FAPA: Transferable Adversarial Attacks Based on Foreground Attention

Table 6

Ablation studies are conducted on the ImageNet dataset (%).

u		ViTs	CNNs	Mean
1.0	1.0	61.92	47.98	54.95
0.9	1.1	63.19	45.47	54.33
0.8	1.2	63.56	46.90	55.23
0.7	1.3	64.19	48.07	56.13
0.6	1.4	63.78	48.47	56.13
0.5	1.5	63.75	49.80	56.78