Targeted Adversarial Attack on ImageNet (val) (Specific Model Suite)
1,840ViT PerformanceRDI-FTM-E
Evaluation results
| Method | Links | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RDI-FTM-ESurrogate Model=RN-50 + Inc-v3, Combined with=MI-TI2024.11 | 1,840 | 88.2 | 98.1 | 97.1 | 93.4 | 76.7 | 83.4 | 77.1 | 74.9 | 3,010 | 53.4 | 58 | — | |
| RDI-FTM-ESource Model=Inc-v3, Time (s)=4.37, MI-TI=true2024.11 | 380 | — | — | — | — | — | — | — | 3,270 | 680 | 1,270 | 2,040 | 1,530 | |
| RDI-FTMSource Model=Inc-v3, Time (s)=2.35, MI-TI=true2024.11 | 240 | — | — | — | — | — | — | — | 2,500 | 450 | 1,000 | 1,530 | 1,150 | |
| RDI-CFMSource Model=Inc-v3, Time (s)=2.13, MI-TI=true2024.11 | 210 | — | — | — | — | — | — | — | 2,190 | 320 | 610 | 1,160 | 890 | |
| ODISource Model=Inc-v3, Time (s)=6.42, MI-TI=true2024.11 | 80 | — | — | — | — | — | — | — | 1,240 | 170 | 350 | 670 | 500 | |
| RDI-FTM-ESurrogate Model=RN-50 + LeViT, Combined with=MI-TI2024.11 | 51.5 | 90 | 98.1 | 86.7 | 93.9 | 76.7 | 82.4 | 80.1 | 99.7 | 72.6 | 87.9 | 90.8 | — | |
| RDI-VTSource Model=Inc-v3, Time (s)=10.5, MI-TI=true2024.11 | 40 | — | — | — | — | — | — | — | 520 | 80 | 160 | 180 | 200 | |
| RDI-SISource Model=Inc-v3, Time (s)=8.11, MI-TI=true2024.11 | 30 | — | — | — | — | — | — | — | 410 | 90 | 70 | 320 | 180 | |
| DISurrogate Model=RN-50 + Inc-v3, Combined with=MI-TI2024.11 | 20 | 63.5 | 99 | 99.2 | 77 | 16.6 | 24 | 12.5 | 7.3 | 70 | 3.1 | 2.6 | — | |
| RDISource Model=Inc-v3, Time (s)=1.76, MI-TI=true2024.11 | 20 | — | — | — | — | — | — | — | 180 | 20 | 40 | 70 | 70 | |
| RDI-SUSource Model=Inc-v3, Time (s)=2.36, MI-TI=true2024.11 | 20 | — | — | — | — | — | — | — | 200 | 30 | 130 | 100 | 100 | |
| DISource Model=Inc-v3, Time (s)=2.01, MI-TI=true2024.11 | 10 | — | — | — | — | — | — | — | 30 | 0 | 0 | 10 | 10 | |
| RDI-AdmixSource Model=Inc-v3, Time (s)=4.92, MI-TI=true2024.11 | 10 | — | — | — | — | — | — | — | 410 | 60 | 140 | 140 | 150 | |
| RDI-FTM-ESurrogate Model=DN-121, Combined with=MI-TI2024.11 | 4.2 | 79.5 | 87.6 | 64.6 | 98 | 48.7 | 60.1 | 47.6 | 43.4 | 8.9 | 24.4 | 26.7 | — | |
| RDI-FTMSurrogate Model=DN-121, Combined with=MI-TI2024.11 | 3.7 | 77.3 | 85.6 | 62.8 | 98.2 | 46.9 | 58.4 | 46 | 40 | 8.2 | 21.6 | 26.5 | — | |
| RDI-CFMSurrogate Model=DN-121, Combined with=MI-TI2024.11 | 3.6 | 76.2 | 83.9 | 56.1 | 97.8 | 43.6 | 53.8 | 41.1 | 32.8 | 6.4 | 17.3 | 21.1 | — | |
| RDI-ODISurrogate Model=DN-121, Combined with=MI-TI2024.11 | 3.3 | 64.2 | 71.7 | 52.8 | 98 | 39.8 | 45.9 | 31.4 | 26.9 | 7.4 | 14.7 | 21.9 | — | |
| RDI-Admix5Surrogate Model=DN-121, Combined with=MI-TI2024.11 | 2.4 | 49.6 | 65.3 | 41 | 98.6 | 28.9 | 34.3 | 21.6 | 21.8 | 3.4 | 10.5 | 14.2 | — | |
| RDI-VTSurrogate Model=DN-121, Combined with=MI-TI2024.11 | 2.2 | 47.7 | 62.1 | 31.5 | 98.6 | 25.4 | 27.2 | 20.3 | 19.2 | 3.5 | 8.3 | 11.7 | — | |
| RDI-SISurrogate Model=DN-121, Combined with=MI-TI2024.11 | 2 | 45.4 | 60.1 | 34.3 | 98.6 | 22 | 25.8 | 16.1 | 16.1 | 2.4 | 8.2 | 11.7 | — | |
| RDI-AdmixSurrogate Model=DN-121, Combined with=MI-TI2024.11 | 1 | 53.2 | 67.6 | 31.1 | 98.3 | 20.1 | 26.5 | 17.8 | 14.7 | 1.7 | 6.8 | 7.4 | — | |
| RDISurrogate Model=DN-121, Combined with=MI-TI2024.11 | 0.8 | 42.1 | 55.7 | 20.8 | 98.5 | 12.8 | 18.8 | 10.1 | 8.5 | 1.3 | 3.7 | 4.5 | — | |
| DISurrogate Model=DN-121, Combined with=MI-TI2024.11 | 0.2 | 37.1 | 44.4 | 7.1 | 98.7 | 4.3 | 8.3 | 5.2 | 3 | 0.4 | 1 | 1.1 | — |