Universal Adversarial Attack on ImageNet (val) (Specific Model Suite)
96.26Attack Success Rate (VGG16)PSP-UAP
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| PSP-UAPAttack Type=White-box2025.02 | 96.26 | 91.77 | 94.65 | 85.65 | 81.43 | 89.95 | |
| AT-UAP-UAttack Type=White-box2025.02 | 94.5 | 96.66 | 92.85 | 73.15 | 82.6 | 87.95 | |
| TRM-UAPAttack Type=White-box2025.02 | 94.3 | 93.53 | 91.35 | 67.46 | 85.32 | 86.39 | |
| GD-UAPAttack Type=White-box2025.02 | 90.01 | 85.24 | 87.34 | 45.96 | 45.87 | 70.88 | |
| Cosine-UAPAttack Type=White-box2025.02 | 89.48 | 91.07 | 86.81 | 65.35 | 87.57 | 84.05 | |
| AAAAttack Type=White-box2025.02 | 71.59 | 89.04 | 72.84 | 60.72 | 75.28 | 73.89 | |
| PD-UAPAttack Type=White-box2025.02 | 70.69 | — | 64.98 | 46.39 | 67.12 | — | |
| FFFAttack Type=White-box2025.02 | 47.1 | 80.92 | 43.62 | — | — | 56.44 |