List your company
ResearchFormerly WizWand

Untargeted Adversarial Attack on ImageNet (L2 Distortion & Accuracy)

1.06Median L2 DistortionRamBoAttack (LIME)
0.87962.09733.3154.5327Apr 30, 2026
Updated 6mo ago

Evaluation results

MethodLinks
RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=LIME2026.041.0619
HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=GradCAM2026.041.0720
HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=LIME2026.041.0720
HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=SHAP2026.041.0720
RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=InvGrad2026.041.0719
RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=SHAP2026.041.0720
RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=GradCAM2026.041.119
HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=InvGrad2026.041.1221
HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=InvGrad2026.041.326
HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=InvGrad2026.041.3129
RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=GradCAM2026.041.3226
RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=SHAP2026.041.3227
HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=LIME2026.041.3228
RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=InvGrad2026.041.3427
RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=LIME2026.041.3427
HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=GradCAM2026.041.3530
HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=SHAP2026.041.3530
HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=SHAP2026.041.3524
HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=GradCAM2026.041.3625
HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=InvGrad2026.041.3628
HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=SHAP2026.041.3932
HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=GradCAM2026.041.431
HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=LIME2026.041.4530
HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=LIME2026.041.4927
HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=Naive2026.041.6339
HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=Naive2026.041.6339
Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=InvGrad2026.041.6546
Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=LIME2026.041.6546
Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=GradCAM2026.041.7146
Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=SHAP2026.041.7447
RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=Naive2026.041.8846
HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=Naive2026.042.0551
RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=Naive2026.042.0554
HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=Naive2026.042.0551
Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=GradCAM2026.042.4657
Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=LIME2026.042.5659
Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=InvGrad2026.042.5760
Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=SHAP2026.042.5759
Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=Naive2026.045.3286
Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=Naive2026.045.5775