Untargeted Adversarial Attack on ImageNet 1000 images (val)
77.6Clean AccuracySA
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| SAModel=Inception v3, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 16.6 | |
| SAModel=Inception v3, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 6.1 | |
| SAModel=Inception v3, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 2.3 | |
| SAModel=Inception v3, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 1 | |
| MSAModel=Inception v3, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 10.2 | |
| MSAModel=Inception v3, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 5.1 | |
| MSAModel=Inception v3, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 2.6 | |
| MSAModel=Inception v3, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.6 | 1.3 | |
| SAModel=ResNet-50, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 8.8 | |
| SAModel=ResNet-50, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 5.1 | |
| SAModel=ResNet-50, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 0.2 | |
| SAModel=ResNet-50, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 0 | |
| MSAModel=ResNet-50, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 2.9 | |
| MSAModel=ResNet-50, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 0.8 | |
| MSAModel=ResNet-50, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 0 | |
| MSAModel=ResNet-50, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 77.3 | 0 | |
| SAModel=VGG-16-BN, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 2.8 | |
| SAModel=VGG-16-BN, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0.9 | |
| SAModel=VGG-16-BN, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0 | |
| SAModel=VGG-16-BN, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0 | |
| MSAModel=VGG-16-BN, Query budget=500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 1.8 | |
| MSAModel=VGG-16-BN, Query budget=1000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0.2 | |
| MSAModel=VGG-16-BN, Query budget=2500, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0 | |
| MSAModel=VGG-16-BN, Query budget=5000, Threat model=l_inf, epsilon=0.05, p0=0.052021.11 | 75 | 0 |