Visual Computing for Industry, Biomedicine, and Art

Table 7 Ablation study of attack effectiveness in terms of the number of selected pixels used in our method

From: Local imperceptible adversarial attacks against human pose estimation networks

	AP	AP⁵⁰	AP⁷⁵	AP^M	AP^L	AR	AR⁵⁰	AR⁷⁵	AR^M	AR^L
Clean	0.671	0.862	0.730	0.615	0.761	0.718	0.885	0.768	0.651	0.814
Ours (1000 pixels/0.38%)	0.645	0.834	0.701	0.569	0.759	0.690	0.860	0.737	0.603	0.812
Ours (5000 pixels/1.9%)	0.631	0.824	0.681	0.551	0.749	0.676	0.849	0.719	0.584	0.805
Ours (10000 pixels/3.8%)	0.605	0.802	0.658	0.516	0.739	0.653	0.826	0.696	0.552	0.796
Ours (20000 pixels/7.6%)	0.598	0.793	0.645	0.509	0.731	0.644	0.815	0.681	0.542	0.787
Ours (100000 pixels/38%)	0.537	0.735	0.579	0.441	0.675	0.581	0.755	0.618	0.472	0.732

Back to article page