Targeted Adversarial Attack on CIFAR-100
23.01ASRDST
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| DSTSubstitute Model=ResNet-342022.04 | 23.01 | — | — | — | — | |
| DaSTSubstitute Model=VGG-192022.04 | 22.51 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-342022.04 | 22.48 | — | — | — | — | |
| MAZESubstitute Model=VGG-192022.04 | 21.48 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-182022.04 | 21.43 | — | — | — | — | |
| MAZESubstitute Model=ResNet-502022.04 | 20.35 | — | — | — | — | |
| MAZESubstitute Model=ResNet-342022.04 | 20.21 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-502022.04 | 19.95 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-342022.04 | 19.57 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-192022.04 | 18.66 | — | — | — | — | |
| MAZESubstitute Model=ResNet-182022.04 | 18.6 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-502022.04 | 17.56 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-182022.04 | 14.29 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-162022.04 | 13.4 | — | — | — | — | |
| MAZESubstitute Model=VGG-162022.04 | 12.41 | — | — | — | — | |
| DaSTSubstitute Model=VGG-162022.04 | 9.32 | — | — | — | — | |
| DaSTTarget Model=ResNet-50, Substitute Model=ResNet-342022.04 | — | 16.49 | 27.86 | 22.48 | 24.56 | |
| DDG+ASTTarget Model=ResNet-50, Substitute Model=ResNet-342022.04 | — | 17.82 | 26.33 | 19.57 | 28.95 | |
| DSTTarget Model=ResNet-50, Substitute Model=ResNet-342022.04 | — | 20.48 | 27.31 | 23.01 | 29.57 | |
| MAZETarget Model=ResNet-50, Substitute Model=ResNet-342022.04 | — | 20.42 | 24.81 | 20.21 | 23.85 |