From: DTA: distribution transform-based attack for query-limited scenario
\(\epsilon\)
CIFAR-10
SVHN
ImageNet
w.o.
w.
8
13.92
73.57
18.64
55.36
17.83
44.21
16
31.33
80.49
48.76
84.11
40.19
71.68