Adversarial Attack Success Rate on CIFAR-10
0Clean Success RateNormal
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| NormalTraining Variant=†2022.02 | 0 | 100 | 100 | 100 | 37.4 | 53.6 | 100 | 100 | |
| MadryConstraint=L_inf, Training Variant=†2022.02 | 0 | 64.6 | 78.4 | 78 | 63.8 | 75.5 | 87.6 | 95.8 | |
| PAT_selfTraining Variant=†2022.02 | 0 | 74.7 | 85.6 | 78.3 | 65 | 78.8 | 88.9 | 96.9 | |
| PAT_alexTraining Variant=†2022.02 | 0 | 71.1 | 82.5 | 77 | 67.6 | 82.9 | 85.7 | 96.5 | |
| GAT-fTraining Variant=†2022.02 | 0 | 51.6 | 59.6 | 64.9 | 15.2 | 19.8 | 63.5 | 77.1 | |
| GAT-fsTraining Variant=†2022.02 | 0 | 47 | 55.4 | 60.5 | 15 | 18.8 | 60.7 | 73.5 | |
| NormalTraining Variant=*2022.02 | 0 | 100 | 100 | 100 | 51.1 | 68.3 | 100 | 100 | |
| TradesConstraint=L_inf, Training Variant=*2022.02 | 0 | 64.7 | 76.7 | 88.1 | 80.4 | 90.5 | 93.2 | 98.2 | |
| FATConstraint=L_inf, Training Variant=*2022.02 | 0 | 66.2 | 80.6 | 85.5 | 78.8 | 88.9 | 93 | 98.3 | |
| AWPConstraint=L_inf, Training Variant=*2022.02 | 0 | 59.9 | 72.8 | 87 | 81.8 | 90.7 | 93.1 | 98 | |
| GAT-fTraining Variant=*2022.02 | 0 | 51.8 | 59.2 | 63.2 | 14.2 | 18.7 | 62.6 | 75.9 | |
| GAT-fsTraining Variant=*2022.02 | 0 | 47.8 | 56.3 | 60.5 | 15.4 | 19.8 | 61.4 | 73.7 |