Untargeted Adversarial Attack on ImageNet (L2 Distortion & Accuracy)
1.06Median L2 DistortionRamBoAttack (LIME)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=LIME2026.04 | 1.06 | 19 | |
| HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=GradCAM2026.04 | 1.07 | 20 | |
| HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=LIME2026.04 | 1.07 | 20 | |
| HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=SHAP2026.04 | 1.07 | 20 | |
| RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=InvGrad2026.04 | 1.07 | 19 | |
| RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=SHAP2026.04 | 1.07 | 20 | |
| RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=GradCAM2026.04 | 1.1 | 19 | |
| HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=InvGrad2026.04 | 1.12 | 21 | |
| HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=InvGrad2026.04 | 1.3 | 26 | |
| HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=InvGrad2026.04 | 1.31 | 29 | |
| RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=GradCAM2026.04 | 1.32 | 26 | |
| RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=SHAP2026.04 | 1.32 | 27 | |
| HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=LIME2026.04 | 1.32 | 28 | |
| RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=InvGrad2026.04 | 1.34 | 27 | |
| RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=LIME2026.04 | 1.34 | 27 | |
| HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=GradCAM2026.04 | 1.35 | 30 | |
| HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=SHAP2026.04 | 1.35 | 30 | |
| HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=SHAP2026.04 | 1.35 | 24 | |
| HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=GradCAM2026.04 | 1.36 | 25 | |
| HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=InvGrad2026.04 | 1.36 | 28 | |
| HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=SHAP2026.04 | 1.39 | 32 | |
| HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=GradCAM2026.04 | 1.4 | 31 | |
| HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=LIME2026.04 | 1.45 | 30 | |
| HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=LIME2026.04 | 1.49 | 27 | |
| HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=Naive2026.04 | 1.63 | 39 | |
| HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ViT, Explanation Method=Naive2026.04 | 1.63 | 39 | |
| Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=InvGrad2026.04 | 1.65 | 46 | |
| Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=LIME2026.04 | 1.65 | 46 | |
| Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=GradCAM2026.04 | 1.71 | 46 | |
| Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=SHAP2026.04 | 1.74 | 47 | |
| RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ViT, Explanation Method=Naive2026.04 | 1.88 | 46 | |
| HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=Naive2026.04 | 2.05 | 51 | |
| RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=EffNet, Explanation Method=Naive2026.04 | 2.05 | 54 | |
| HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=EffNet, Explanation Method=Naive2026.04 | 2.05 | 51 | |
| Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=GradCAM2026.04 | 2.46 | 57 | |
| Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=LIME2026.04 | 2.56 | 59 | |
| Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=InvGrad2026.04 | 2.57 | 60 | |
| Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=SHAP2026.04 | 2.57 | 59 | |
| Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=EffNet, Explanation Method=Naive2026.04 | 5.32 | 86 | |
| Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ViT, Explanation Method=Naive2026.04 | 5.57 | 75 |