Universal Adversarial Attack on beta-VAE
8.1Mean L2 DistortionLA-L2
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| LA-L2Perturbation Radius (c)=0.05, Optimization Objective=L22025.05 | 8.1 | — | |
| LA-L2Perturbation Radius (c)=0.06, Optimization Objective=L22025.05 | 9.21 | — | |
| GRILL-L2Perturbation Radius (c)=0.05, Optimization Objective=L22025.05 | 9.28 | — | |
| OA-L2Perturbation Radius (c)=0.05, Optimization Objective=L22025.05 | 9.68 | — | |
| GRILL-cosPerturbation Radius (c)=0.05, Optimization Objective=Cosine2025.05 | 10.05 | 3.82 | |
| LA-L2Perturbation Radius (c)=0.07, Optimization Objective=L22025.05 | 10.31 | — | |
| GRILL-L2Perturbation Radius (c)=0.06, Optimization Objective=L22025.05 | 11.09 | — | |
| GRILL-cosPerturbation Radius (c)=0.06, Optimization Objective=Cosine2025.05 | 11.24 | -5.46 | |
| OA-L2Perturbation Radius (c)=0.06, Optimization Objective=L22025.05 | 11.89 | — | |
| GRILL-L2Perturbation Radius (c)=0.07, Optimization Objective=L22025.05 | 13.08 | — | |
| GRILL-cosPerturbation Radius (c)=0.07, Optimization Objective=Cosine2025.05 | 14.61 | -0.47 | |
| OA-L2Perturbation Radius (c)=0.07, Optimization Objective=L22025.05 | 14.68 | — |