Cycle-Consistent Adversarial GAN: The Integration of Adversarial Attack and Defense

Table 5

Classification accuracy of adversarial examples generated by different methods transferred between different models on CIFAR10.

Target		Source
		ResNet-18
		FGSM	BIM	PGD
					FGSM	BIM	PGD
VGG-16	Without	32.6	19.7	18.6	23.48	13.6	12.7
	Defense with	43.1	33.7	35.6