| Dataset Name | SOTA Method | Metric | Trend | ||
|---|---|---|---|---|---|
| ImageNet | DRAP | Attack Success Rate (ASR)87.2 | 186 | 2mo ago | |
| CIFAR-10 (test) | BIM | ASR100 | 95 | 2mo ago | |
| ImageNet-1K (val) | ASR100 | 57 | 3mo ago | ||
| AISEC (test) | CAAPc | ASR99.79 | 56 | 1mo ago | |
| ImageNet | RamBoAttack (LIME) | Median L2 Distortion1.06 | 40 | 1mo ago | |
| ImageNet | MPCAttack | ASR (Average)99.3 | 36 | 2mo ago | |
| Flickr30K 1,000 images (test) | MPCAttack | ASR65.22 | 30 | 2mo ago | |
| Flickr30K | MPCAttack | ASR92.52 | 30 | 2mo ago | |
| ImageNet (test) | TGR | ASR (Inc-v3)72.1 | 26 | 2mo ago | |
| ImageNet-compatible | MI-FGSM | Inc-v3 Performance100 | 24 | 3mo ago | |
| ImageNet 1000 images (val) | SA | Clean Accuracy77.6 | 24 | 3mo ago | |
| Stanford Cars | RamBoAttack (GradCAM) | Median L2 Distortion1.79 | 20 | 1mo ago | |
| CUB 200 | Sign-Opt (GradCAM) | Median L2 Distortion0.55 | 20 | 1mo ago | |
| CIFAR-100 (test) | AA linf | ASR100 | 9 | 3mo ago | |
| NTU | BASAR | Attack Success Rate100 | 9 | 3mo ago | |
| HDM05 | BASAR | Attack Success Rate10,000 | 9 | 3mo ago | |
| ImageNet-compatible (test) | NI | Acc (Inc-v3)100 | 6 | 3mo ago | |
| ImageNet | PGN | ComDefend Robustness93.7 | 6 | 3mo ago | |
| ImageNet | MI-DI+RAP | Attack Success Rate (Dense-121)99.9 | 6 | 3mo ago | |
| ImageNet | MTDAI+RAP-LS | AT Accuracy (L2)73.7 | 6 | 3mo ago | |
| ImageNet-1K (test) | MTDI+RAP-LS | ASR (IncRes-v2)100 | 6 | 3mo ago | |
| Chinese Traffic Sign Recognition Database (CTSRD) (test) | I-FGSM | ASR (ResNet34)100 | 5 | 3mo ago | |
| LVLM Adversarial Evaluation Set | SGMA | LLaVA55.4 | 5 | 3mo ago | |
| ResNext-50 | Ours | Fooling Rate100 | 5 | 3mo ago | |
| DenseNet-121 | GFCS | Fooling Rate99.9 | 5 | 3mo ago |
