A Sparsity-Limitation-Based High-Dimensional Distribution Searching Algorithm for Adversarial Attack

Table 1

Comparison experiments of the four algorithms.

Attack	ResNet-50		VGG-16		GoogleNet		MobileNet-v2
	Success (%)	Time	Success (%)	Time	Success (%)	Time	Success (%)	Time
AdvGAN	98.20	17.32 s	95.72	16.39 s	98.16	17.99 s	97.77	18.32 s
TREMBA	99.52	437.7 s	100.0	316.9 s	99.85	280.2 s	100.0	144.8 s
ColorFool	89.72	26.98 h	91.25	24.50 h	85.29	29.88 h	89.23	30.93 h
SparseAdv	97.26	12.22 s	96.32	13.58 s	99.02	14.78 s	95.35	12.64 s

The four compared algorithms include AdvGAN, TREMBA, ColorFool, and our SparseAdv. There are two performance metrics containing attack successful rate (%) and time of batch (1000) generation.