About the run time of 8 decision-based bbox attacks

[momo1986]

8 decision-based attacks: Boundary attack, OPT attack, Sign-OPT, Evoluationary attack, GeoDA, HSJA, Sign Flip, RayS.

Hi, dear team-members of SCLBD,

I am not sure which methods take less time to attack the same DNN models (e.g., ResNet) with the complete deceit.

If the statics result of running time is available, I am sincerely grateful.

Best Regards!
Momo