Non-Targeted Adversarial Attack on MNIST
82.45ASRDST
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| DSTTarget Model=AlexNet, Attack Method=BIM, Substitute Model=ResNet-342022.04 | 82.45 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Attack Method=BIM, Substitute Model=ResNet-342022.04 | 81.52 | — | — | — | — | |
| DSTTarget Model=AlexNet, Attack Method=C&W, Substitute Model=ResNet-342022.04 | 73.22 | — | — | — | — | |
| DSTSubstitute Model=ResNet-342022.04 | 72.49 | — | — | — | — | |
| DSTTarget Model=VGG-16, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 72.49 | — | — | — | — | |
| DSTTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 70.48 | — | — | — | — | |
| MAZESubstitute Model=VGG-192022.04 | 69.31 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-502022.04 | 68.37 | — | — | — | — | |
| DDG+ASTTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 68.29 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-162022.04 | 68.28 | — | — | — | — | |
| MAZESubstitute Model=ResNet-342022.04 | 67.68 | — | — | — | — | |
| MAZETarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 65.82 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-342022.04 | 65.03 | — | — | — | — | |
| MAZESubstitute Model=ResNet-182022.04 | 64.2 | — | — | — | — | |
| DSTTarget Model=AlexNet, Attack Method=FGSM, Substitute Model=ResNet-342022.04 | 63.92 | — | — | — | — | |
| DSTTarget Model=ResNet-18, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 63.72 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 63.34 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-182022.04 | 63.12 | — | — | — | — | |
| DaSTSubstitute Model=VGG-162022.04 | 62.49 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-342022.04 | 60.38 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Attack Method=C&W, Substitute Model=ResNet-342022.04 | 59.37 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Attack Method=FGSM, Substitute Model=ResNet-342022.04 | 59.32 | — | — | — | — | |
| DaSTSubstitute Model=VGG-192022.04 | 59.21 | — | — | — | — | |
| MAZESubstitute Model=VGG-162022.04 | 57.36 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-192022.04 | 57.2 | — | — | — | — | |
| MAZESubstitute Model=ResNet-502022.04 | 55.47 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-502022.04 | 49.85 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-182022.04 | 40.36 | — | — | — | — | |
| Cosine-UAPTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 38.92 | — | — | — | — | |
| Cosine-UAPTarget Model=VGG-16, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 35.11 | — | — | — | — | |
| GD-UAPTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 33.28 | — | — | — | — | |
| GD-UAPTarget Model=ResNet-18, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 30.81 | — | — | — | — | |
| GD-UAPTarget Model=VGG-16, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 29.54 | — | — | — | — | |
| Cosine-UAPTarget Model=ResNet-18, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 28.48 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 59.32 | 81.52 | 63.34 | 59.37 | |
| DDG+ASTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 62.48 | 76.7 | 68.29 | 69.33 | |
| DSTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 63.92 | 82.45 | 70.48 | 73.22 | |
| MAZETarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 56.25 | 74.83 | 65.82 | 70.44 |