Specific Adversarial Attack Performance on CIFAR-10
99.5MDSEMDSE
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| MDSEModel 1=C-V, Model 2=S-V-BP2022.09 | 99.5 | — | — | — | — | |
| MDSEModel 1=V-L16, Model 2=S-R-T102022.09 | 99 | — | — | — | — | |
| MDSEModel 1=C-101x3, Model 2=S-R-T102022.09 | 98.8 | — | — | — | — | |
| MDSEModel 1=C-101x3, Model 2=S-V-T102022.09 | 98 | — | — | — | — | |
| MDSEModel 1=V-L16, Model 2=S-V-BP2022.09 | 97.8 | — | — | — | — | |
| MDSEModel 1=V-L16, Model 2=S-R-BP2022.09 | 96.8 | — | — | — | — | |
| MDSEModel 1=C-101x3, Model 2=S-R-BP2022.09 | 95.7 | — | — | — | — | |
| MDSEModel 1=C-101x3, Model 2=S-V-BP2022.09 | 95.3 | — | — | — | — | |
| MDSEModel 1=V-L16, Model 2=S-V-T102022.09 | 92.7 | — | — | — | — | |
| MDSEModel 1=C-V, Model 2=S-R-T102022.09 | 91.4 | — | — | — | — | |
| MDSEModel 1=C-V, Model 2=S-V-T102022.09 | 90.7 | — | — | — | — | |
| MDSEModel 1=C-V, Model 2=S-R-BP2022.09 | 90.4 | — | — | — | — | |
| MDSEModel 1=S-R-BP, Model 2=S-V-T102022.09 | 73.4 | — | — | — | — | |
| MDSEModel1=TIC-R19, Model2=HIRE-V162022.09 | 68.5 | — | — | — | — | |
| MDSEModel1=FAT-R18, Model2=HIRE-V162022.09 | 47.1 | — | — | — | — | |
| MDSEModel1=DM-R18, Model2=HIRE-V162022.09 | 38.5 | — | — | — | — | |
| MDSEModel1=DM-R18, Model2=FAT-R182022.09 | 29.7 | — | — | — | — | |
| MDSEModel1=DM-R18, Model2=SR*-V112022.09 | 27.6 | — | — | — | — | |
| MDSEModel1=FAT-R18, Model2=TIC-R192022.09 | 27.1 | — | — | — | — | |
| MDSEModel1=DM-R18, Model2=SR*-W162022.09 | 25.8 | — | — | — | — | |
| MDSEModel1=DM-R18, Model2=TIC-R192022.09 | 25.4 | — | — | — | — | |
| Max AutoModel1=TIC-R19, Model2=HIRE-V162022.09 | — | — | — | 48.6 | — | |
| Max AutoModel1=FAT-R18, Model2=HIRE-V162022.09 | — | — | — | 10.2 | — | |
| Max AutoModel1=DM-R18, Model2=HIRE-V162022.09 | — | — | — | 8.5 | — | |
| Max AutoModel1=DM-R18, Model2=FAT-R182022.09 | — | — | — | 22.2 | — | |
| Max AutoModel1=DM-R18, Model2=SR*-V112022.09 | — | — | — | 18 | — | |
| Max AutoModel1=FAT-R18, Model2=TIC-R192022.09 | — | — | — | 8.9 | — | |
| Max AutoModel1=DM-R18, Model2=SR*-W162022.09 | — | — | — | 14.7 | — | |
| Max AutoModel1=DM-R18, Model2=TIC-R192022.09 | — | — | — | 8.1 | — | |
| Max AutoModel 1=C-V, Model 2=S-R-BP2022.09 | — | — | — | 15.8 | — | |
| Max AutoModel 1=C-V, Model 2=S-V-BP2022.09 | — | — | — | 75.8 | — | |
| Max AutoModel 1=C-V, Model 2=S-V-T102022.09 | — | — | — | 90.7 | — | |
| Max AutoModel 1=C-V, Model 2=S-R-T102022.09 | — | — | — | 88.8 | — | |
| Max AutoModel 1=S-R-BP, Model 2=S-V-T102022.09 | — | — | — | 12.4 | — | |
| Max AutoModel 1=V-L16, Model 2=S-R-BP2022.09 | — | — | — | 8.9 | — | |
| Max AutoModel 1=V-L16, Model 2=S-V-BP2022.09 | — | — | — | 6.4 | — | |
| Max AutoModel 1=V-L16, Model 2=S-V-T102022.09 | — | — | — | 4.8 | — | |
| Max AutoModel 1=V-L16, Model 2=S-R-T102022.09 | — | — | — | 8.6 | — | |
| Max AutoModel 1=C-101x3, Model 2=S-R-BP2022.09 | — | — | — | 12.3 | — | |
| Max AutoModel 1=C-101x3, Model 2=S-V-BP2022.09 | — | — | — | 8.5 | — | |
| Max AutoModel 1=C-101x3, Model 2=S-V-T102022.09 | — | — | — | 7.1 | — | |
| Max AutoModel 1=C-101x3, Model 2=S-R-T102022.09 | — | — | — | 7.7 | — | |
| Max MIMModel1=TIC-R19, Model2=HIRE-V162022.09 | — | 56 | — | — | — | |
| Max MIMModel1=FAT-R18, Model2=HIRE-V162022.09 | — | 11.6 | — | — | — | |
| Max MIMModel1=DM-R18, Model2=HIRE-V162022.09 | — | 7.7 | — | — | — | |
| Max MIMModel1=DM-R18, Model2=FAT-R182022.09 | — | 18.1 | — | — | — | |
| Max MIMModel1=DM-R18, Model2=SR*-V112022.09 | — | 16 | — | — | — | |
| Max MIMModel1=FAT-R18, Model2=TIC-R192022.09 | — | 10.2 | — | — | — | |
| Max MIMModel1=DM-R18, Model2=SR*-W162022.09 | — | 15.3 | — | — | — | |
| Max MIMModel1=DM-R18, Model2=TIC-R192022.09 | — | 8.6 | — | — | — | |
| Max MIMModel 1=C-V, Model 2=S-R-BP2022.09 | — | 18.5 | — | — | — | |
| Max MIMModel 1=C-V, Model 2=S-V-BP2022.09 | — | 72.7 | — | — | — | |
| Max MIMModel 1=C-V, Model 2=S-V-T102022.09 | — | 88.6 | — | — | — | |
| Max MIMModel 1=C-V, Model 2=S-R-T102022.09 | — | 86.6 | — | — | — | |
| Max MIMModel 1=S-R-BP, Model 2=S-V-T102022.09 | — | 15.3 | — | — | — | |
| Max MIMModel 1=V-L16, Model 2=S-R-BP2022.09 | — | 12.5 | — | — | — | |
| Max MIMModel 1=V-L16, Model 2=S-V-BP2022.09 | — | 10.7 | — | — | — | |
| Max MIMModel 1=V-L16, Model 2=S-V-T102022.09 | — | 9.5 | — | — | — | |
| Max MIMModel 1=V-L16, Model 2=S-R-T102022.09 | — | 16 | — | — | — | |
| Max MIMModel 1=C-101x3, Model 2=S-R-BP2022.09 | — | 17.3 | — | — | — | |
| Max MIMModel 1=C-101x3, Model 2=S-V-BP2022.09 | — | 15.3 | — | — | — | |
| Max MIMModel 1=C-101x3, Model 2=S-V-T102022.09 | — | 22.2 | — | — | — | |
| Max MIMModel 1=C-101x3, Model 2=S-R-T102022.09 | — | 25.4 | — | — | — | |
| Max PGDModel1=TIC-R19, Model2=HIRE-V162022.09 | — | — | 57.8 | — | — | |
| Max PGDModel1=FAT-R18, Model2=HIRE-V162022.09 | — | — | 10 | — | — | |
| Max PGDModel1=DM-R18, Model2=HIRE-V162022.09 | — | — | 7.2 | — | — | |
| Max PGDModel1=DM-R18, Model2=FAT-R182022.09 | — | — | 16.9 | — | — | |
| Max PGDModel1=DM-R18, Model2=SR*-V112022.09 | — | — | 15.5 | — | — | |
| Max PGDModel1=FAT-R18, Model2=TIC-R192022.09 | — | — | 10.3 | — | — | |
| Max PGDModel1=DM-R18, Model2=SR*-W162022.09 | — | — | 15.1 | — | — | |
| Max PGDModel1=DM-R18, Model2=TIC-R192022.09 | — | — | 8.6 | — | — | |
| Max PGDModel 1=C-V, Model 2=S-R-BP2022.09 | — | — | 16.1 | — | — | |
| Max PGDModel 1=C-V, Model 2=S-V-BP2022.09 | — | — | 74.3 | — | — | |
| Max PGDModel 1=C-V, Model 2=S-V-T102022.09 | — | — | 89.2 | — | — | |
| Max PGDModel 1=C-V, Model 2=S-R-T102022.09 | — | — | 87.3 | — | — | |
| Max PGDModel 1=S-R-BP, Model 2=S-V-T102022.09 | — | — | 13.4 | — | — | |
| Max PGDModel 1=V-L16, Model 2=S-R-BP2022.09 | — | — | 10.7 | — | — | |
| Max PGDModel 1=V-L16, Model 2=S-V-BP2022.09 | — | — | 7.1 | — | — | |
| Max PGDModel 1=V-L16, Model 2=S-V-T102022.09 | — | — | 4.8 | — | — | |
| Max PGDModel 1=V-L16, Model 2=S-R-T102022.09 | — | — | 7.7 | — | — | |
| Max PGDModel 1=C-101x3, Model 2=S-R-BP2022.09 | — | — | 14.3 | — | — | |
| Max PGDModel 1=C-101x3, Model 2=S-V-BP2022.09 | — | — | 8.9 | — | — | |
| Max PGDModel 1=C-101x3, Model 2=S-V-T102022.09 | — | — | 15.2 | — | — | |
| Max PGDModel 1=C-101x3, Model 2=S-R-T102022.09 | — | — | 16.8 | — | — | |
| SAGAModel1=TIC-R19, Model2=HIRE-V162022.09 | — | — | — | — | 38.6 | |
| SAGAModel1=FAT-R18, Model2=HIRE-V162022.09 | — | — | — | — | 12 | |
| SAGAModel1=DM-R18, Model2=HIRE-V162022.09 | — | — | — | — | 13.8 | |
| SAGAModel1=DM-R18, Model2=FAT-R182022.09 | — | — | — | — | 21.2 | |
| SAGAModel1=DM-R18, Model2=SR*-V112022.09 | — | — | — | — | 18.9 | |
| SAGAModel1=FAT-R18, Model2=TIC-R192022.09 | — | — | — | — | 8.4 | |
| SAGAModel1=DM-R18, Model2=SR*-W162022.09 | — | — | — | — | 19.5 | |
| SAGAModel1=DM-R18, Model2=TIC-R192022.09 | — | — | — | — | 7.1 | |
| SAGAModel 1=C-V, Model 2=S-R-BP2022.09 | — | — | — | — | 26.6 | |
| SAGAModel 1=C-V, Model 2=S-V-BP2022.09 | — | — | — | — | 81.4 | |
| SAGAModel 1=C-V, Model 2=S-V-T102022.09 | — | — | — | — | 87.6 | |
| SAGAModel 1=C-V, Model 2=S-R-T102022.09 | — | — | — | — | 77.3 | |
| SAGAModel 1=S-R-BP, Model 2=S-V-T102022.09 | — | — | — | — | 18.4 | |
| SAGAModel 1=V-L16, Model 2=S-R-BP2022.09 | — | — | — | — | 23.9 | |
| SAGAModel 1=V-L16, Model 2=S-V-BP2022.09 | — | — | — | — | 52.4 | |
| SAGAModel 1=V-L16, Model 2=S-V-T102022.09 | — | — | — | — | 28.4 |