Gradient-based attacks |
FGSM |
FGSM |
 |
Explaining and Harnessing Adversarial Examples |
PGD |
PGD |
 |
Towards Deep Learning Models Resistant to Adversarial Attacks |
PGD (L2) |
PGDL2 |
 |
Towards Deep Learning Models Resistant to Adversarial Attacks |
MI-FGSM |
MIFGSM |
 |
Boosting Adversarial Attacks with Momentum |
DI-FGSM |
DIFGSM |
 |
Improving Transferability of Adversarial Examples with Input Diversity |
TI-FGSM |
TIFGSM |
 |
Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks |
NI-FGSM |
NIFGSM |
 |
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks |
SI-NI-FGSM |
SINIFGSM |
 |
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks |
DR |
DR |
 |
Enhancing Cross-Task Black-Box Transferability of Adversarial Examples With Dispersion Reduction |
VMI-FGSM |
VMIFGSM |
 |
Enhancing the Transferability of Adversarial Attacks through Variance Tuning |
VNI-FGSM |
VNIFGSM |
 |
Enhancing the Transferability of Adversarial Attacks through Variance Tuning |
Admix |
Admix |
 |
Admix: Enhancing the Transferability of Adversarial Attacks |
FIA |
FIA |
 |
Feature Importance-aware Transferable Adversarial Attacks |
PNA-PatchOut |
PNAPatchOut |
 |
Towards Transferable Adversarial Attacks on Vision Transformers |
NAA |
NAA |
 |
Improving Adversarial Transferability via Neuron Attribution-Based Attacks |
SSA |
SSA |
 |
Frequency Domain Model Augmentation for Adversarial Attack |
TGR |
TGR |
 |
Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization |
ILPD |
ILPD |
 |
Improving Adversarial Transferability via Intermediate-level Perturbation Decay |
MIG |
MIG |
 |
Transferable Adversarial Attack for Both Vision Transformers and Convolutional Networks via Momentum Integrated Gradients |
DeCoWA |
DeCoWA |
 |
Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping |
VDC |
VDC |
 |
Improving the Adversarial Transferability of Vision Transformers with Virtual Dense Connection |
BSR |
BSR |
 |
Boosting Adversarial Transferability by Block Shuffle and Rotation |
L2T |
L2T |
 |
Learning to Transform Dynamically for Better Adversarial Transferability |
ATT |
ATT |
 |
Boosting the Transferability of Adversarial Attack on Vision Transformer with Adaptive Token Tuning |
Generative attacks |
CDA |
CDA |
 |
Cross-Domain Transferability of Adversarial Perturbations |
LTP |
LTP |
 |
Learning Transferable Adversarial Perturbations |
BIA |
BIA |
 |
Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains |
GAMA |
GAMA |
 |
GAMA: Generative Adversarial Multi-Object Scene Attacks |
Others |
DeepFool |
DeepFool |
 |
DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks |
GeoDA |
GeoDA |
 |
GeoDA: A Geometric Framework for Black-box Adversarial Attacks |
SSP |
SSP |
 |
A Self-supervised Approach for Adversarial Robustness |