Table 2 Success rate of FGSM attacks with different ε in white-box manner. Bio2013, Ita2013, and Cro2013 represent dataset of Biometrika, ItalData, and Crossmatch in LiveDet2013, respectively
Model and dataset | Perturbation degree | ||||
|---|---|---|---|---|---|
ε = 0.03 (%) | ε = 0.06 (%) | ε = 0.09 (%) | ε = 0.12 (%) | ε = 0.16 (%) | |
VGG19 (Bio2013) | 54.5 | 64.9 | 75.6 | 84.4 | 98.5 |
Alexnet(Bio2013) | 61.5 | 69.6 | 76.0 | 86.6 | 99.8 |
MobilenetV1(Bio2013) | 48.4 | 61.1 | 72.2 | 85.4 | 97.3 |
VGG19 (Ita2013) | 51.8 | 58.9 | 64.3 | 80.3 | 96.1 |
Alexnet(Ita2013) | 56.7 | 58.4 | 74.7 | 81.7 | 98.4 |
MobilenetV1 (Ita2013) | 41.3 | 56.0 | 65.2 | 75.4 | 97.9 |
VGG19 (Cro2013) | 54.3 | 61.5 | 68.2 | 85.1 | 96.6 |
Alexnet(Cro2013) | 58.6 | 62.4 | 69.6 | 75.6 | 93.7 |
MobilenetV1(Cro2013) | 45.7 | 55.2 | 74.8 | 78.6 | 89.3 |