Transferable Adversarial Attack on ImageNet
50.8Performance (ViT)DSM-RaPA
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| DSM-RaPASurrogate Model=ResNet-502025.04 | 50.8 | 84.2 | 42.2 | 74.6 | 72.6 | 25.1 | 58.3 | |
| SASD-RaPASurrogate Model=ResNet-50, Weight Scaling=false2025.04 | 42.9 | 79.5 | 35.3 | 63 | 63.1 | 25.9 | 51.6 | |
| RaPASurrogate Model=ResNet-502025.04 | 33.8 | 75.4 | 27.6 | 59.5 | 57.3 | 15.6 | 45 | |
| SASD-WSSurrogate Model=ResNet-50, Weight Scaling=true2025.04 | 30.1 | 74.1 | 25.6 | 52.1 | 52.9 | 18.1 | 42.2 | |
| DSMSurrogate Model=ResNet-502025.04 | 8.1 | 49.5 | 7.8 | 31.6 | 23.3 | 3.1 | 20.6 |