Targeted Adversarial Attack on ImageNet (Specific Model Suite Evaluation)
34.2VGG-16 Robust AccuracyRDI-FTM-E
Evaluation results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RDI-FTM-ESource=Inc-v3, MI-TI=true, Time (s)=4.372024.11 | 34.2 | 39.3 | 40.6 | 54.4 | 47 | 37.1 | 51.6 | 52.4 | 96.6 | 59.2 | 51.2 | |
| RDI-FTMSource=Inc-v3, MI-TI=true, Time (s)=2.352024.11 | 25.8 | 30.9 | 32.1 | 41.7 | 36.3 | 30.7 | 41.4 | 42.9 | 94.1 | 48.1 | 42.4 | |
| RDI-CFMSource=Inc-v3, MI-TI=true, Time (s)=2.132024.11 | 22.9 | 26.8 | 26.2 | 39.1 | 34.1 | 27.1 | 38.6 | 36.2 | 95.9 | 44.8 | 39.2 | |
| ODISource=Inc-v3, MI-TI=true, Time (s)=6.422024.11 | 14.3 | 14.9 | 16.7 | 32.3 | 20.3 | 13.7 | 25.3 | 26.4 | 95.9 | 31.6 | 29.1 | |
| RDI-SUSource=Inc-v3, MI-TI=true, Time (s)=2.362024.11 | 7.8 | 11 | 11.4 | 12.7 | 9.4 | 8.2 | 6.3 | 8.3 | 98.7 | 10.9 | 18.5 | |
| RDI-AdmixSource=Inc-v3, MI-TI=true, Time (s)=4.922024.11 | 6.3 | 6.5 | 8.8 | 12.8 | 6 | 6.1 | 10.9 | 12.2 | 98.7 | 13.6 | 18.2 | |
| RDI-VTSource=Inc-v3, MI-TI=true, Time (s)=10.52024.11 | 5.9 | 8.9 | 9.4 | 13.2 | 7.4 | 5.9 | 9.8 | 12.3 | 98.7 | 14.7 | 18.6 | |
| RDI-SISource=Inc-v3, MI-TI=true, Time (s)=8.112024.11 | 4 | 5.2 | 5.7 | 11 | 6.3 | 4.6 | 8.2 | 11.6 | 98.8 | 12.1 | 16.8 | |
| RDISource=Inc-v3, MI-TI=true, Time (s)=1.762024.11 | 3.5 | 3.8 | 4 | 7 | 3.1 | 3 | 5.9 | 6.3 | 98.7 | 7.1 | 14.2 | |
| DISource=Inc-v3, MI-TI=true, Time (s)=2.012024.11 | 2.9 | 2.4 | 3.4 | 5 | 1.9 | 1.8 | 3.7 | 3 | 99.2 | 4.2 | 12.8 |