A Sparsity-Limitation-Based High-Dimensional Distribution Searching Algorithm for Adversarial Attack

Table 3

Transferability of universal adversarial examples.

	MobileNet-v2	ResNet-50	VGG-16	GoogleNet	AlexNet	DenseNet	ResNet-152	ResNet-34
Universal adversarial example	95.98	97.32	96.65	95.06	75.46	86.75	82.09	88.24

The transferability is represented by attack successful rate (%) when the universal adversarial examples are fed into different deep learning models.