Universal Adversarial Attack on DiffAE
44.55Mean L2 DistortionGRILL-L2
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| GRILL-L2Perturbation Radius (c)=0.22, Optimization Objective=L22025.05 | 44.55 | — | — | |
| LA-L2Perturbation Radius (c)=0.22, Optimization Objective=L22025.05 | 45.06 | — | — | |
| LA-L2Perturbation Radius (c)=0.26, Optimization Objective=L22025.05 | 51.07 | — | — | |
| GRILL-L2Perturbation Radius (c)=0.26, Optimization Objective=L22025.05 | 51.36 | — | — | |
| LA-L2Perturbation Radius (c)=0.3, Optimization Objective=L22025.05 | 55.21 | — | — | |
| GRILL-L2Perturbation Radius (c)=0.3, Optimization Objective=L22025.05 | 57.29 | — | — | |
| LA-cosPerturbation Radius (c)=0.22, Optimization Objective=Cosine2025.05 | 80.74 | — | — | |
| LA-cosPerturbation Radius (c)=0.26, Optimization Objective=Cosine2025.05 | 83.91 | — | — | |
| LA-cosPerturbation Radius (c)=0.3, Optimization Objective=Cosine2025.05 | 86.64 | — | — | |
| GRILL-cosPerturbation Radius (c)=0.22, Optimization Objective=Cosine2025.05 | 93.91 | 16.31 | — | |
| GRILL-cosPerturbation Radius (c)=0.26, Optimization Objective=Cosine2025.05 | 97.5 | 16.19 | — | |
| GRILL-cosPerturbation Radius (c)=0.3, Optimization Objective=Cosine2025.05 | 98.67 | 13.89 | — |