Untargeted Attack on ImageNet (test)
9.91Mean L2 Distortion (2K Budget)PARS-OPT
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| PARS-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 9.91 | 4.41 | 3.62 | 3.28 | 3.05 | |
| PARS-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 12.73 | 6.11 | 4.56 | 3.73 | 3.23 | |
| Prior-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 13.42 | 4.49 | 3.64 | 3.32 | 3.12 | |
| PARS-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 14.02 | 6.31 | 4.93 | 4.24 | 3.82 | |
| CGBA-HTarget Model=Inception-v4, D.R.=true2025.12 | 15.12 | 7.83 | 5.86 | 4.61 | 4.1 | |
| QEBATarget Model=Inception-v4, D.R.=true2025.12 | 16.54 | 8.08 | 5.82 | 4.26 | 3.66 | |
| Prior-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 17.98 | 8.66 | 6.45 | 5.45 | 4.9 | |
| Prior-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 18.13 | 6.8 | 5.15 | 4.45 | 4.03 | |
| SQBATarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 19.03 | 12.8 | 10.01 | 8.43 | 7.42 | |
| PARS-OPT-STarget Model=Inception-v4, D.R.=true, Prior Model=IncResV22025.12 | 19.55 | 7.82 | 5.36 | 4.23 | 3.54 | |
| PARS-OPT-STarget Model=Swin Transformer, D.R.=true, Prior Model=ResNet50 & ConViT2025.12 | 19.84 | 8.74 | 6.09 | 4.68 | 3.85 | |
| GeoDATarget Model=Inception-v4, D.R.=false2025.12 | 20.12 | 14.33 | 12.49 | 11.01 | 9.69 | |
| SQBATarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 20.4 | 13.4 | 10.33 | 8.62 | 7.56 | |
| PARS-OPT-STarget Model=Inception-v4, D.R.=true, Prior Model=IncResV2 & Xception2025.12 | 20.52 | 7.25 | 5.02 | 4.05 | 3.45 | |
| ARS-OPT-STarget Model=Swin Transformer, D.R.=true2025.12 | 23.04 | 10.61 | 6.88 | 5.06 | 3.99 | |
| PARS-OPT-STarget Model=Swin Transformer, D.R.=true, Prior Model=ResNet502025.12 | 23.91 | 10.96 | 7.23 | 5.4 | 4.31 | |
| ARS-OPT-STarget Model=Inception-v4, D.R.=true2025.12 | 25.02 | 10.38 | 6.46 | 4.85 | 3.92 | |
| BBATarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 28.44 | 20.74 | 17.37 | 15.47 | 14.19 | |
| CGBA-HTarget Model=Swin Transformer, D.R.=true2025.12 | 29.24 | 17.01 | 12.6 | 9.26 | 7.81 | |
| PARS-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 29.26 | 12.77 | 8.41 | 6.22 | 5.01 | |
| BBATarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 29.37 | 20.94 | 17.59 | 15.47 | 14.08 | |
| QEBATarget Model=Swin Transformer, D.R.=true2025.12 | 31.11 | 16.99 | 12.07 | 8.46 | 7.02 | |
| SurFreeTarget Model=Swin Transformer, D.R.=false2025.12 | 34.28 | 23.58 | 18.37 | 15.18 | 13.06 | |
| GeoDATarget Model=Swin Transformer, D.R.=false2025.12 | 36.92 | 28.03 | 24.54 | 21.59 | 19.12 | |
| Prior-Sign-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV2 & Xception2025.12 | 37.1 | 12.57 | 7.1 | 5.19 | 4.2 | |
| SurFreeTarget Model=Inception-v4, D.R.=false2025.12 | 38.48 | 26.35 | 20.17 | 16.37 | 13.82 | |
| Prior-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 39.45 | 20.26 | 14.13 | 11.24 | 9.62 | |
| ARS-OPTTarget Model=Swin Transformer, D.R.=false2025.12 | 41.91 | 20.04 | 12.76 | 9.26 | 7.21 | |
| AHATarget Model=Inception-v4, D.R.=true2025.12 | 42.06 | 23.52 | 15.41 | 11.1 | 8.52 | |
| TATarget Model=Inception-v4, D.R.=false2025.12 | 42.23 | 25.86 | 17.8 | 14.17 | 11.69 | |
| Prior-Sign-OPTTarget Model=Inception-v4, D.R.=false, Prior Model=IncResV22025.12 | 42.4 | 17.16 | 10.19 | 7.36 | 5.84 | |
| EvolutionaryTarget Model=Inception-v4, D.R.=false2025.12 | 42.66 | 25.32 | 17.6 | 13.38 | 10.84 | |
| Prior-Sign-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet50 & ConViT2025.12 | 43.06 | 17.96 | 10.91 | 7.9 | 6.33 | |
| HSJATarget Model=Inception-v4, D.R.=false2025.12 | 44.53 | 26.31 | 17.92 | 14.19 | 11.65 | |
| HSJATarget Model=Swin Transformer, D.R.=false2025.12 | 45.86 | 27.32 | 17.92 | 13.5 | 10.64 | |
| ARS-OPTTarget Model=Inception-v4, D.R.=false2025.12 | 46.6 | 24.24 | 15.74 | 11.68 | 9.3 | |
| TATarget Model=Swin Transformer, D.R.=false2025.12 | 46.73 | 27.85 | 18.02 | 13.38 | 10.51 | |
| AHATarget Model=Swin Transformer, D.R.=true2025.12 | 46.76 | 30.37 | 23.35 | 19.39 | 17.02 | |
| Sign-OPTTarget Model=Inception-v4, D.R.=false2025.12 | 48.23 | 23.27 | 14.97 | 11.07 | 8.79 | |
| EvolutionaryTarget Model=Swin Transformer, D.R.=false2025.12 | 49.24 | 31.19 | 23.04 | 18.6 | 15.74 | |
| Prior-Sign-OPTTarget Model=Swin Transformer, D.R.=false, Prior Model=ResNet502025.12 | 52.88 | 26.19 | 16.45 | 11.88 | 9.25 | |
| Sign-OPTTarget Model=Swin Transformer, D.R.=false2025.12 | 53.4 | 26.41 | 16.93 | 12.41 | 9.9 |