Targeted Adversarial Attack on ImageNet 10-Targets (all-source)
95.7Targeted Attack Success RateMTDSI+RAP-LS
Evaluation Results
| Method | Links | |
|---|---|---|
| MTDSI+RAP-LSTarget Model=DenseNet-121, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 95.7 | |
| MTDSITarget Model=DenseNet-121, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 93.2 | |
| MTDI+RAP-LSTarget Model=DenseNet-121, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 90.8 | |
| MTDSI+RAP-LSTarget Model=VGG-16, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 88.1 | |
| MTDI+RAP-LSTarget Model=VGG-16, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 87.2 | |
| MTDSITarget Model=VGG-16, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 80 | |
| TTPTarget Model=DenseNet-121, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 79.6 | |
| TTPTarget Model=VGG-16, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 78.6 | |
| MTDITarget Model=DenseNet-121, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 78.6 | |
| MTDITarget Model=VGG-16, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 74.6 | |
| MTDSI+RAP-LSTarget Model=Inc-v3, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 59.3 | |
| MTDSITarget Model=Inc-v3, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 41.3 | |
| TTPTarget Model=Inc-v3, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 40.3 | |
| MTDI+RAP-LSTarget Model=Inc-v3, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 35.4 | |
| MTDITarget Model=Inc-v3, Surrogate Model=ResNet-50, Attack Setting=10-Targets (all-source)2022.10 | 12.7 |