Universal Adversarial Attack on ImageNet (val)
46.01FR (AlexNet)TRM-UAP
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| TRM-UAPSurrogate Model=VGG192025.02 | 46.01 | 89.82 | 91.35 | 47.19 | 46.48 | 64.17 | |
| TRM-UAPSurrogate Model=VGG162025.02 | 47.53 | 94.3 | 89.68 | 61.43 | 53.95 | 69.38 | |
| PSP-UAPSurrogate Model=VGG192025.02 | 48.93 | 94.55 | 94.65 | 67.13 | 58.83 | 72.81 | |
| AT-UAP-USurrogate Model=ResNet1522025.02 | 49.78 | 62.78 | 60.54 | 73.15 | 48.37 | 58.92 | |
| PSP-UAPSurrogate Model=VGG162025.02 | 50.4 | 96.26 | 92.6 | 74.1 | 64.89 | 75.65 | |
| TRM-UAPSurrogate Model=ResNet1522025.02 | 53.56 | 77.2 | 73.3 | 67.46 | 57.54 | 65.81 | |
| AT-UAP-USurrogate Model=VGG162025.02 | 54.15 | 94.5 | 86.65 | 36.96 | 48.53 | 64.16 | |
| AT-UAP-USurrogate Model=GoogleNet2025.02 | 55.65 | 71.38 | 68.25 | 43.03 | 82.6 | 64.18 | |
| PSP-UAPSurrogate Model=ResNet1522025.02 | 58.82 | 88.59 | 87.35 | 85.65 | 76 | 79.28 | |
| TRM-UAPSurrogate Model=GoogleNet2025.02 | 60.1 | 79.66 | 79.98 | 58.85 | 85.32 | 72.78 | |
| AT-UAP-USurrogate Model=VGG192025.02 | 62.05 | 88.96 | 92.85 | 42.72 | 60.99 | 69.51 | |
| PSP-UAPSurrogate Model=GoogleNet2025.02 | 65.22 | 78.43 | 79.26 | 57.63 | 81.43 | 72.39 | |
| PSP-UAPSurrogate Model=AlexNet2025.02 | 91.77 | 76.56 | 74.07 | 49.2 | 66 | 71.52 | |
| TRM-UAPSurrogate Model=AlexNet2025.02 | 93.53 | 60.1 | 57.08 | 27.31 | 32.7 | 54.14 | |
| AT-UAP-USurrogate Model=AlexNet2025.02 | 96.66 | 72.33 | 67.24 | 43.63 | 62.01 | 68.37 |