Table 2 The proportion (%) of the perturbation parameters whose values are within the range of the original time series data values in the perturbation parameters obtained using the global search algorithm \((exp=1.5)\)
From: Attack based on data: a novel perspective to attack sensitive points directly
Architecture | Adiac | Car | ECG200 | ECGFivedays | Meat | FaceAll |
|---|---|---|---|---|---|---|
CNN | 0.21 | 0.17 | 0.33 | 0.46 | 0.45 | 0.34 |
Encoder | 0.15 | 0.06 | 0.15 | 0.12 | 0.41 | 0.06 |
FCN | 0.08 | 0.24 | 0.31 | 0.23 | 0.27 | 0.02 |
Inception | 0.11 | 0.17 | 0.20 | 0.10 | 0.38 | 0.02 |
MLP | 0.23 | 0.48 | 0.44 | 0.36 | 0.53 | 0.11 |
ResNet | 0.05 | 0.00 | 0.32 | 0.13 | 0.66 | 0.00 |