Adversarial Attack on ImageNet (val) (Generic Metrics)
59.06AccuracyBIA
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BIADefense=Smoothing, Kernel=Mean2025.06 | 59.06 | 26.15 | 34.46 | 11.76 | |
| BIADefense=Smoothing, Kernel=Gaussian2025.06 | 58.75 | 26.66 | 34.81 | 11.94 | |
| BIA + SCGADefense=Smoothing, Kernel=Mean2025.06 | 57.2 | 28.63 | 36.7 | 11.88 | |
| PDCLDefense=Smoothing, Kernel=Mean2025.06 | 56.05 | 29.95 | 38.04 | 11.3 | |
| BIA + SCGADefense=Smoothing, Kernel=Gaussian2025.06 | 55.55 | 30.84 | 38.88 | 12.01 | |
| PDCL + SCGADefense=Smoothing, Kernel=Mean2025.06 | 55.29 | 30.98 | 38.92 | 11.39 | |
| BIADefense=Smoothing, Kernel=Median2025.06 | 54.27 | 32.44 | 40.36 | 11.77 | |
| GAMADefense=Smoothing, Kernel=Mean2025.06 | 54.05 | 32.55 | 40.47 | 11.18 | |
| GAMA + SCGADefense=Smoothing, Kernel=Mean2025.06 | 53.91 | 32.76 | 40.62 | 11.25 | |
| PDCL + SCGADefense=Smoothing, Kernel=Gaussian2025.06 | 53.77 | 32.87 | 40.66 | 11.03 | |
| PDCLDefense=Smoothing, Kernel=Gaussian2025.06 | 52.68 | 31.79 | 39.75 | 11.42 | |
| GAMADefense=Smoothing, Kernel=Gaussian2025.06 | 52.47 | 34.61 | 42.41 | 11.15 | |
| GAMA + SCGADefense=Smoothing, Kernel=Gaussian2025.06 | 52.09 | 35.09 | 42.71 | 11.09 | |
| BIA + SCGADefense=Smoothing, Kernel=Median2025.06 | 49.61 | 38.44 | 45.82 | 11.37 | |
| FACLDefense=Smoothing, Kernel=Mean2025.06 | 48.38 | 39.73 | 46.97 | 10.34 | |
| FACL + SCGADefense=Smoothing, Kernel=Mean2025.06 | 46.18 | 42.5 | 49.47 | 9.97 | |
| FACLDefense=Smoothing, Kernel=Gaussian2025.06 | 45.91 | 42.91 | 49.88 | 10.14 | |
| PDCLDefense=Smoothing, Kernel=Median2025.06 | 45.87 | 43.04 | 50.02 | 10.41 | |
| GAMADefense=Smoothing, Kernel=Median2025.06 | 45.53 | 43.45 | 50.4 | 10.32 | |
| PDCL + SCGADefense=Smoothing, Kernel=Median2025.06 | 45.34 | 43.68 | 50.63 | 10.22 | |
| GAMA + SCGADefense=Smoothing, Kernel=Median2025.06 | 43.89 | 45.46 | 52.09 | 9.8 | |
| FACL + SCGADefense=Smoothing, Kernel=Gaussian2025.06 | 43.08 | 46.35 | 52.95 | 9.29 | |
| BIADefense=Random Pixel2025.06 | 41.62 | 48.48 | 54.98 | 9.96 | |
| BIADefense=Total Variation Minimization2025.06 | 41.17 | 49.05 | 55.38 | 9.87 | |
| BIA + SCGADefense=Random Pixel2025.06 | 38.15 | 52.77 | 58.86 | 9.09 | |
| BIA + SCGADefense=Total Variation Minimization2025.06 | 37.42 | 53.61 | 59.6 | 8.76 | |
| BIADefense=Random Rotation, Rotation=Avg.2025.06 | 37.08 | 53.95 | 59.56 | 8.36 | |
| FACLDefense=Smoothing, Kernel=Median2025.06 | 36.29 | 55.01 | 60.58 | 8.46 | |
| GAMADefense=Random Pixel2025.06 | 35.78 | 55.52 | 61.17 | 7.97 | |
| GAMADefense=Total Variation Minimization2025.06 | 35.08 | 56.41 | 62 | 7.88 | |
| PDCLDefense=Random Pixel2025.06 | 34.4 | 57.78 | 63.17 | 7.87 | |
| BIA + SCGADefense=Random Rotation, Rotation=Avg.2025.06 | 34.05 | 57.75 | 63.01 | 7.8 | |
| PDCL + SCGADefense=Random Pixel2025.06 | 33.71 | 58.26 | 63.74 | 8.06 | |
| GAMA + SCGADefense=Random Pixel2025.06 | 33.61 | 58.28 | 63.66 | 7.68 | |
| BIADefense=Random Rotation, Rotation=30 deg2025.06 | 33.59 | 58.38 | 63.89 | 7.91 | |
| FACL + SCGADefense=Smoothing, Kernel=Median2025.06 | 33.43 | 58.54 | 63.78 | 7.77 | |
| FACLDefense=Random Pixel2025.06 | 33.11 | 59 | 64.31 | 7.89 | |
| PDCLDefense=Total Variation Minimization2025.06 | 32.97 | 59.06 | 64.29 | 7.46 | |
| PDCL + SCGADefense=Total Variation Minimization2025.06 | 32.64 | 59.54 | 64.34 | 7.63 | |
| GAMA + SCGADefense=Total Variation Minimization2025.06 | 32.6 | 59.55 | 64.77 | 7.48 | |
| FACLDefense=Total Variation Minimization2025.06 | 32.4 | 59.88 | 64.6 | 7.74 | |
| GAMADefense=Random Rotation, Rotation=Avg.2025.06 | 31.66 | 60.67 | 65.6 | 7.12 | |
| PDCLDefense=Random Rotation, Rotation=Avg.2025.06 | 31.34 | 60.87 | 65.75 | 7.09 | |
| FACL + SCGADefense=Random Pixel2025.06 | 31.32 | 61.28 | 66.33 | 7.66 | |
| PDCL + SCGADefense=Random Rotation, Rotation=Avg.2025.06 | 30.8 | 61.76 | 66.54 | 7.02 | |
| FACL + SCGADefense=Total Variation Minimization2025.06 | 30.56 | 62.15 | 67.02 | 7.25 | |
| GAMA + SCGADefense=Random Rotation, Rotation=Avg.2025.06 | 30.3 | 62.37 | 67.08 | 6.86 | |
| BIADefense=Random Rotation, Rotation=50 deg2025.06 | 29.2 | 63.86 | 68.66 | 6.97 | |
| BIA + SCGADefense=Random Rotation, Rotation=30 deg2025.06 | 28.61 | 64.52 | 69.32 | 6.62 | |
| BIA + SCGADefense=Random Rotation, Rotation=50 deg2025.06 | 28.43 | 64.79 | 69.5 | 6.76 | |
| FACLDefense=Random Rotation, Rotation=Avg.2025.06 | 27.12 | 66.41 | 70.66 | 6.44 | |
| BIADefense=Random Rotation, Rotation=70 deg2025.06 | 26.27 | 67.52 | 71.81 | 6.4 | |
| GAMADefense=Random Rotation, Rotation=50 deg2025.06 | 26.25 | 67.48 | 71.88 | 6.19 | |
| GAMADefense=Random Rotation, Rotation=30 deg2025.06 | 26.1 | 67.59 | 71.93 | 5.9 | |
| PDCLDefense=Random Rotation, Rotation=30 deg2025.06 | 26.04 | 67.76 | 72.1 | 6.2 | |
| GAMA + SCGADefense=Random Rotation, Rotation=30 deg2025.06 | 25.31 | 68.63 | 72.92 | 5.93 | |
| FACL + SCGADefense=Random Rotation, Rotation=Avg.2025.06 | 25.3 | 68.69 | 72.68 | 6.08 | |
| PDCL + SCGADefense=Random Rotation, Rotation=30 deg2025.06 | 25.2 | 68.8 | 73.03 | 6 | |
| BIADefense=Random Rotation, Rotation=90 deg2025.06 | 24.92 | 69.26 | 73.34 | 6.31 | |
| PDCLDefense=Random Rotation, Rotation=50 deg2025.06 | 22.5 | 72.16 | 75.91 | 5.39 | |
| BIA + SCGADefense=Random Rotation, Rotation=70 deg2025.06 | 22.27 | 72.44 | 76.14 | 5.36 | |
| FACLDefense=Random Rotation, Rotation=30 deg2025.06 | 22 | 72.75 | 76.42 | 5.22 | |
| PDCLDefense=Random Rotation, Rotation=70 deg2025.06 | 21.84 | 73 | 76.6 | 5.35 | |
| PDCL + SCGADefense=Random Rotation, Rotation=50 deg2025.06 | 21.84 | 73 | 76.6 | 5.35 | |
| GAMA + SCGADefense=Random Rotation, Rotation=50 deg2025.06 | 21.75 | 73.06 | 76.65 | 5.16 | |
| BIA + SCGADefense=Random Rotation, Rotation=90 deg2025.06 | 21.18 | 73.86 | 77.43 | 5.34 | |
| GAMADefense=Random Rotation, Rotation=70 deg2025.06 | 20.18 | 75.03 | 78.35 | 4.88 | |
| FACL + SCGADefense=Random Rotation, Rotation=30 deg2025.06 | 19.68 | 75.78 | 79.02 | 5.15 | |
| PDCL + SCGADefense=Random Rotation, Rotation=70 deg2025.06 | 19.58 | 75.85 | 79.06 | 4.97 | |
| GAMA + SCGADefense=Random Rotation, Rotation=70 deg2025.06 | 19.41 | 76.01 | 79.26 | 4.77 | |
| GAMADefense=Random Rotation, Rotation=90 deg2025.06 | 19.1 | 76.46 | 79.57 | 4.88 | |
| PDCLDefense=Random Rotation, Rotation=90 deg2025.06 | 19.02 | 76.5 | 79.65 | 4.67 | |
| FACLDefense=Random Rotation, Rotation=50 deg2025.06 | 18.64 | 77.08 | 80.21 | 4.95 | |
| PDCL + SCGADefense=Random Rotation, Rotation=90 deg2025.06 | 18.63 | 77.04 | 80.16 | 4.8 | |
| GAMA + SCGADefense=Random Rotation, Rotation=90 deg2025.06 | 18.41 | 77.29 | 80.33 | 4.65 | |
| FACL + SCGADefense=Random Rotation, Rotation=50 deg2025.06 | 16.91 | 79.19 | 81.99 | 4.47 | |
| FACLDefense=Random Rotation, Rotation=70 deg2025.06 | 16.68 | 79.49 | 82.2 | 4.43 | |
| FACLDefense=Random Rotation, Rotation=90 deg2025.06 | 15.84 | 80.59 | 83.13 | 4.42 | |
| FACL + SCGADefense=Random Rotation, Rotation=70 deg2025.06 | 15.2 | 81.35 | 83.83 | 4.15 | |
| FACL + SCGADefense=Random Rotation, Rotation=90 deg2025.06 | 14.61 | 82.13 | 84.49 | 4.16 |