Cycle-Consistent Adversarial GAN: The Integration of Adversarial Attack and Defense

Table 8

Comparison with the state-of-the-art attack methods. Run time is measured for generating 1,0000 adversarial instances during test time.

	FGSM [8]	BIM [9]	PGD [24]	CycleAdvGAN
				Attack	Defense
Run time	1.734s	18.436s	20.256s	0.52 s	0.53 s