Advances, Systems and Applications
Table 2 Comparison Of Subjective Viewing Tests Conducted Between The Proposed Method And The Anchor method Using The VGGFace2 Dataset Under Non-targeted Attacks
From: HVS-inspired adversarial image generation with high perceptual quality
Image Index | Non-Targeted Attack | |||||
|---|---|---|---|---|---|---|
| Â | BIM [21] | PGD [25] | MIFGSM [26] | DI\(^{2}\)FGSM [20] | JNDMGA [28] | MND [29] |
P9 | 1.84 | 1.76 | 2.02 | 2.23 | 2.05 | 1.60 |
P10 | 1.94 | 1.96 | 1.74 | 1.58 | 1.97 | 1.55 |
P11 | 1.12 | 1.47 | 1.64 | 1.38 | 0.69 | 1.17 |
P12 | 0.92 | 0.88 | 1.42 | 1.58 | 1.51 | 1.11 |
P13 | 1.08 | 1.10 | 1.42 | 1.30 | 1.44 | 1.25 |
P14 | 1.59 | 1.78 | 1.68 | 1.40 | 1.15 | 1.36 |
P15 | 1.22 | 1.10 | 1.32 | 1.38 | 0.51 | 0.96 |
P16 | 0.92 | 0.84 | 1.51 | 1.13 | 1.36 | 0.87 |
Average | 1.33 | 1.36 | 1.59 | 1.50 | 1.34 | 1.23 |