Table 4 Average robustness computed for different methods. For each model, we randomly pick 200 samples from GreenBit, Biometrika, and CrossMatch in LivDet2015, respectively, and compute their average robustness
Methods | Models | ||
|---|---|---|---|
VGG19 | Alexnet | Mobilenet | |
Deepfool | 3.9 × 10−2 | 3.4 × 10−2 | 4.7 × 10−2 |
FGSM(ε = 0.12) | 8.7 × 10−2 | 7.4 × 10−2 | 9.1 × 10−2 |
MI-FGSM | 4.0 × 10−2 | 3.7 × 10−2 | 4.4 × 10−2 |
TRA | 4.3 × 10−2 | 4.2 × 10−2 | 4.6 × 10−2 |