Adversarial Attack Detection on CIFAR-100 PGD-10 (l_inf, 8/255) 1.0
38.81TPR-95RR
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RRArchitecture backbone=WRN-34-102021.05 | 38.81 | 0.79 | |
| EBDArchitecture backbone=WRN-34-102021.05 | 37.76 | 0.775 | |
| SNetArchitecture backbone=WRN-34-102021.05 | 36.14 | 0.738 | |
| RRArchitecture backbone=ResNet-182021.05 | 35.52 | 0.782 | |
| EBDArchitecture backbone=ResNet-182021.05 | 34.56 | 0.776 | |
| GDA*Architecture backbone=WRN-34-102021.05 | 33.79 | 0.605 | |
| GMMArchitecture backbone=WRN-34-102021.05 | 33.33 | 0.52 | |
| LIDArchitecture backbone=WRN-34-102021.05 | 33.27 | 0.672 | |
| SNetArchitecture backbone=ResNet-182021.05 | 33.12 | 0.743 | |
| KDArchitecture backbone=WRN-34-102021.05 | 32.59 | 0.573 | |
| GDAArchitecture backbone=WRN-34-102021.05 | 31.64 | 0.426 | |
| LIDArchitecture backbone=ResNet-182021.05 | 31.6 | 0.668 | |
| GDA*Architecture backbone=ResNet-182021.05 | 31.4 | 0.593 | |
| GMMArchitecture backbone=ResNet-182021.05 | 30.48 | 0.505 | |
| KDArchitecture backbone=ResNet-182021.05 | 30.23 | 0.532 | |
| GDAArchitecture backbone=ResNet-182021.05 | 29.67 | 0.412 |