Targeted Black-box Attack on ImageNet (test)
47.5TSR on VGG16SCGA + CGNC
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| SCGA + CGNCSurrogate model=VGG19, Perturbation budget (epsilon)=16/255, Perturbation constraint=l_infinity, Attack mode=normal mode, Guidance=CLIP-guided2025.06 | 47.5 | 7.9 | 10.96 | 12.24 | 31.29 | 13.36 | 3.98 | 18.18 | |
| CGNCSurrogate model=VGG19, Perturbation budget (epsilon)=16/255, Perturbation constraint=l_infinity, Attack mode=normal mode, Guidance=CLIP-guided2025.06 | 14.71 | 2.03 | 2.77 | 2.68 | 8.31 | 2.41 | 0.96 | 4.84 |