ML · Security / 01
Adversarial Robustness Testing
PGD reduced ResNet-34 top-1 accuracy from 76.0% to 0.2%.
details
Generated FGSM, PGD, and localized-patch adversarial examples against ResNet-34 on a 500-image ImageNet subset, then evaluated the same perturbed inputs on DenseNet-121. PGD used ε=0.02 for 10 iterations and produced a 90.50% cross-model degradation ratio.
- PyTorch
- ResNet-34
- DenseNet-121
- ImageNet










