A Sparsity-Limitation-Based High-Dimensional Distribution Searching Algorithm for Adversarial Attack

Table 2

Transferability of SparseAdv.

	MobileNet-v2	ResNet-50	VGG-16	GoogleNet
MobileNet-v2	95.35	57.90	53.26	15.88
ResNet-50	76.52	97.26	90.19	89.66
VGG-16	72.83	50.24	96.32	37.85
GoogleNet	73.29	69.18	84.66	99.02

The transferability is represented by attack successful rate (%) when the generated adversarial examples are fed into different deep learning models.