| Method | Target | Black/White Box | Noise distribution |
| FGSM [14] | targeted | white box | Whole image |
| DeepFool [29] | targeted | white box | Whole image |
| C&W [30] | targeted | white box | Whole image |
| BIM [25] | targeted | white box | Whole image |
| JSMA [31] | targeted | white box | Whole image |
| ATNs [32] | targeted | white box | Whole image |
| One Pixel [33] | non-targeted | black box | 1 pixel or very few pixels |