| Dataset Name | SOTA Method | Metric | Trend | ||
|---|---|---|---|---|---|
| ImageNet | DRAP | Attack Success Rate (ASR)87.2 | 186 | 19d ago | |
| CIFAR-10 (test) | BIM | ASR100 | 95 | 19d ago | |
| ImageNet-1K (val) | ASR100 | 57 | 1mo ago | ||
| AISEC (test) | CAAPc | ASR99.79 | 56 | 9d ago | |
| ImageNet | MPCAttack | ASR (Average)99.3 | 36 | 1mo ago | |
| Flickr30K 1,000 images (test) | MPCAttack | ASR65.22 | 30 | 1mo ago | |
| Flickr30K | MPCAttack | ASR92.52 | 30 | 1mo ago | |
| ImageNet (test) | TGR | ASR (Inc-v3)72.1 | 26 | 25d ago | |
| ImageNet-compatible | MI-FGSM | Inc-v3 Performance100 | 24 | 1mo ago | |
| ImageNet 1000 images (val) | SA | Clean Accuracy77.6 | 24 | 1mo ago | |
| CIFAR-100 (test) | AA linf | ASR100 | 9 | 1mo ago | |
| NTU | BASAR | Attack Success Rate100 | 9 | 1mo ago | |
| HDM05 | BASAR | Attack Success Rate10,000 | 9 | 1mo ago | |
| ImageNet-compatible (test) | NI | Acc (Inc-v3)100 | 6 | 1mo ago | |
| ImageNet | PGN | ComDefend Robustness93.7 | 6 | 1mo ago | |
| ImageNet | MI-DI+RAP | Attack Success Rate (Dense-121)99.9 | 6 | 1mo ago | |
| ImageNet | MTDAI+RAP-LS | AT Accuracy (L2)73.7 | 6 | 1mo ago | |
| ImageNet-1K (test) | MTDI+RAP-LS | ASR (IncRes-v2)100 | 6 | 1mo ago | |
| Chinese Traffic Sign Recognition Database (CTSRD) (test) | I-FGSM | ASR (ResNet34)100 | 5 | 1mo ago | |
| LVLM Adversarial Evaluation Set | SGMA | LLaVA55.4 | 5 | 1mo ago | |
| ResNext-50 | Ours | Fooling Rate100 | 5 | 1mo ago | |
| DenseNet-121 | GFCS | Fooling Rate99.9 | 5 | 1mo ago | |
| VGG-19 | GFCS | Fooling Rate100 | 5 | 1mo ago | |
| Diabetic Retinopathy | Square attack | Average Queries50 | 4 | 1mo ago | |
| CIFAR-10 | PI-Attack | Average Queries99.8 | 4 | 1mo ago |
