Targeted Adversarial Attack on ImageNet-Compatible (test)
83Overall Success RateTMI + S4ST
Evaluation Results
| Method | Links | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TMI + S4STSurrogate Model=ResNet-50, TTA-oriented=true2024.10 | 83 | 23.56 | 1.45 | 93.5 | 93.9 | 93.9 | 85.9 | 93 | 92.9 | 93.1 | 92.3 | 63 | 86.3 | 74.8 | 73.8 | 80.1 | 75.1 | 63.2 | 73.8 | |
| TMI + H-AugSurrogate Model=ResNet-50, TTA-oriented=true2024.10 | 68.8 | 23.29 | 5.64 | 81.8 | 82.4 | 85.9 | 69.7 | 86 | 82.8 | 84.7 | 81.9 | 43.1 | 73.4 | 56.7 | 59 | 63 | 54.1 | 40.4 | 55.7 | |
| TMI + T-AugSurrogate Model=ResNet-50, TTA-oriented=true2024.10 | 65.5 | 23.57 | 1.33 | 82.1 | 82.7 | 81.9 | 72.4 | 84.1 | 84.4 | 82.8 | 81.5 | 41.7 | 61.9 | 47.5 | 45.2 | 64.2 | 50.2 | 36.4 | 49.6 | |
| TMI + BSRSurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 60 | 23.58 | 1.84 | 81.8 | 80.3 | 81.4 | 62.6 | 79.3 | 78.1 | 76.6 | 77.2 | 32.2 | 56.8 | 38.4 | 39.6 | 55.7 | 44.2 | 33.5 | 42.9 | |
| TMI + DeCoWASurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 58.4 | 23.57 | 2.78 | 74.9 | 78 | 77.4 | 56.7 | 74.4 | 77.7 | 73.7 | 73.3 | 40.6 | 58.4 | 36.1 | 36.6 | 55.1 | 44.1 | 33.3 | 43.5 | |
| TMI + SIASurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 58.3 | 23.57 | 1.55 | 82.5 | 81.3 | 84.3 | 51.1 | 74.2 | 76.2 | 72 | 74.5 | 30.8 | 58.5 | 42.6 | 39.3 | 53.2 | 40.7 | 29.8 | 42.1 | |
| TMI + ODISurrogate Model=ResNet-50, TTA-oriented=true2024.10 | 58.1 | 23.52 | 5.11 | 73.2 | 77.1 | 75.3 | 64.3 | 75.7 | 77 | 73.2 | 73.7 | 37.6 | 54.1 | 37.9 | 38.4 | 54.5 | 43 | 31.7 | 42.5 | |
| TMI + RDISurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 27.3 | 23.45 | 1.24 | 37.1 | 42.9 | 47.4 | 25.8 | 39.8 | 45.6 | 36.9 | 39.4 | 11 | 21.7 | 13.2 | 13.6 | 22.3 | 15 | 10.2 | 15.3 | |
| TMI + DISurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 22.4 | 23.42 | 1.44 | 29.6 | 33.7 | 48.8 | 15.4 | 35.4 | 38.1 | 28.3 | 32.8 | 5.9 | 17.1 | 10.8 | 11.1 | 19.1 | 11.6 | 8.3 | 12 | |
| TMI + SSASurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 19.8 | 23.8 | 1.43 | 35 | 32 | 35.1 | 22.5 | 30.4 | 35.1 | 33 | 31.9 | 4.8 | 11.1 | 7.1 | 7.4 | 10.8 | 7.2 | 6 | 7.8 | |
| TMI + SISurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 4.4 | 23.32 | 6.11 | 8.5 | 9.6 | 8.4 | 5.7 | 5.3 | 6.3 | 7 | 7.3 | 1.1 | 2.4 | 1.5 | 1.2 | 2.5 | 1.3 | 0.6 | 1.5 | |
| TMI + AdmixSurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 2.1 | 23.29 | 6.27 | 5.9 | 4.7 | 6.3 | 0.9 | 1.6 | 2.4 | 2.5 | 3.5 | 0.3 | 2 | 1 | 0.5 | 1.1 | 0.6 | 0.2 | 0.8 | |
| TMISurrogate Model=ResNet-50, TTA-oriented=false2024.10 | 0.8 | 23.15 | 1.24 | 2 | 1.5 | 2.4 | 0.6 | 0.7 | 0.7 | 0.9 | 1.3 | 0.2 | 0.9 | 0.4 | 0.1 | 0.1 | 0.2 | 0.2 | 0.3 |