From: Local imperceptible adversarial attacks against human pose estimation networks
 | AP | AP50 | AP75 | APM | APL | AR | AR50 | AR75 | ARM | ARL |
---|---|---|---|---|---|---|---|---|---|---|
Clean | 0.693 | 0.835 | 0.757 | 0.631 | 0.788 | 0.732 | 0.860 | 0.787 | 0.661 | 0.834 |
BIM | 0.444 | 0.613 | 0.475 | 0.357 | 0.566 | 0.512 | 0.665 | 0.545 | 0.405 | 0.661 |
PGD | 0.445 | 0.613 | 0.473 | 0.355 | 0.571 | 0.515 | 0.669 | 0.546 | 0.406 | 0.665 |
C&W | 0.633 | 0.795 | 0.690 | 0.578 | 0.716 | 0.684 | 0.827 | 0.734 | 0.616 | 0.782 |
Ours | 0.620 | 0.800 | 0.675 | 0.542 | 0.734 | 0.670 | 0.824 | 0.718 | 0.582 | 0.794 |