Table 9 TThe attack success rate (ASR(%)) and average query number (Avg.Q) under different K’s, here we fix the flow block L as \(L=3\)
From: DTA: distribution transform-based attack for query-limited scenario
Metric | K=2 | K=4 | K=6 | K=8 |
|---|---|---|---|---|
ASR(%) | 81.81 | 81.44 | 81.87 | 81.65 |
Avg. Q | 13.64 | 14.97 | 14.71 | 14.46 |