Untargeted Adversarial Attack on ImageNet (Targeting Dense-121, VGG-16, Inc-v3)
99.9Attack Success Rate (Dense-121)MI-DI+RAP
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| MI-DI+RAPSurrogate Model (MS)=ResNet-502022.10 | 99.9 | 100 | 93.7 | |
| LinBP-MI-DI-SGMSurrogate Model (MS)=ResNet-502022.10 | 99.8 | 99.3 | 90.2 | |
| LinBP-ILA-SGMSurrogate Model (MS)=ResNet-502022.10 | 99.7 | 99.3 | 91.1 | |
| LinBP-ILASurrogate Model (MS)=ResNet-502022.10 | 99.5 | 99.2 | 89.8 | |
| LinBP-MI-DISurrogate Model (MS)=ResNet-502022.10 | 99.5 | 99.2 | 89.3 | |
| ILASurrogate Model (MS)=ResNet-502022.10 | 95 | 94.2 | 77.7 |