Targeted Adversarial Attack on ImageNet 1000 images (val)
77.6Clean AccuracySA
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| SAModel=Inception v3, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 77.5 | |
| SAModel=Inception v3, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 76.4 | |
| SAModel=Inception v3, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 70.9 | |
| SAModel=Inception v3, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 59.8 | |
| MSAModel=Inception v3, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 74.4 | |
| MSAModel=Inception v3, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 70.6 | |
| MSAModel=Inception v3, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 60.1 | |
| MSAModel=Inception v3, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.6 | 49.5 | |
| SAModel=ResNet-50, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 76.9 | |
| SAModel=ResNet-50, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 75.1 | |
| SAModel=ResNet-50, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 62.5 | |
| SAModel=ResNet-50, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 34.4 | |
| MSAModel=ResNet-50, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 67.1 | |
| MSAModel=ResNet-50, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 52 | |
| MSAModel=ResNet-50, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 27.8 | |
| MSAModel=ResNet-50, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 77.3 | 12.1 | |
| SAModel=VGG-16-BN, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 74.5 | |
| SAModel=VGG-16-BN, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 72.2 | |
| SAModel=VGG-16-BN, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 51.5 | |
| SAModel=VGG-16-BN, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 17.4 | |
| MSAModel=VGG-16-BN, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 62.5 | |
| MSAModel=VGG-16-BN, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 45.2 | |
| MSAModel=VGG-16-BN, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 16.5 | |
| MSAModel=VGG-16-BN, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.012021.11 | 75 | 3.5 |