Untargeted Score-based Black-box Attack on ImageNet
100ASRDifAttack
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| DifAttackVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 100 | 409 | 171 | |
| Dif++openVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 100 | 170 | 57 | |
| MCGSquareVictim Model=Swin-V2-T, Scenario=Query w/ surrogate2024.06 | 100 | 251 | 72 | |
| Dif++closeVictim Model=Swin-V2-T, Scenario=Query w/ surrogate2024.06 | 100 | 60 | 1 | |
| DifAttackVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 100 | 400 | 151 | |
| Dif++openVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 100 | 302 | 129 | |
| Dif++closeVictim Model=EfficientNet-B3, Scenario=Query w/ surrogate2024.06 | 100 | 138 | 1 | |
| N AttackVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 100 | 2,012 | 1,465 | |
| DifAttackVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 100 | 435 | 231 | |
| Dif++openVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 100 | 149 | 1 | |
| MCGSquareVictim Model=ConvNeXtBase, Scenario=Query w/ surrogate2024.06 | 100 | 226 | 53 | |
| Dif++closeVictim Model=ConvNeXtBase, Scenario=Query w/ surrogate2024.06 | 100 | 83 | 1 | |
| NESVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 1,234 | 682 | |
| N-AttackVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 878 | 606 | |
| SimBAVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 865 | 419 | |
| CGAVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 139 | — | |
| DifAttackVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 165 | 40 | |
| Dif++openVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 100 | 111 | 21 | |
| MCGSquareVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 100 | 174 | 14 | |
| Dif++closeVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 100 | 19 | 1 | |
| SignHVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 100 | 702 | 194 | |
| N-AttackVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 100 | 752 | 505 | |
| DifAttackVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 100 | 123 | 54 | |
| Dif++openVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 100 | 44 | 1 | |
| GFCSVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 100 | 515 | 107 | |
| MCGSquareVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 100 | 49 | 1 | |
| Dif++closeVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 100 | 11 | 1 | |
| N-AttackVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 100 | 780 | 606 | |
| DifAttackVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 100 | 156 | 64 | |
| Dif++openVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 100 | 81 | 6 | |
| GFCSVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 100 | 739 | 229 | |
| MCGSquareVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 100 | 61 | 1 | |
| Dif++closeVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 100 | 20 | 1 | |
| SignHVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 100 | 363 | 11 | |
| N-AttackVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 100 | 563 | 404 | |
| DifAttackVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 100 | 91 | 8 | |
| Dif++openVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 100 | 40 | 1 | |
| MCGSquareVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 100 | 37 | 1 | |
| Dif++closeVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 100 | 27 | 1 | |
| MCGSquareVictim Model=EfficientNet-B3, Scenario=Query w/ surrogate2024.06 | 99.5 | 463 | 64 | |
| MCGSquareVictim Model=ResNet101, Scenario=Query w/ surrogate2024.06 | 99.5 | 400 | 15 | |
| Dif++closeVictim Model=ResNet101, Scenario=Query w/ surrogate2024.06 | 99.5 | 172 | 1 | |
| SignHVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 99.5 | 931 | 212 | |
| SimBAVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 99.5 | 614 | 361 | |
| SimBAVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 99.5 | 428 | 252 | |
| CGAVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 99.4 | 137 | — | |
| CGAVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 99.3 | 202 | — | |
| N AttackVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 99 | 1,298 | 808 | |
| SubspaceVictim Model=Swin-V2-T, Scenario=Query w/ surrogate2024.06 | 99 | 882 | 138 | |
| N AttackVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 99 | 1,390 | 808 | |
| DifAttackVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 99 | 523 | 149 | |
| Dif++openVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 99 | 447 | 103 | |
| SubspaceVictim Model=ConvNeXtBase, Scenario=Query w/ surrogate2024.06 | 99 | 569 | 135 | |
| SimBAVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 99 | 533 | 269 | |
| SimBAVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 98.5 | 2,185 | 990 | |
| SimBAVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 98.5 | 1,065 | 406 | |
| GFCSVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 98.5 | 658 | 128 | |
| SimBAVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 98 | 1,419 | 584 | |
| NESVictim Model=VGG16, Scenario=Query w/o surrogate2024.06 | 98 | 1,068 | 605 | |
| P-RGFVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 98 | 529 | 85 | |
| NESVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 97.5 | 1,264 | 682 | |
| CGAVictim Model=ResNet18, Scenario=Query w/o surrogate2024.06 | 97.3 | 475 | — | |
| SubspaceVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 97 | 566 | 25 | |
| P-RGFVictim Model=Swin-V2-T, Scenario=Query w/ surrogate2024.06 | 96.5 | 755 | 66 | |
| N AttackVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 96.5 | 1,888 | 1,263 | |
| GFCSVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 96.5 | 1,348 | 463 | |
| P-RGFVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 96 | 711 | 70 | |
| NESVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 95.5 | 2,185 | 1,199 | |
| SubspaceVictim Model=EfficientNet-B3, Scenario=Query w/ surrogate2024.06 | 95.5 | 993 | 121 | |
| SubspaceVictim Model=ResNet101, Scenario=Query w/ surrogate2024.06 | 95.5 | 1,198 | 136 | |
| SignHVictim Model=GoogleNet, Scenario=Query w/o surrogate2024.06 | 95.5 | 1,504 | 452 | |
| SubspaceVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 95.5 | 994 | 40 | |
| BASESVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 95.5 | 564 | 69 | |
| SubspaceVictim Model=VGG16, Scenario=Query w/ surrogate2024.06 | 95.5 | 867 | 31 | |
| NESVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 95 | 2,093 | 1,122 | |
| P-RGFVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 95 | 796 | 119 | |
| SubspaceVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 94.5 | 917 | 28 | |
| P-RGFVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 93 | 1,162 | 157 | |
| GFCSVictim Model=ConvNeXtBase, Scenario=Query w/ surrogate2024.06 | 91.5 | 1,621 | 44 | |
| NESVictim Model=SqueezeNet, Scenario=Query w/o surrogate2024.06 | 91 | 1,711 | 589 | |
| P-RGFVictim Model=EfficientNet-B3, Scenario=Query w/ surrogate2024.06 | 90 | 1,345 | 66 | |
| NESVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 90 | 3,013 | 1,913 | |
| P-RGFVictim Model=ResNet101, Scenario=Query w/ surrogate2024.06 | 89.5 | 1,301 | 82 | |
| GFCSVictim Model=EfficientNet-B3, Scenario=Query w/ surrogate2024.06 | 89 | 1,692 | 345 | |
| P-RGFVictim Model=ConvNeXtBase, Scenario=Query w/ surrogate2024.06 | 88.9 | 1,381 | 66 | |
| SignHVictim Model=EfficientNet-B3, Scenario=Query w/o surrogate2024.06 | 87.4 | 2,611 | 677 | |
| GFCSVictim Model=ResNet101, Scenario=Query w/ surrogate2024.06 | 87 | 1,521 | 14 | |
| GFCSVictim Model=Swin-V2-T, Scenario=Query w/ surrogate2024.06 | 86.5 | 1,794 | 12 | |
| NESVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 86.4 | 3,561 | 2,499 | |
| BASESVictim Model=SqueezeNet, Scenario=Query w/ surrogate2024.06 | 86.4 | 1,549 | 1 | |
| BASESVictim Model=ResNet18, Scenario=Query w/ surrogate2024.06 | 85.1 | 1,717 | 1 | |
| SignHVictim Model=Swin-V2-T, Scenario=Query w/o surrogate2024.06 | 82.9 | 3,049 | 968 | |
| SignHVictim Model=ConvNeXtBase, Scenario=Query w/o surrogate2024.06 | 81.9 | 3,979 | 2,950 | |
| BASESVictim Model=GoogleNet, Scenario=Query w/ surrogate2024.06 | 81.7 | 2,080 | 1 | |
| SimBAVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 73 | 3,581 | 739 | |
| SignHVictim Model=ResNet101, Scenario=Query w/o surrogate2024.06 | 66.3 | 4,670 | 3,544 |