Visual Computing for Industry, Biomedicine, and Art

Table 2 Perturbed performance comparisons of different attack types on the COCO validation set for DEKR

From: Local imperceptible adversarial attacks against human pose estimation networks

	AP	AP⁵⁰	AP⁷⁵	AP^M	AP^L	AR	AR⁵⁰	AR⁷⁵	AR^M	AR^L
Clean	0.680	0.867	0.745	0.621	0.777	0.730	0.898	0.784	0.662	0.827
BIM	0.528	0.734	0.573	0.439	0.665	0.578	0.761	0.619	0.475	0.722
PGD	0.535	0.741	0.580	0.441	0.677	0.585	0.768	0.624	0.477	0.736
C&W	0.664	0.856	0.726	0.596	0.772	0.713	0.886	0.764	0.636	0.822
Ours	0.618	0.814	0.674	0.530	0.753	0.672	0.848	0.719	0.574	0.809

Back to article page