Adversarial Attack Detection on CIFAR10
100TPRBlacklight
Evaluation results
| Method | Links | ||
|---|---|---|---|
| BlacklightAttack=BA[4], Settings=default recommended settings2026.06 | 100 | 28 | |
| Proposed two-phase frameworkAttack=BA[4], Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| BlacklightAttack=HSJA[6], Settings=default recommended settings2026.06 | 100 | 21 | |
| Proposed two-phase frameworkAttack=HSJA[6], Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| Proposed two-phase frameworkAttack=F-mixup(HSJA)[18], Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| BlacklightAttack=SA[1], Settings=default recommended settings2026.06 | 100 | 33 | |
| Proposed two-phase frameworkAttack=SA[1], Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| BlacklightAttack=SimBA[13], Settings=default recommended settings2026.06 | 100 | 47 | |
| Proposed two-phase frameworkAttack=SimBA[13], Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| Proposed two-phase frameworkAttack=Average, Quantization=salted randomized quantization2026.06 | 100 | 0 | |
| BlacklightAttack=Average, Settings=default recommended settings2026.06 | 97 | 31 | |
| BlacklightAttack=F-mixup(HSJA)[18], Settings=default recommended settings2026.06 | 87 | 29 | |
| Blacklight+Attack=BA[4], Settings=tuned parameters (grid search)2026.06 | 73 | 0 | |
| Blacklight+Attack=HSJA[6], Settings=tuned parameters (grid search)2026.06 | 68 | 0 | |
| Blacklight+Attack=SimBA[13], Settings=tuned parameters (grid search)2026.06 | 68 | 0 | |
| Blacklight+Attack=Average, Settings=tuned parameters (grid search)2026.06 | 67 | 0 | |
| Blacklight+Attack=F-mixup(HSJA)[18], Settings=tuned parameters (grid search)2026.06 | 66 | 0 | |
| Blacklight+Attack=SA[1], Settings=tuned parameters (grid search)2026.06 | 58 | 0 |