FAPA: Transferable Adversarial Attacks Based on Foreground Attention

Table 5

Attack success rate of our method in the CNN model (%).

Method	Inc-v3	Inc-v4	IncRes-v2	Mean
PiT-B	51.80	50.40	38.40	46.87
CaiT-S-24	50.90	48.80	41.30	47.00
Visformer-S	51.70	58.30	41.00	50.33
Mean	51.47	52.50	40.23