
| NAASource Model=Inc-v4, Target Model=Inc-v3_ens42022.03 | 49.4 | |
| FIASource Model=Res-v2, Target Model=Inc-v3_ens32022.03 | 49.1 | |
| NAASource Model=IncRes-v2, Target Model=IncRes-v2_ens32022.03 | 47.5 | |
| MIMSource Model=Res-v2, Target Model=Inc-v42022.03 | 47.5 | |
| FIASource Model=Inc-v4, Target Model=IncRes-v2_adv2022.03 | 47.3 | |
| NAASource Model=Res-v2, Target Model=IncRes-v2_ens32022.03 | 46.7 | |
| FIASource Model=IncRes-v2, Target Model=Inc-v3_ens42022.03 | 46.6 | |
| MIMSource Model=Inc-v4, Target Model=IncRes-v22022.03 | 45.5 |