Targeted Adversarial Attack Success Rate on MNIST
73.85ASRDST
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| DSTTarget Model=AlexNet, Attack Method=BIM, Substitute Model=ResNet-342022.04 | 73.85 | — | — | — | — | |
| DSTSubstitute Model=ResNet-342022.04 | 68.49 | — | — | — | — | |
| MAZESubstitute Model=VGG-192022.04 | 67.5 | — | — | — | — | |
| MAZESubstitute Model=ResNet-342022.04 | 67.39 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-342022.04 | 67.33 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-182022.04 | 66.91 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-342022.04 | 66.45 | — | — | — | — | |
| DSTTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 64.82 | — | — | — | — | |
| MAZESubstitute Model=ResNet-502022.04 | 64.23 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-192022.04 | 63.81 | — | — | — | — | |
| DaSTSubstitute Model=VGG-192022.04 | 61.48 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Attack Method=PGD, Substitute Model=ResNet-342022.04 | 58.28 | — | — | — | — | |
| MAZESubstitute Model=ResNet-182022.04 | 57.86 | — | — | — | — | |
| DDG+ASTSubstitute Model=ResNet-502022.04 | 55.3 | — | — | — | — | |
| MAZESubstitute Model=VGG-162022.04 | 54.21 | — | — | — | — | |
| DaSTSubstitute Model=VGG-162022.04 | 53.92 | — | — | — | — | |
| DDG+ASTSubstitute Model=VGG-162022.04 | 48.99 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-502022.04 | 48.47 | — | — | — | — | |
| DaSTSubstitute Model=ResNet-182022.04 | 42.01 | — | — | — | — | |
| DaSTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 59.28 | 70.47 | 58.28 | 59.33 | |
| DDG+ASTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 57.84 | 71.9 | 62.2 | 52.11 | |
| DSTTarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 64.23 | 73.85 | 64.82 | 60.57 | |
| MAZETarget Model=AlexNet, Substitute Model=ResNet-342022.04 | — | 61.42 | 67.29 | 60.48 | 57.32 |