Local imperceptible adversarial attacks against human pose estimation networks

Visual Computing for Industry, Biomedicine, and Art

Table 4 Imperceptibility of different attack types on HigherHRNet, DEKR and ViTPose

Metric Method Baseline	HigherHRNet			DEKR			ViTPose
Metric Method Baseline	SSIM↑	PSNR↑	LPIPS↓	SSIM↑	PSNR↑	LPIPS↓	SSIM↑	PSNR↑	LPIPS↓
BIM	0.559	23.993	0.469	0.575	24.137	0.478	0.883	16.810	0.137
PGD	0.559	23.993	0.469	0.574	24.198	0.468	0.882	16.792	0.137
C&W	0.934	31.148	0.090	0.934	31.165	0.089	0.919	17.928	0.107
Ours	0.928	31.299	0.118	0.924	31.293	0.130	0.935	22.775	0.095