# Adversarial Attack Success Rate on CIFAR-10 Source: [Adversarial Attack Success Rate on CIFAR-10]() Collection index: [llms.txt]() Data updated: 2026-02-27T08:00:05.810Z Evaluation of the success rate of various adversarial attacks (including CAA3, Semantic, and Full attacks) targeting models trained on the CIFAR-10 dataset. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Adversarial Attack Success Rate | | Dataset (including any stated split) | CIFAR-10 | | Metric | Clean Success Rate | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 12 of 12 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Clean Success Rate](): Higher is better; unit: PERCENT. - [CAA3a Success Rate](): Higher is better; unit: PERCENT. - [CAA3b Success Rate](): Higher is better; unit: PERCENT. - [CAA3c Success Rate](): Higher is better; unit: PERCENT. - [Semantic Attack Success Rate (Rand.)](): Higher is better; unit: PERCENT. - [Semantic Attack Success Rate (Sched.)](): Higher is better; unit: PERCENT. - [Full Attack Success Rate (Rand.)](): Higher is better; unit: PERCENT. - [Full Attack Success Rate (Sched.)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Clean Success Rate | Result date | Report paper | | --- | --- | --- | --- | | Normal | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | Madry | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | PAT\_self | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | PAT\_alex | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | GAT-f | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | GAT-fs | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | Normal | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | Trades | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | FAT | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | AWP | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | GAT-f | 0 | Not recorded | 68fa6ecc1e209131cea42343 | | GAT-fs | 0 | Not recorded | 68fa6ecc1e209131cea42343 | ### Normal Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62746. [Reporting paper]() Recorded evaluation configuration: {"Training Variant":"†"}. This record does not assert independent reproduction. ### Madry Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62747. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Constraint":"L\_inf","Training Variant":"†"}. This record does not assert independent reproduction. ### PAT\_self Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62748. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Training Variant":"†"}. This record does not assert independent reproduction. ### PAT\_alex Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62749. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Training Variant":"†"}. This record does not assert independent reproduction. ### GAT-f Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274a. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Training Variant":"†"}. This record does not assert independent reproduction. ### GAT-fs Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274b. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Training Variant":"†"}. This record does not assert independent reproduction. ### Normal Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274c. [Reporting paper]() Recorded evaluation configuration: {"Training Variant":"\*"}. This record does not assert independent reproduction. ### Trades Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Constraint":"L\_inf","Training Variant":"\*"}. This record does not assert independent reproduction. ### FAT Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Constraint":"L\_inf","Training Variant":"\*"}. This record does not assert independent reproduction. ### AWP Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e6274f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Constraint":"L\_inf","Training Variant":"\*"}. This record does not assert independent reproduction. ### GAT-f Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62750. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Training Variant":"\*"}. This record does not assert independent reproduction. ### GAT-fs Clean Success Rate: 0. Result ID: 69a14ef535dfcabb00e62751. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Training Variant":"\*"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.