csdongxian / skip-connections-matter

Codes for ICLR 2020 paper "Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets"
MIT License
70 stars 9 forks source link

Wondering the performance of SGM on CIFAR-10 #2

Closed zjysteven closed 4 years ago

zjysteven commented 4 years ago

Hi, thanks for making the code available!

I'm just wondering if you have tested SGM on CIFAR-10 by any chance? And if so, does SGM still expose stronger transferability? Thanks!

csdongxian commented 4 years ago

Sorry for late replay. I was busy these days.

We conducted some experiments on CIFAR-10, and SGM did work. For example, if we set a VGG-19 (with BatchNorm) as a target model (93.3% accuracy on CIFAR-10), its accuracy decreases to 10.57% after attacking using a ResNet-18 as a source model with SGM-based PGD-10 (eps=8/255, step-size=2/255), while 43.64% accuracy with vanilla PGD-10 using the same settings.

Hope that answered your question :)

zjysteven commented 4 years ago

Thanks for the response!