FAPA: Transferable Adversarial Attacks Based on Foreground Attention

Table 4

Attack success rate of our method in the ViT model (%).

Method	PiT-B	CaiT-S-24	Visformer-S	TNT-S	LeViT-256	ConViT-B	Mean
PiT-B	Null	59.30	72.60	70.00	64.00	57.30	64.64
CaiT-S-24	52.50	Null	57.90	71.60	58.30	76.50	63.36
Visformer-S	68.10	58.70	Null	73.40	71.20	51.50	64.58
Mean	60.30	59.00	65.25	71.67	64.50	61.77