From: DTA: distribution transform-based attack for query-limited scenario
Metric
VOC-07
VOC-12
Pla-365
Cal-101
VGG-19
91.7
93
90.9
93.5
InceptionV3
87.5
90.8
91.1
93.6
ResNet-152
85.1
89.2
87.3
94.4
WideResNet-50
86.1
89.7
84.1
93.4