Adversarial Attack Detection on ImageNet100
99.98Robustness (BIM)EPSAD
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| EPSADepsilon=4/2552024.05 | 99.98 | 99.89 | 99.23 | 99.18 | 99.72 | 99.98 | 99.85 | 99.23 | |
| Perturbation Forgeryepsilon=4/2552024.05 | 99.11 | 99.12 | 98.63 | 99.31 | 99.34 | 99.41 | 99.27 | 99.44 | |
| SPADepsilon=4/2552024.05 | 98.46 | 98.51 | 98.15 | 98.2 | 98.23 | 98.9 | 98.85 | 98.11 | |
| LIDepsilon=4/2552024.05 | 97.82 | 97.5 | 89.42 | 91.46 | 89.77 | 91.24 | 92.02 | 92.27 | |
| LiBReepsilon=4/2552024.05 | 92.59 | 95.48 | 92.43 | 87.25 | 90.13 | 86.53 | 87.14 | 85.73 |