Untargeted White-Box Adversarial Attack on ImageNet
100ASRAdvAD-X
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| AdvAD-XModel=ResNet-50, Time (s)=806, Data Type=Floating-point2025.03 | 100 | 0.002 | 0.34 | 63.62 | 0.9997 | 0.23 | 0.0001 | 56.59 | |
| AdvADModel=ConvNeXt-Base, Time (s)=152402025.03 | 100 | 0.016 | 1.49 | 48.61 | 0.9964 | 5.07 | 0.0009 | 55.97 | |
| AdvADModel=Swin Trans.-Base, Time (s)=97292025.03 | 100 | 0.013 | 1.19 | 50.57 | 0.9978 | 1.7 | 0.0004 | 56.17 | |
| PGDModel=ConvNeXt-Base, Time (s)=1272025.03 | 99.9 | 0.031 | 7.98 | 33.74 | 0.8845 | 32.03 | 0.0386 | 51.85 | |
| AdvAD-XModel=ConvNeXt-Base, Time (s)=5245, Data Type=Floating-point2025.03 | 99.8 | 0.004 | 0.64 | 58.01 | 0.9993 | 0.62 | 0.0001 | 56.43 | |
| SSAHModel=ResNet-50, Time (s)=4282025.03 | 99.7 | 0.033 | 2.65 | 43.73 | 0.9911 | 4.48 | 0.0021 | 55.49 | |
| AdvADModel=ResNet-50, Time (s)=22012025.03 | 99.7 | 0.01 | 1.06 | 51.84 | 0.998 | 2.42 | 0.0005 | 56.35 | |
| AdvAD-XModel=Swin Trans.-Base, Time (s)=5243, Data Type=Floating-point2025.03 | 99.7 | 0.005 | 0.52 | 60.29 | 0.9995 | 0.25 | 0.0001 | 56.47 | |
| AdvADModel=VisionMamba-Small, Time (s)=61542025.03 | 99.7 | 0.016 | 1.62 | 47.94 | 0.996 | 3.67 | 0.0017 | 56.17 | |
| AdvAD-XModel=VisionMamba-Small, Time (s)=4021, Data Type=Floating-point2025.03 | 99.4 | 0.005 | 0.69 | 58.9 | 0.9989 | 0.51 | 0.0004 | 56.5 | |
| PerC-ALModel=ResNet-50, Time (s)=40852025.03 | 98.8 | 0.131 | 2.05 | 46.35 | 0.9894 | 8.62 | 0.0029 | 55.84 | |
| PGDModel=ResNet-50, Time (s)=252025.03 | 98.6 | 0.031 | 8.17 | 33.53 | 0.883 | 35.25 | 0.0517 | 52.24 | |
| PGDModel=Swin Trans.-Base, Time (s)=932025.03 | 98.5 | 0.031 | 7.85 | 33.88 | 0.8861 | 21.34 | 0.0378 | 51.91 | |
| DiffAttackModel=ConvNeXt-Base, Time (s)=354172025.03 | 97.8 | 0.754 | 31.7 | 22.28 | 0.661 | 72.22 | 0.1277 | 54.8 | |
| AdvDropModel=Swin Trans.-Base, Time (s)=6732025.03 | 97.2 | 0.063 | 3.37 | 41.43 | 0.9853 | 5.22 | 0.0065 | 54.73 | |
| AdvDropModel=VisionMamba-Small, Time (s)=13112025.03 | 97 | 0.076 | 4.42 | 39.3 | 0.9761 | 8.02 | 0.0086 | 54.34 | |
| AdvDropModel=ConvNeXt-Base, Time (s)=8382025.03 | 96.9 | 0.057 | 3.26 | 41.69 | 0.9864 | 6.42 | 0.0055 | 54.8 | |
| AdvDropModel=ResNet-50, Time (s)=1932025.03 | 96.8 | 0.062 | 3.17 | 41.91 | 0.9872 | 5.57 | 0.0061 | 54.96 | |
| DiffAttackModel=ResNet-50, Time (s)=349542025.03 | 96.6 | 0.743 | 30.51 | 22.63 | 0.675 | 55.29 | 0.113 | 55.67 | |
| SSAHModel=Swin Trans.-Base, Time (s)=17372025.03 | 96.3 | 0.035 | 2.41 | 44.6 | 0.9927 | 2.57 | 0.001 | 55.53 | |
| PGDModel=VisionMamba-Small, Time (s)=632025.03 | 95.7 | 0.031 | 7.99 | 33.73 | 0.8884 | 26.09 | 0.0503 | 52.37 | |
| PerC-ALModel=Swin Trans.-Base, Time (s)=152582025.03 | 95.6 | 0.144 | 2.15 | 45.93 | 0.9882 | 3.53 | 0.0015 | 55.66 | |
| DiffPGDModel=ResNet-50, Time (s)=60572025.03 | 92.1 | 0.246 | 11.43 | 30.95 | 0.8902 | 22.18 | 0.0315 | 55.05 | |
| DiffAttackModel=VisionMamba-Small, Time (s)=430432025.03 | 90.9 | 0.749 | 30.94 | 22.52 | 0.6693 | 52.16 | 0.1179 | 55.66 | |
| NCFModel=ResNet-50, Time (s)=27392025.03 | 89.9 | 0.783 | 75.16 | 14.79 | 0.6374 | 58.99 | 0.3052 | 49.12 | |
| ACAModel=ResNet-50, Time (s)=822392025.03 | 89.8 | 0.839 | 52.42 | 18 | 0.5659 | 69.57 | 0.3381 | 55.47 | |
| DiffAttackModel=Swin Trans.-Base, Time (s)=367362025.03 | 89.7 | 0.741 | 30.45 | 22.67 | 0.6727 | 53.32 | 0.1143 | 55.72 | |
| SSAHModel=ConvNeXt-Base, Time (s)=34232025.03 | 84.6 | 0.026 | 2.24 | 45.19 | 0.9928 | 3.04 | 0.0011 | 55.78 | |
| ACAModel=VisionMamba-Small, Time (s)=968512025.03 | 84.2 | 0.831 | 50.88 | 18.28 | 0.5753 | 65.77 | 0.3329 | 55.28 | |
| DiffPGDModel=VisionMamba-Small, Time (s)=76382025.03 | 83.4 | 0.248 | 11.75 | 30.68 | 0.8845 | 21.02 | 0.0378 | 54.19 | |
| ACAModel=ConvNeXt-Base, Time (s)=831492025.03 | 82.2 | 0.835 | 52.16 | 18.05 | 0.5676 | 68.45 | 0.3421 | 55.11 | |
| ACAModel=Swin Trans.-Base, Time (s)=837062025.03 | 79.6 | 0.831 | 50.7 | 18.31 | 0.5757 | 64.83 | 0.3341 | 55.65 | |
| DiffPGDModel=ConvNeXt-Base, Time (s)=63252025.03 | 76.9 | 0.245 | 11.45 | 30.94 | 0.8908 | 21.05 | 0.0306 | 54.75 | |
| NCFModel=VisionMamba-Small, Time (s)=39192025.03 | 71.7 | 0.738 | 68.71 | 15.68 | 0.6876 | 46.07 | 0.2629 | 50.05 | |
| DiffPGDModel=Swin Trans.-Base, Time (s)=64992025.03 | 69.1 | 0.244 | 11.26 | 31.1 | 0.8945 | 16.19 | 0.0276 | 55.25 | |
| NCFModel=Swin Trans.-Base, Time (s)=46902025.03 | 63.7 | 0.733 | 69.92 | 15.48 | 0.6822 | 47.17 | 0.2709 | 49.77 | |
| NCFModel=ConvNeXt-Base, Time (s)=52222025.03 | 59.4 | 0.75 | 72.89 | 15.1 | 0.6616 | 50.52 | 0.2846 | 49.7 | |
| SSAHModel=VisionMamba-Small, Time (s)=12042025.03 | 49.8 | 0.028 | 1.95 | 46.41 | 0.9946 | 2.08 | 0.0018 | 55.96 | |
| PerC-ALModel=ConvNeXt-Base, Time (s)=182712025.03 | 10.3 | — | — | — | — | — | — | — | |
| PerC-ALModel=VisionMamba-Small, Time (s)=104002025.03 | 6.5 | — | — | — | — | — | — | — |