Untargeted Adversarial Attack on CUB 200
0.55Median L2 DistortionSign-Opt (GradCAM)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-50, Explanation Method=GradCAM2026.04 | 0.55 | 7 | |
| Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-50, Explanation Method=InvGrad2026.04 | 0.55 | 6 | |
| Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-50, Explanation Method=LIME2026.04 | 0.56 | 7 | |
| HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=InvGrad2026.04 | 0.56 | 10 | |
| Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-50, Explanation Method=SHAP2026.04 | 0.58 | 7 | |
| HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=GradCAM2026.04 | 0.58 | 6 | |
| HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=LIME2026.04 | 0.58 | 10 | |
| HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=SHAP2026.04 | 0.62 | 10 | |
| HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=GradCAM2026.04 | 0.82 | 20 | |
| HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=SHAP2026.04 | 0.83 | 17 | |
| HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=InvGrad2026.04 | 0.85 | 19 | |
| HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=LIME2026.04 | 0.86 | 20 | |
| RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-50, Explanation Method=GradCAM2026.04 | 1.04 | 28 | |
| RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-50, Explanation Method=InvGrad2026.04 | 1.04 | 28 | |
| RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-50, Explanation Method=SHAP2026.04 | 1.04 | 29 | |
| RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-50, Explanation Method=LIME2026.04 | 1.05 | 28 | |
| HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=Naive2026.04 | 1.81 | 45 | |
| RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-50, Explanation Method=Naive2026.04 | 2.53 | 60 | |
| HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-50, Explanation Method=Naive2026.04 | 2.64 | 66 | |
| Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-50, Explanation Method=Naive2026.04 | 3.05 | 67 |