基于双重引导的目标对抗攻击方法

孙月,张兴兰

Targeted adversarial attack method based on dual guidance

Yue SUN,Xinglan ZHANG

表 1 不同分类模型在原始数据集上的分类准确率

Tab.1 Classification accuracy of different classification models on original datasets

分类模型 ACC/% MNIST CIFAR10 CIFAR10+AT SVHN ResNet18 99.57 86.67 84.11 94.22 VGG16 — 87.87 79.51 93.71 DenseNet — 90.09 83.94 94.93 WideResNet — 91.89 88.25 95.23 Inv3 — 90.30 84.50 94.43 LeNet 99.20 — — — AlexNet 99.28 — — —