Untargeted White-box Adversarial Attack on MNIST (test)
30Baseline Error RateOriginal network
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.1042022.04 | 30 | 19.3 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.1242022.04 | 30 | 29.7 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.142022.04 | 30 | 39 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.1542022.04 | 30 | 50 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.122022.04 | 30 | 18.7 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.142022.04 | 30 | 29 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.172022.04 | 30 | 40.7 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.192022.04 | 30 | 50.7 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.17, Robust training epsilon (ε)=0.122022.04 | 330 | 10.7 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.12, Robust training epsilon (ε)=0.122022.04 | 370 | 8.3 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.14, Robust training epsilon (ε)=0.122022.04 | 400 | 9 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.19, Robust training epsilon (ε)=0.122022.04 | 400 | 13 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.104, Robust training epsilon (ε)=0.122022.04 | 470 | 16.6 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.124, Robust training epsilon (ε)=0.122022.04 | 470 | 20.3 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.14, Robust training epsilon (ε)=0.122022.04 | 470 | 23.3 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.154, Robust training epsilon (ε)=0.122022.04 | 500 | 24.3 |