Untargeted white-box adversarial attack on NMNIST original (test)
1.3Baseline Error RateOriginal network
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.00082022.04 | 1.3 | 20 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.0012022.04 | 1.3 | 33.7 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.00122022.04 | 1.3 | 41 | |
| Original networkNetwork structure=CONV, Attack epsilon (ε)=0.00152022.04 | 1.3 | 49 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.00072022.04 | 3.7 | 21 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.0007, Robust training epsilon (ε)=0.0052022.04 | 3.7 | 10 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.00092022.04 | 3.7 | 30.7 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.0009, Robust training epsilon (ε)=0.0052022.04 | 3.7 | 12.3 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.00122022.04 | 3.7 | 41.3 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.0012, Robust training epsilon (ε)=0.0052022.04 | 3.7 | 16.7 | |
| Original networkNetwork structure=FC, Attack epsilon (ε)=0.00142022.04 | 3.7 | 48.7 | |
| Robust networkNetwork structure=FC, Attack epsilon (ε)=0.0014, Robust training epsilon (ε)=0.0052022.04 | 3.7 | 18.3 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.0008, Robust training epsilon (ε)=0.0052022.04 | 4.3 | 7 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.001, Robust training epsilon (ε)=0.0052022.04 | 4.3 | 11 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.0012, Robust training epsilon (ε)=0.0052022.04 | 4.3 | 11 | |
| Robust networkNetwork structure=CONV, Attack epsilon (ε)=0.0015, Robust training epsilon (ε)=0.0052022.04 | 4.3 | 12 |