Targeted Adversarial Attack on ImageNet (L2 Distortion and Accuracy)
2.75Median L2 DistortionHSJA Targeted (InvGrad)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| HSJA Targeted (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=ViT, Explanation Method=InvGrad2026.04 | 2.75 | 1 | |
| HSJA Targeted (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=ViT, Explanation Method=GradCAM2026.04 | 2.78 | 1 | |
| HSJA Targeted (LIME)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=ViT, Explanation Method=LIME2026.04 | 2.83 | 1 | |
| HSJA Targeted (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=ViT, Explanation Method=SHAP2026.04 | 2.83 | 0 | |
| HSJA Targeted (Naive)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=ViT, Explanation Method=Naive2026.04 | 4.14 | 6 | |
| HSJA Targeted (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=EffNet, Explanation Method=SHAP2026.04 | 5.68 | 20 | |
| HSJA Targeted (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=EffNet, Explanation Method=InvGrad2026.04 | 5.77 | 17 | |
| HSJA Targeted (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=EffNet, Explanation Method=GradCAM2026.04 | 5.84 | 24 | |
| HSJA Targeted (LIME)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=EffNet, Explanation Method=LIME2026.04 | 6.1 | 17 | |
| HSJA Targeted (Naive)Attack Setting=Pre-trained, Attack Method=HSJA Targeted, Victim Model=EffNet, Explanation Method=Naive2026.04 | 6.5 | 28 |