Adversarial Attack Detection on ImageNet
100TPRProposed two-phase framework
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Proposed two-phase frameworkAttack=HSJA[6], Quantization=salted randomized quantization2026.06 | 100 | 4 | — | — | — | — | — | |
| Proposed two-phase frameworkAttack=F-mixup(HSJA)[18], Quantization=salted randomized quantization2026.06 | 100 | 7 | — | — | — | — | — | |
| Proposed two-phase frameworkAttack=SA[1], Quantization=salted randomized quantization2026.06 | 100 | 3 | — | — | — | — | — | |
| Proposed two-phase frameworkAttack=SimBA[13], Quantization=salted randomized quantization2026.06 | 100 | 7 | — | — | — | — | — | |
| Proposed two-phase frameworkAttack=Average, Quantization=salted randomized quantization2026.06 | 100 | 6 | — | — | — | — | — | |
| Blacklightsettings=default recommended, step size=12026.06 | 100 | 63 | 100 | 18 | 76 | 96 | 28 | |
| Oursstep size=202026.06 | 100 | 0 | 100 | 0 | 0 | 0 | 100 | |
| Proposed two-phase frameworkAttack=BA[4], Quantization=salted randomized quantization2026.06 | 98 | 9 | — | — | — | — | — | |
| BlacklightAttack=HSJA[6], Settings=default recommended settings2026.06 | 98 | 37 | — | — | — | — | — | |
| BlacklightAttack=SA[1], Settings=default recommended settings2026.06 | 94 | 37 | — | — | — | — | — | |
| BlacklightAttack=F-mixup(HSJA)[18], Settings=default recommended settings2026.06 | 91 | 41 | — | — | — | — | — | |
| BlacklightAttack=Average, Settings=default recommended settings2026.06 | 91 | 42 | — | — | — | — | — | |
| BlacklightAttack=SimBA[13], Settings=default recommended settings2026.06 | 87 | 46 | — | — | — | — | — | |
| BlacklightAttack=BA[4], Settings=default recommended settings2026.06 | 83 | 49 | — | — | — | — | — | |
| Blacklight+Attack=SA[1], Settings=tuned parameters (grid search)2026.06 | 61 | 0 | — | — | — | — | — | |
| Blacklight+Attack=SimBA[13], Settings=tuned parameters (grid search)2026.06 | 59 | 0 | — | — | — | — | — | |
| Blacklight+Attack=F-mixup(HSJA)[18], Settings=tuned parameters (grid search)2026.06 | 57 | 0 | — | — | — | — | — | |
| Blacklight+Attack=Average, Settings=tuned parameters (grid search)2026.06 | 54 | 0 | — | — | — | — | — | |
| Blacklight+Attack=HSJA[6], Settings=tuned parameters (grid search)2026.06 | 50 | 0 | — | — | — | — | — | |
| Blacklight+Attack=BA[4], Settings=tuned parameters (grid search)2026.06 | 42 | 0 | — | — | — | — | — | |
| Blacklight+settings=tuned parameters (grid search)2026.06 | 41 | 0 | 41 | 0 | 0 | 0 | 85 |