Improving the Imperceptibility of Adversarial Examples Based on Weakly Perceptual Perturbation in Key Regions

Table 4

Attack performance under defense methods.

Method	mAPori	mAPadv	ASR
No defense	0.70	0.018	0.974
JPEG20	0.70	0.024	0.966
JPEG50	0.70	0.025	0.964
JPEG80	0.70	0.027	0.961
Comdefense	0.70	0.031	0.956