Targeted Adversarial Attack on Im2GPS3k (test)
0.007LPIPSFGSM
Evaluation results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| FGSMepsilon (ε)=2/2552026.07 | 0.007 | 6.64 | 15.98 | 23.69 | 37.3 | 55.39 | 0.33 | 0.33 | 0.53 | 1.77 | 9.41 | |
| PGDepsilon (ε)=2/2552026.07 | 0.007 | 0.4 | 1.03 | 2.1 | 4.34 | 8.34 | 71.81 | 73.97 | 76.24 | 79.71 | 85.82 | |
| RTAepsilon (ε)=2/2552026.07 | 0.027 | 0.03 | 0.03 | 0.03 | 0.1 | 1.03 | 93.43 | 94.99 | 95.7 | 96.96 | 98.5 | |
| CWc=0.12026.07 | 0.031 | 0.43 | 1.63 | 2.8 | 5.44 | 10.88 | 53.79 | 55.59 | 59.26 | 63.9 | 74.74 | |
| FGSMepsilon (ε)=4/2552026.07 | 0.042 | 4.57 | 12.08 | 18.82 | 30.93 | 49.15 | 0.4 | 0.4 | 0.93 | 2.5 | 11.64 | |
| PGDepsilon (ε)=4/2552026.07 | 0.044 | 0 | 0.07 | 0.23 | 0.33 | 1.27 | 96.63 | 98.13 | 98.47 | 98.67 | 99.03 | |
| RTAepsilon (ε)=4/2552026.07 | 0.059 | 0 | 0 | 0 | 0.03 | 0.73 | 98.93 | 99.73 | 99.83 | 99.87 | 99.93 | |
| CWc=1.02026.07 | 0.079 | 0.1 | 0.43 | 0.63 | 1.4 | 3.97 | 81.95 | 83.35 | 84.35 | 86.55 | 90.52 |