攻击方法

Inc-v3^*

Inc-v4^*

IncRes-v2^*

Res-101^*

Adv-Inc-v3

IncRes-v2-ens

平均值

I-FGSM

99.9

98.6

93.7

95.9

18.2

9.1

69.2

AF-R-I-FGSM

99.8

98.6

95.9

96.5

31.4

22.3

74.1

MI-FGSM

99.8

99.1

93.3

95.9

31.9

18.9

73.2

AF-R-MI-FGSM

99.2

97.9

93.5

94.3

52.2

42.7

79.9