Targeted Attack on ImageNet (test)
34.77Mean L2 Distortion (2K Budget)ARS-OPT-S
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| ARS-OPT-STarget Model=Swin Transformer, D.R.=true2025.12 | 34.77 | 20.92 | 14.46 | 10.71 | 8.31 | 5.24 | 3.79 | |
| BBATarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 35.28 | 28.45 | 24.65 | 22.16 | 20.34 | 17.54 | 15.98 | |
| AHATarget Model=Swin Transformer, D.R.=true2025.12 | 36.11 | 28.04 | 23.68 | 20.78 | 18.76 | 15.51 | 13.72 | |
| PARS-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 36.53 | 23.6 | 17.98 | 14.5 | 12.2 | 8.61 | 6.9 | |
| PARS-OPT-STarget Model=Swin Transformer, D.R.=true, Prior Model=ResNet50 & ConViT2025.12 | 37.06 | 22.56 | 16.26 | 12.26 | 9.83 | 6.54 | 4.8 | |
| PARS-OPT-STarget Model=Swin Transformer, D.R.=true, Prior Model=ResNet502025.12 | 37.1 | 22.92 | 15.85 | 11.88 | 9.42 | 6.03 | 4.3 | |
| CGBA-HTarget Model=Swin Transformer, D.R.=true2025.12 | 37.81 | 27.83 | 23.19 | 19.67 | 17.17 | 13.1 | 10.83 | |
| PARS-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 38.01 | 25.72 | 19.72 | 15.73 | 13.15 | 9.39 | 7.29 | |
| ARS-OPTTarget Model=Swin Transformer, D.R.=false2025.12 | 38.85 | 26.14 | 19.7 | 15.67 | 12.99 | 9.1 | 6.96 | |
| Prior-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 39.62 | 30.27 | 25.75 | 23.12 | 21.45 | 19.27 | 18.33 | |
| TATarget Model=Swin Transformer, D.R.=false2025.12 | 40.72 | 31.92 | 25.88 | 22.25 | 19.45 | 15.52 | 12.89 | |
| Prior-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 42.63 | 30.32 | 25.6 | 23.01 | 21.44 | 19.19 | 17.98 | |
| Prior-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 42.96 | 33.51 | 28.64 | 25.67 | 23.72 | 20.86 | 19.45 | |
| QEBATarget Model=Swin Transformer, D.R.=true2025.12 | 42.99 | 30.31 | 24.38 | 19.4 | 16.52 | 11.58 | 8.91 | |
| Prior-Sign-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 43.2 | 33.48 | 28.21 | 24.99 | 22.84 | 19.66 | 17.94 | |
| Prior-Sign-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 43.88 | 34.32 | 29.23 | 26.06 | 23.86 | 20.52 | 18.66 | |
| PARS-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 43.91 | 28.16 | 22.56 | 19.36 | 17.23 | 14.13 | 12.32 | |
| Sign-OPTTarget Model=Swin Transformer, D.R.=false2025.12 | 44.91 | 35.98 | 30.89 | 27.52 | 25.27 | 21.84 | 19.95 | |
| Prior-Sign-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 49.37 | 31.34 | 23.67 | 19.32 | 16.7 | 12.82 | 10.77 | |
| PARS-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 49.37 | 33.88 | 26.91 | 22.72 | 19.94 | 16.06 | 13.67 | |
| Prior-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 49.84 | 36.8 | 31.04 | 27.6 | 25.28 | 21.84 | 19.8 | |
| HSJATarget Model=Swin Transformer, D.R.=false2025.12 | 50.96 | 39.26 | 30.66 | 25.64 | 21.73 | 16.19 | 12.75 | |
| EvolutionaryTarget Model=Swin Transformer, D.R.=false2025.12 | 51.71 | 38.29 | 31.23 | 26.85 | 23.76 | 19.28 | 16.56 | |
| AHATarget Model=Inception-v4, D.R.=true2025.12 | 54.12 | 36.09 | 26.46 | 20.5 | 16.49 | 10.86 | 8.12 | |
| PARS-OPT-STarget Model=Inception-v4, D.R.=true, Prior Model=IncResV22025.12 | 55.18 | 34.12 | 24.22 | 18.73 | 15.02 | 10.18 | 7.84 | |
| PARS-OPT-STarget Model=Inception-v4, D.R.=true, Prior Model=IncResV2 & Xception2025.12 | 55.28 | 33.3 | 23.7 | 18.64 | 15.31 | 10.78 | 8.33 | |
| Prior-Sign-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 55.42 | 37 | 28.14 | 22.96 | 19.51 | 14.36 | 11.66 | |
| BBATarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 56.28 | 44.98 | 38.43 | 34.07 | 30.94 | 25.76 | 22.63 | |
| CGBA-HTarget Model=Inception-v4, D.R.=true2025.12 | 56.32 | 37.82 | 29.69 | 23.86 | 20 | 14.31 | 11.56 | |
| QEBATarget Model=Inception-v4, D.R.=true2025.12 | 58.31 | 37.68 | 28.56 | 21.74 | 18 | 12.07 | 9.25 | |
| ARS-OPT-STarget Model=Inception-v4, D.R.=true2025.12 | 59.15 | 37.52 | 26.37 | 19.62 | 15.37 | 9.94 | 7.38 | |
| SurFreeTarget Model=Swin Transformer, D.R.=false2025.12 | 61.31 | 47.67 | 39.39 | 33.84 | 29.73 | 22.96 | 18.73 | |
| TATarget Model=Inception-v4, D.R.=false2025.12 | 61.99 | 47.07 | 37.16 | 31.51 | 27.11 | 21.08 | 17.32 | |
| EvolutionaryTarget Model=Inception-v4, D.R.=false2025.12 | 65.06 | 48.37 | 38.72 | 32.12 | 27.39 | 19.94 | 15.61 | |
| Sign-OPTTarget Model=Inception-v4, D.R.=false2025.12 | 65.2 | 48.33 | 38.49 | 32.1 | 27.53 | 20.39 | 16.28 | |
| ARS-OPTTarget Model=Inception-v4, D.R.=false2025.12 | 65.53 | 46.6 | 35.84 | 28.84 | 24.02 | 16.63 | 12.69 | |
| SurFreeTarget Model=Inception-v4, D.R.=false2025.12 | 74.89 | 61.16 | 51.56 | 44.48 | 39 | 29.35 | 23.15 | |
| HSJATarget Model=Inception-v4, D.R.=false2025.12 | 79 | 60.9 | 47.25 | 39.19 | 32.95 | 24.55 | 19.52 |