Adversarial Attack on CIFAR100
99.83ASRPDSG (PGD)
Evaluation Results
| Method | Links | |
|---|---|---|
| PDSG (PGD)Architecture=ResNet18, Perturbation budget (epsilon)=8/255, Coding=Direct coding2025.03 | 99.83 | |
| SDMTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 81.47 | |
| SDMTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 80.63 | |
| C&WTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 79.17 | |
| SquareArchitecture=ResNet18, Perturbation budget (epsilon)=8/255, Coding=Direct coding2025.03 | 78.8 | |
| APGDTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 78.76 | |
| PDSG (PGD)Architecture=ResNet18, Perturbation budget (epsilon)=2/255, Coding=Direct coding2025.03 | 78.5 | |
| SDMTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 78.44 | |
| APGDTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 78.2 | |
| C&WTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 78.06 | |
| PGDTarget Model=WideResNet-28-10, Defense=VAT, Norm Constraint=l-infinity2026.05 | 77.97 | |
| SDMTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 77.89 | |
| C&WTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 77.76 | |
| PGDTarget Model=ResNet-34, Defense=VAT, Norm Constraint=l-infinity2026.05 | 77.23 | |
| C&WTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 77.11 | |
| SDMTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 76.76 | |
| SDMTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 76.66 | |
| C&WTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 75.96 | |
| C&WTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 74.39 | |
| SDMTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 74.28 | |
| SDMTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 74.17 | |
| APGDTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 73.91 | |
| PGDTarget Model=WideResNet-28-10, Defense=MART, Norm Constraint=l-infinity2026.05 | 73.37 | |
| APGDTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 73.2 | |
| C&WTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 73.03 | |
| PGDTarget Model=ResNet-34, Defense=MART, Norm Constraint=l-infinity2026.05 | 72.53 | |
| APGDTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 72.3 | |
| C&WTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 72.16 | |
| RaySArchitecture=ResNet18, Perturbation budget (epsilon)=8/255, Coding=Direct coding2025.03 | 71.8 | |
| PGDTarget Model=WideResNet-28-10, Defense=HAT, Norm Constraint=l-infinity2026.05 | 71.74 | |
| APGDTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 71.13 | |
| PGDTarget Model=ResNet-34, Defense=HAT, Norm Constraint=l-infinity2026.05 | 70.55 | |
| APGDTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 70.28 | |
| PGDTarget Model=WideResNet-28-10, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 69.71 | |
| APGDTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 69.56 | |
| PGDTarget Model=ResNet-34, Defense=LOAT, Norm Constraint=l-infinity2026.05 | 68.96 | |
| SquareArchitecture=ResNet18, Perturbation budget (epsilon)=2/255, Coding=Direct coding2025.03 | 50.67 | |
| RaySArchitecture=ResNet18, Perturbation budget (epsilon)=2/255, Coding=Direct coding2025.03 | 32.64 |