Adversarial Attack Detection on CIFAR-100 PGD-10 (l_2, 128/255) 1.0
0.4826TPR-95RR
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| RRArchitecture backbone=WRN-34-102021.05 | 0.4826 | 0.801 | |
| RRArchitecture backbone=ResNet-182021.05 | 0.4703 | 0.802 | |
| EBDArchitecture backbone=WRN-34-102021.05 | 0.468 | 0.789 | |
| SNetArchitecture backbone=WRN-34-102021.05 | 0.4432 | 0.713 | |
| EBDArchitecture backbone=ResNet-182021.05 | 0.4422 | 0.777 | |
| LIDArchitecture backbone=WRN-34-102021.05 | 0.4297 | 0.672 | |
| GDA*Architecture backbone=WRN-34-102021.05 | 0.4291 | 0.602 | |
| SNetArchitecture backbone=ResNet-182021.05 | 0.4272 | 0.726 | |
| GMMArchitecture backbone=WRN-34-102021.05 | 0.4227 | 0.513 | |
| GDA*Architecture backbone=ResNet-182021.05 | 0.421 | 0.596 | |
| LIDArchitecture backbone=ResNet-182021.05 | 0.4201 | 0.658 | |
| KDArchitecture backbone=WRN-34-102021.05 | 0.4166 | 0.575 | |
| GMMArchitecture backbone=ResNet-182021.05 | 0.4068 | 0.511 | |
| KDArchitecture backbone=ResNet-182021.05 | 0.4067 | 0.539 | |
| GDAArchitecture backbone=WRN-34-102021.05 | 0.4052 | 0.423 | |
| GDAArchitecture backbone=ResNet-182021.05 | 0.3983 | 0.416 |