Non-targeted Black-box Adversarial Attack on ImageNet
1.711Average L2 NormCGBA
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CGBABackbone=ViT, Query Budget=10000 QUE2026.05 | 1.711 | 1.396 | |
| CGBA-HBackbone=ViT, Query Budget=10000 QUE2026.05 | 1.833 | 1.481 | |
| Sign OPTBackbone=VGG16, Query Budget=10000 QUE2026.05 | 2.291 | 1.52 | |
| LGCBackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 2.322 | 1.813 | |
| LGCBackbone=ResNet50, Query Budget=10000 QUE2026.05 | 2.383 | 1.766 | |
| LGC-HBackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 2.481 | 1.903 | |
| HSJABackbone=VGG16, Query Budget=10000 QUE2026.05 | 2.55 | 1.912 | |
| LGC-HBackbone=VGG16, Query Budget=10000 QUE2026.05 | 2.577 | 1.832 | |
| LGCBackbone=ResNet50, Query Budget=5000 QUE2026.05 | 2.846 | 1.986 | |
| LGCBackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 2.923 | 2.239 | |
| CGBABackbone=ViT, Query Budget=5000 QUE2026.05 | 2.961 | 2.244 | |
| CGBA-HBackbone=ViT, Query Budget=5000 QUE2026.05 | 3.051 | 2.277 | |
| LGCBackbone=VGG16, Query Budget=10000 QUE2026.05 | 3.081 | 2.461 | |
| LGCBackbone=ViT, Query Budget=10000 QUE2026.05 | 3.104 | 2.884 | |
| LGC-HBackbone=VGG16, Query Budget=5000 QUE2026.05 | 3.145 | 2.112 | |
| LGC-HBackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 3.169 | 2.375 | |
| Sign OPTBackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 3.245 | 2.255 | |
| LGC-HBackbone=ViT, Query Budget=10000 QUE2026.05 | 3.322 | 3.015 | |
| LGC-HBackbone=ResNet50, Query Budget=10000 QUE2026.05 | 3.435 | 2.728 | |
| CGBABackbone=VGG16, Query Budget=10000 QUE2026.05 | 3.571 | 1.407 | |
| HSJABackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 3.709 | 3.125 | |
| LGCBackbone=ResNet50, Query Budget=2500 QUE2026.05 | 3.858 | 2.525 | |
| LGCBackbone=ViT, Query Budget=5000 QUE2026.05 | 3.885 | 3.454 | |
| CGBA-HBackbone=VGG16, Query Budget=10000 QUE2026.05 | 3.934 | 1.417 | |
| HSJABackbone=VGG16, Query Budget=5000 QUE2026.05 | 3.938 | 2.765 | |
| LGCBackbone=VGG16, Query Budget=5000 QUE2026.05 | 4.093 | 3.064 | |
| LGC-HBackbone=ViT, Query Budget=5000 QUE2026.05 | 4.211 | 3.716 | |
| LGCBackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 4.269 | 2.989 | |
| Sign OPTBackbone=ViT, Query Budget=10000 QUE2026.05 | 4.295 | 3.429 | |
| LGC-HBackbone=VGG16, Query Budget=2500 QUE2026.05 | 4.301 | 2.846 | |
| Sign OPTBackbone=VGG16, Query Budget=5000 QUE2026.05 | 4.389 | 2.918 | |
| LGC-HBackbone=ResNet50, Query Budget=5000 QUE2026.05 | 4.578 | 3.528 | |
| LGC-HBackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 4.606 | 3.358 | |
| HSJABackbone=ViT, Query Budget=10000 QUE2026.05 | 4.608 | 3.747 | |
| HSJABackbone=ResNet50, Query Budget=10000 QUE2026.05 | 4.664 | 3.405 | |
| Sign OPTBackbone=ResNet50, Query Budget=10000 QUE2026.05 | 4.721 | 3.102 | |
| CGBABackbone=ViT, Query Budget=2500 QUE2026.05 | 5.534 | 4.183 | |
| LGCBackbone=ViT, Query Budget=2500 QUE2026.05 | 5.583 | 4.63 | |
| CGBA-HBackbone=ViT, Query Budget=2500 QUE2026.05 | 5.585 | 4.066 | |
| HSJABackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 5.777 | 4.428 | |
| CGBABackbone=VGG16, Query Budget=5000 QUE2026.05 | 5.986 | 2.616 | |
| LGC-HBackbone=ViT, Query Budget=2500 QUE2026.05 | 6.046 | 5.119 | |
| LGCBackbone=VGG16, Query Budget=2500 QUE2026.05 | 6.369 | 4.48 | |
| HSJABackbone=VGG16, Query Budget=2500 QUE2026.05 | 6.448 | 4.095 | |
| CGBA-HBackbone=VGG16, Query Budget=5000 QUE2026.05 | 6.474 | 2.795 | |
| Sign OPTBackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 6.626 | 4.59 | |
| LGC-HBackbone=ResNet50, Query Budget=2500 QUE2026.05 | 6.807 | 5.052 | |
| LGCBackbone=ResNet50, Query Budget=1000 QUE2026.05 | 7.311 | 4.541 | |
| HSJABackbone=ViT, Query Budget=5000 QUE2026.05 | 7.504 | 5.876 | |
| LGC-HBackbone=VGG16, Query Budget=1000 QUE2026.05 | 7.522 | 5.125 | |
| Sign OPTBackbone=ViT, Query Budget=5000 QUE2026.05 | 8.099 | 6.72 | |
| CGBABackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 8.275 | 4.19 | |
| LGCBackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 8.409 | 6.015 | |
| LGC-HBackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 8.568 | 6.64 | |
| HSJABackbone=ResNet50, Query Budget=5000 QUE2026.05 | 8.577 | 5.843 | |
| Sign OPTBackbone=VGG16, Query Budget=2500 QUE2026.05 | 8.843 | 6.367 | |
| CGBABackbone=VGG16, Query Budget=2500 QUE2026.05 | 8.987 | 4.694 | |
| CGBA-HBackbone=DenseNet121, Query Budget=10000 QUE2026.05 | 9.07 | 4.831 | |
| CGBABackbone=ResNet50, Query Budget=10000 QUE2026.05 | 9.451 | 5.32 | |
| HSJABackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 9.515 | 7.056 | |
| CGBA-HBackbone=VGG16, Query Budget=2500 QUE2026.05 | 9.665 | 5.122 | |
| Sign OPTBackbone=ResNet50, Query Budget=5000 QUE2026.05 | 10.037 | 6.851 | |
| CGBA-HBackbone=ResNet50, Query Budget=10000 QUE2026.05 | 10.205 | 5.79 | |
| LGCBackbone=ViT, Query Budget=1000 QUE2026.05 | 11.041 | 8.85 | |
| LGC-HBackbone=ViT, Query Budget=1000 QUE2026.05 | 11.359 | 9.472 | |
| LGCBackbone=VGG16, Query Budget=1000 QUE2026.05 | 12.046 | 9.126 | |
| LGC-HBackbone=ResNet50, Query Budget=1000 QUE2026.05 | 12.246 | 9.414 | |
| CGBABackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 12.604 | 7.776 | |
| HSJABackbone=VGG16, Query Budget=1000 QUE2026.05 | 12.723 | 7.856 | |
| HSJABackbone=ViT, Query Budget=2500 QUE2026.05 | 12.982 | 10.428 | |
| CGBA-HBackbone=DenseNet121, Query Budget=5000 QUE2026.05 | 13.014 | 8.936 | |
| CGBA-HBackbone=ViT, Query Budget=1000 QUE2026.05 | 13.131 | 9.939 | |
| CGBABackbone=ViT, Query Budget=1000 QUE2026.05 | 13.216 | 10.104 | |
| CGBABackbone=VGG16, Query Budget=1000 QUE2026.05 | 13.492 | 9.023 | |
| CGBA-HBackbone=VGG16, Query Budget=1000 QUE2026.05 | 13.573 | 8.762 | |
| CGBABackbone=ResNet50, Query Budget=5000 QUE2026.05 | 13.916 | 9.415 | |
| Sign OPTBackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 14.182 | 10.491 | |
| CGBA-HBackbone=ResNet50, Query Budget=5000 QUE2026.05 | 14.209 | 10.147 | |
| HSJABackbone=ResNet50, Query Budget=2500 QUE2026.05 | 15.359 | 11.015 | |
| CGBABackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 16.926 | 12.677 | |
| Sign OPTBackbone=ViT, Query Budget=2500 QUE2026.05 | 17.469 | 14.328 | |
| CGBA-HBackbone=DenseNet121, Query Budget=2500 QUE2026.05 | 17.538 | 13.616 | |
| CGBABackbone=ResNet50, Query Budget=2500 QUE2026.05 | 18.188 | 14.851 | |
| CGBA-HBackbone=ResNet50, Query Budget=2500 QUE2026.05 | 18.743 | 15.124 | |
| Sign OPTBackbone=VGG16, Query Budget=1000 QUE2026.05 | 19.525 | 15.472 | |
| Sign OPTBackbone=ResNet50, Query Budget=2500 QUE2026.05 | 20.028 | 15.578 | |
| HSJABackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 20.066 | 16.071 | |
| CGBABackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 22.829 | 18.981 | |
| CGBABackbone=ResNet50, Query Budget=1000 QUE2026.05 | 23.049 | 19.86 | |
| CGBA-HBackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 23.582 | 18.987 | |
| CGBA-HBackbone=ResNet50, Query Budget=1000 QUE2026.05 | 24.009 | 20.793 | |
| HSJABackbone=ViT, Query Budget=1000 QUE2026.05 | 28.578 | 24.261 | |
| HSJABackbone=ResNet50, Query Budget=1000 QUE2026.05 | 28.999 | 23.87 | |
| Sign OPTBackbone=DenseNet121, Query Budget=1000 QUE2026.05 | 31.931 | 26.644 | |
| Sign OPTBackbone=ResNet50, Query Budget=1000 QUE2026.05 | 40.032 | 34.904 | |
| Sign OPTBackbone=ViT, Query Budget=1000 QUE2026.05 | 45.428 | 40.483 |