Targeted Adversarial Attack on ImageNet (test)
76.46Average Success RateM3D + SCGA
Evaluation results
| Method | Links | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| M3D + SCGAVictim Architecture=DenseNet1212025.06 | 76.46 | — | — | — | — | — | — | 76.53 | 77.11 | 82.64 | 87.74 | 82.81 | 78.72 | 74.12 | 78.29 | 79.43 | 47.2 | |
| M3D + SCGAVictim Architecture=ResNet502025.06 | 75.37 | — | — | — | — | — | — | 71.02 | 73.6 | 80.69 | 88.04 | 87.64 | 83.88 | 68.97 | 84.88 | 69.6 | 45.36 | |
| RDI-FTM-E-SIm=2Surrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI, Scaled Input=true, Scale m=22024.11 | 74.3 | 96.3 | 71.2 | 74.8 | 54.7 | 74.6 | 3.82 | — | — | — | — | — | — | — | — | — | — | |
| M3D + SCGAVictim Architecture=WRN-50-22025.06 | 69.37 | — | — | — | — | — | — | 72.41 | 69.22 | 77.94 | 79.61 | 82.97 | 69.83 | 66.16 | 76.32 | 58.2 | 41.01 | |
| M3DVictim Architecture=DenseNet1212025.06 | 67.9 | — | — | — | — | — | — | 71.24 | 77.12 | 73.35 | 85.37 | 71.75 | 73.79 | 60.63 | 78.7 | 69.66 | 17.34 | |
| M3DVictim Architecture=ResNet502025.06 | 66.77 | — | — | — | — | — | — | 68.54 | 75.48 | 77.67 | 79.43 | 77.64 | 80.05 | 54.48 | 89.04 | 55.85 | 9.51 | |
| RDI-SISurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 65.7 | 98.4 | 58.4 | 69.2 | 38.8 | 63.8 | 8.38 | — | — | — | — | — | — | — | — | — | — | |
| M3D + SCGAVictim Architecture=ResNet1522025.06 | 62.54 | — | — | — | — | — | — | 60.35 | 58.8 | 68.61 | 79.73 | 73.64 | 65.47 | 56.12 | 70.29 | 52.77 | 39.63 | |
| M3DVictim Architecture=WRN-50-22025.06 | 60.57 | — | — | — | — | — | — | 64.55 | 68.95 | 73.51 | 69.53 | 73.04 | 66.53 | 46.85 | 84.39 | 45.17 | 13.15 | |
| RDI-FTM-ESurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 59.7 | 96 | 54.9 | 55.6 | 36.3 | 55.8 | 3.81 | — | — | — | — | — | — | — | — | — | — | |
| RDI-FTMSurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 56.3 | 94.3 | 50.5 | 53.3 | 31 | 52.6 | 1.92 | — | — | — | — | — | — | — | — | — | — | |
| RDI-CFMSurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 54 | 96.5 | 47.2 | 50.1 | 27.4 | 48.8 | 1.8 | — | — | — | — | — | — | — | — | — | — | |
| M3DVictim Architecture=ResNet1522025.06 | 52.52 | — | — | — | — | — | — | 50.73 | 62.76 | 63.15 | 69.53 | 60.96 | 57.82 | 37.28 | 73.87 | 37.82 | 11.29 | |
| RDI-ODISurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 50.9 | 87.6 | 45.9 | 42.1 | 29.5 | 49.3 | 4.53 | — | — | — | — | — | — | — | — | — | — | |
| RDI-AdmixSurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 46.3 | 99.1 | 39 | 34.6 | 18.5 | 40.5 | 5.11 | — | — | — | — | — | — | — | — | — | — | |
| RDI-VTSurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 42.2 | 98.3 | 32 | 29.7 | 15.3 | 35.7 | 10.2 | — | — | — | — | — | — | — | — | — | — | |
| RDISurrogate Model=ViT, Attack Type=Targeted, Augmentation=MI-TI2024.11 | 37 | 99.5 | 24.3 | 23.3 | 11.7 | 26 | 1.76 | — | — | — | — | — | — | — | — | — | — |