Untargeted Adversarial Attack on Stanford Cars
1.79Median L2 DistortionRamBoAttack (GradCAM)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| RamBoAttack (GradCAM)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-34, Explanation Method=GradCAM2026.04 | 1.79 | 42 | |
| RamBoAttack (LIME)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-34, Explanation Method=LIME2026.04 | 1.79 | 42 | |
| RamBoAttack (SHAP)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-34, Explanation Method=SHAP2026.04 | 1.79 | 43 | |
| RamBoAttack (InvGrad)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-34, Explanation Method=InvGrad2026.04 | 1.81 | 43 | |
| Sign-Opt (GradCAM)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-34, Explanation Method=GradCAM2026.04 | 2.23 | 60 | |
| Sign-Opt (InvGrad)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-34, Explanation Method=InvGrad2026.04 | 2.27 | 60 | |
| Sign-Opt (LIME)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-34, Explanation Method=LIME2026.04 | 2.27 | 61 | |
| Sign-Opt (SHAP)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-34, Explanation Method=SHAP2026.04 | 2.27 | 61 | |
| HSJA (SHAP)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=SHAP2026.04 | 2.4 | 59 | |
| HSJA (InvGrad)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=InvGrad2026.04 | 2.42 | 58 | |
| HSJA (LIME)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=LIME2026.04 | 2.48 | 59 | |
| HSJA (GradCAM)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=GradCAM2026.04 | 2.51 | 59 | |
| RamBoAttack (Naive)Attack Setting=Pre-trained, Attack Method=RamBoAttack, Victim Model=ResNet-34, Explanation Method=Naive2026.04 | 2.73 | 66 | |
| HSJA (Naive)Attack Setting=Pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=Naive2026.04 | 2.94 | 73 | |
| Sign-Opt (Naive)Attack Setting=Pre-trained, Attack Method=Sign-Opt, Victim Model=ResNet-34, Explanation Method=Naive2026.04 | 3.09 | 67 | |
| HSJA (LIME)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=LIME2026.04 | 3.3 | 76 | |
| HSJA (InvGrad)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=InvGrad2026.04 | 3.34 | 77 | |
| HSJA (GradCAM)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=GradCAM2026.04 | 3.4 | 76 | |
| HSJA (SHAP)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=SHAP2026.04 | 3.46 | 75 | |
| HSJA (Naive)Attack Setting=Non-pre-trained, Attack Method=HSJA, Victim Model=ResNet-34, Explanation Method=Naive2026.04 | 3.84 | 84 |