Table 1 Objective Viewing Test Of The Proposed Method And Anchor Methods Conducted Under Targeted/Non-targeted Attacks

MIFGSM [26]

31.78±0.10

0.8421±0.0169

31.96±0.12

0.8451±0.0165

PGD [25]

32.63±0.26

0.8613±0.0132

32.94±0.22

0.8671±0.0133

DI\(^2\)FGSM [20]

32.58±0.01

0.8709±0.0126

32.94±0.21

0.8764±0.0127

BIM [21]

33.38±0.48

0.8872±0.0094

34.31±0.48

0.9054±0.0080

JNDMGA [28]

34.91±1.99

0.9124±0.0218

35.69±2.39

0.9422±0.0163

MND [29]

36.84±1.48

0.9176±0.0330

38.39±1.58

0.9651±0.0047

\(L2_{ori}\)

34.34±1.43

0.9025±0.0113

32.27±1.56

0.8521±0.0262

\(\mathcal {L}_2\)

33.98±1.95

0.9294±0.0175

31.57±2.66

0.8743±0.0364

\(L1_{ori}\)

36.72±0.32

0.9324±0.0233

35.03±1.23

0.9323±0.0212

\(\mathcal {L}_1\)

36.32±1.59

0.9496±0.0127

34.33±1.74

0.9545±0.0164

\(\mathcal {L}_1+\mathcal {L}_2\)

36.08±1.53

0.9524±0.0128

35.38±1.87

0.9589±0.0160

\(\varvec{\mathcal {L}}_{\varvec{1}}\varvec{+}\varvec{\mathcal {L}}_{\varvec{2}}\varvec{+}\varvec{\mathcal {G}}\)

38.02±1.60

0.9628±0.0095

38.12±2.10

0.9782±0.0092