Targeted Adversarial Attack on CIFAR-10
94.22ASRPI-Attack
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| PI-Attackperturbation size schedule=true2026.02 | 94.22 | — | — | — | — | 201.5 | 4.87 | |
| PI-Attackperturbation size schedule=false2026.02 | 81.48 | — | — | — | — | 299.4 | 4.09 | |
| DRAPTarget Model=Average, Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 74.3 | — | — | — | — | — | — | |
| SimBA-DCT2026.02 | 73.98 | — | — | — | — | 302.4 | 4.81 | |
| Square attack2026.02 | 71.56 | — | — | — | — | 301.6 | 5.44 | |
| DRAPTarget Model=Average, Target Model Set=Metaformer Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 54.3 | — | — | — | — | — | — | |
| DSTSubstitute Model=ResNet-342022.04 | 47.9 | — | — | — | — | — | — | |
| DaSTSubstitute Model=ResNet-502022.04 | 47 | — | — | — | — | — | — | |
| DaSTSubstitute Model=ResNet-342022.04 | 46.1 | — | — | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-342022.04 | 45.25 | — | — | — | — | — | — | |
| SIATarget Model=Overall Average, Target Model Set=Total, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 43.2 | — | — | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-162022.04 | 43.05 | — | — | — | — | — | — | |
| MAZESubstitute Model=VGG-162022.04 | 42.93 | — | — | — | — | — | — | |
| DRAPTarget Model=Overall Average, Target Model Set=Total, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 42.1 | — | — | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-192022.04 | 41.29 | — | — | — | — | — | — | |
| MAZESubstitute Model=ResNet-342022.04 | 41.26 | — | — | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-182022.04 | 40.82 | — | — | — | — | — | — | |
| SSATarget Model=Overall Average, Target Model Set=Total, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 39.7 | — | — | — | — | — | — | |
| DaSTSubstitute Model=VGG-192022.04 | 39.61 | — | — | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-502022.04 | 38.9 | — | — | — | — | — | — | |
| MAZESubstitute Model=ResNet-182022.04 | 37.48 | — | — | — | — | — | — | |
| DaSTSubstitute Model=ResNet-182022.04 | 37.02 | — | — | — | — | — | — | |
| MAZESubstitute Model=ResNet-502022.04 | 36.06 | — | — | — | — | — | — | |
| MAZESubstitute Model=VGG-192022.04 | 35.32 | — | — | — | — | — | — | |
| RAPTarget Model=Overall Average, Target Model Set=Total, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 33.1 | — | — | — | — | — | — | |
| CWATarget Model=Overall Average, Target Model Set=Total, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 32.1 | — | — | — | — | — | — | |
| DaSTSubstitute Model=VGG-162022.04 | 19.49 | — | — | — | — | — | — | |
| DRAPTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 8.6 | — | — | — | — | — | — | |
| DRAPTarget Model=Average, Target Model Set=ConvNet(AT) Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 6.4 | — | — | — | — | — | — | |
| CWATarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 6.2 | — | — | — | — | — | — | |
| PGNTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 5.4 | — | — | — | — | — | — | |
| SSATarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 5.1 | — | — | — | — | — | — | |
| SIATarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 4.9 | — | — | — | — | — | — | |
| DI2-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 4.3 | — | — | — | — | — | — | |
| RAPTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 4.2 | — | — | — | — | — | — | |
| PI-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 4 | — | — | — | — | — | — | |
| AdmixTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.8 | — | — | — | — | — | — | |
| MI-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.8 | — | — | — | — | — | — | |
| VT-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.8 | — | — | — | — | — | — | |
| SI-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.5 | — | — | — | — | — | — | |
| I-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.4 | — | — | — | — | — | — | |
| TI-FGSMTarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.3 | — | — | — | — | — | — | |
| SVRETarget Model=AlexNet [56], Target Model Set=ConvNet Set, Surrogate Models=ResNet-50, ViT, WideResNet-70-16(AT)2025.04 | 3.2 | — | — | — | — | — | — | |
| DaSTTarget Model=VGG-16, Substitute Model=ResNet-342022.04 | — | 30.24 | 45.1 | 40.29 | 42.13 | — | — | |
| DDG+ASTTarget Model=VGG-16, Substitute Model=ResNet-342022.04 | — | 37.58 | 42.06 | 34.87 | 45.39 | — | — | |
| DSTTarget Model=VGG-16, Substitute Model=ResNet-342022.04 | — | 39.53 | 47.2 | 44.71 | 48.06 | — | — | |
| MAZETarget Model=VGG-16, Substitute Model=ResNet-342022.04 | — | 26.35 | 40.49 | 29.83 | 38.1 | — | — |