Skip to main content

Table 6 The attack success rates on other datasets that are not involved in the DTA training progress

From: DTA: distribution transform-based attack for query-limited scenario

Metric

VOC-07

VOC-12

Pla-365

Cal-101

VGG-19

91.7

93

90.9

93.5

InceptionV3

87.5

90.8

91.1

93.6

ResNet-152

85.1

89.2

87.3

94.4

WideResNet-50

86.1

89.7

84.1

93.4

  1. Here we report the Evasion Rate Matachana et al. (2020) of each dataset on the victim models, which are pre-trained on ImageNet