# Adversarial Attack Detection on ImageNet100

Source: [Adversarial Attack Detection on ImageNet100](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T06:02:23.588Z

Evaluation of model robustness against various adversarial attacks (e.g., BIM, PGD, MIM) applied to the ImageNet100 dataset.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Adversarial Attack Detection |
| Dataset (including any stated split) | ImageNet100 |
| Metric | Robustness (BIM) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 5 of 5 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Robustness (BIM)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(BIM)>): Higher is better; unit: PERCENT.

- [Robustness (PGD)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(PGD)>): Higher is better; unit: PERCENT.

- [Robustness (DIM)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(DIM)>): Higher is better; unit: PERCENT.

- [Robustness (MIM)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(MIM)>): Higher is better; unit: PERCENT.

- [Robustness (NIM)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(NIM)>): Higher is better; unit: PERCENT.

- [Adversarial Accuracy (AA)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Adversarial%20Accuracy%20(AA)>): Higher is better; unit: PERCENT.

- [Robustness (BPDA+EOT)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(BPDA%2BEOT)>): Higher is better; unit: PERCENT.

- [Robustness (MM)](<https://www.sota2.com/research/sota/adversarial-attack-detection-on-imagenet100.md?metric=Robustness%20(MM)>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Robustness (BIM) | Result date | Report paper |
| --- | --- | --- | --- |
| EPSAD | 99.98 | Not recorded | 68fa77471e209131cea7236d |
| Perturbation Forgery | 99.11 | Not recorded | 68fa77471e209131cea7236d |
| SPAD | 98.46 | Not recorded | 68fa77471e209131cea7236d |
| LID | 97.82 | Not recorded | 68fa77471e209131cea7236d |
| LiBRe | 92.59 | Not recorded | 68fa77471e209131cea7236d |

### EPSAD

Robustness (BIM): 99.98. Result ID: 69947df63a6c3148491d972a.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f7d1e209131cea45ef7.md>)

Recorded evaluation configuration: {"epsilon":"4/255"}. This record does not assert independent reproduction.

### Perturbation Forgery

Robustness (BIM): 99.11. Result ID: 69947df63a6c3148491d972b.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Implementation](<https://github.com/cc13qq/PFD>)

Recorded evaluation configuration: {"epsilon":"4/255"}. This record does not assert independent reproduction.

### SPAD

Robustness (BIM): 98.46. Result ID: 69947df63a6c3148491d9729.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f311e209131cea4457f.md>)

Recorded evaluation configuration: {"epsilon":"4/255"}. This record does not assert independent reproduction.

### LID

Robustness (BIM): 97.82. Result ID: 69947df63a6c3148491d9727.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa64231e209131cea02c02.md>)

Recorded evaluation configuration: {"epsilon":"4/255"}. This record does not assert independent reproduction.

### LiBRe

Robustness (BIM): 92.59. Result ID: 69947df63a6c3148491d9728.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77471e209131cea7236d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6a0a1e209131cea25a8e.md>)

Recorded evaluation configuration: {"epsilon":"4/255"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.