Untargeted white-box adversarial attack on FMNIST original (test)
0.1Original Error RateOriginal network
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.042022.04 | 0.1 | 0.197 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.082022.04 | 0.1 | 0.413 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.062022.04 | 0.103 | 0.283 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.12022.04 | 0.103 | 0.523 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.12022.04 | 0.117 | 0.413 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.042022.04 | 0.13 | 0.207 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.072022.04 | 0.13 | 0.297 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.07, Robust training epsilon (ε)=0.012022.04 | 0.133 | 0.24 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.1142022.04 | 0.133 | 0.497 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.04, Robust training epsilon (ε)=0.012022.04 | 0.136 | 0.2 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.114, Robust training epsilon (ε)=0.012022.04 | 0.136 | 0.387 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.04, Robust training epsilon (ε)=0.0052022.04 | 0.137 | 0.22 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.1, Robust training epsilon (ε)=0.012022.04 | 0.14 | 0.32 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.1, Robust training epsilon (ε)=0.0052022.04 | 0.167 | 0.343 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.08, Robust training epsilon (ε)=0.0052022.04 | 0.17 | 0.257 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.06, Robust training epsilon (ε)=0.0052022.04 | 0.173 | 0.23 |