Adversarial Attack Detection on CIFAR-100 PGD-10 (l_inf, 16/255) 1.0
22.2TPR-95RR
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RRArchitecture backbone=WRN-34-102021.05 | 22.2 | 0.765 | |
| SNetArchitecture backbone=WRN-34-102021.05 | 22.02 | 0.753 | |
| EBDArchitecture backbone=WRN-34-102021.05 | 21.8 | 0.743 | |
| EBDArchitecture backbone=ResNet-182021.05 | 20.5 | 0.762 | |
| RRArchitecture backbone=ResNet-182021.05 | 19.89 | 0.767 | |
| SNetArchitecture backbone=ResNet-182021.05 | 19.48 | 0.759 | |
| LIDArchitecture backbone=WRN-34-102021.05 | 18.97 | 0.652 | |
| GMMArchitecture backbone=WRN-34-102021.05 | 18.95 | 0.529 | |
| GDA*Architecture backbone=WRN-34-102021.05 | 18.65 | 0.575 | |
| KDArchitecture backbone=WRN-34-102021.05 | 18.19 | 0.559 | |
| GDAArchitecture backbone=WRN-34-102021.05 | 17.75 | 0.421 | |
| GDA*Architecture backbone=ResNet-182021.05 | 17.04 | 0.588 | |
| LIDArchitecture backbone=ResNet-182021.05 | 16.86 | 0.661 | |
| GMMArchitecture backbone=ResNet-182021.05 | 16.69 | 0.508 | |
| KDArchitecture backbone=ResNet-182021.05 | 16.39 | 0.51 | |
| GDAArchitecture backbone=ResNet-182021.05 | 16.17 | 0.41 |