Adversarial Defense on CIFAR-10 (test)
93.62Standard AccuracyWang et al. (2022) + SSNI-L
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Wang et al. (2022) + SSNI-LClassifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/255, Defense Method=SSNI-L2025.06 | 93.62 | 79.95 | — | — | — | — | |
| Lee & Kim (2023) + SSNI-LClassifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/255, Defense Method=SSNI-L2025.06 | 93.49 | 88.41 | — | — | — | — | |
| Nie et al. (2022) + SSNI-LClassifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/255, Defense Method=SSNI-L2025.06 | 92.97 | 80.08 | — | — | — | — | |
| Wang et al. (2022)Classifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/2552025.06 | 92.45 | 79.88 | — | — | — | — | |
| Lee & Kim (2023)Classifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/2552025.06 | 90.1 | 88.4 | — | — | — | — | |
| Nie et al. (2022)Classifier Backbone=WRN-28-10, Attack Type=BPDA+EOT ℓ∞, Attack Constraint (ϵ)=8/2552025.06 | 89.71 | 81.9 | — | — | — | — | |
| MuonNorm=ℓ2, Optimizer=Muon, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 89.66 | — | 23.82 | 66.94 | 25.75 | 19.63 | |
| SGDNorm=ℓ2, Optimizer=SGD, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 87.74 | — | 22.81 | 63.46 | 22.73 | 17.82 | |
| SGDNorm=ℓ2, Optimizer=SGD, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 87.58 | — | 25.91 | 65.53 | 25 | 20.52 | |
| MuonNorm=ℓ1, Optimizer=Muon, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 86.68 | — | 18.19 | 63.5 | 57.57 | 18.19 | |
| MuonNorm=ℓ∞, Optimizer=Muon, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 85.74 | — | 43.68 | 60.84 | 6 | 6 | |
| MuonNorm=ℓ2, Optimizer=Muon, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 85.1 | — | 28.52 | 64.09 | 27.75 | 22.85 | |
| MuonNorm=ℓ∞+ℓ1, Optimizer=Muon, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 84.81 | — | 38.58 | 67.24 | 50.9 | 37.83 | |
| SGDNorm=ℓ1, Optimizer=SGD, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 84.08 | — | 17.1 | 59.15 | 53.05 | 17.1 | |
| SGDNorm=ℓ1, Optimizer=SGD, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 84.08 | — | 16.98 | 59.34 | 53.2 | 16.98 | |
| AdamWNorm=ℓ2, Optimizer=AdamW, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 82.48 | — | 23.31 | 58.92 | 24.11 | 18.66 | |
| SGDNorm=ℓ∞, Optimizer=SGD, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 82.37 | — | 41.73 | 57.17 | 5.8 | 5.79 | |
| SGDNorm=ℓ∞+ℓ1, Optimizer=SGD, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 81.22 | — | 35.77 | 64.16 | 48 | 35.07 | |
| AdamWNorm=ℓ2, Optimizer=AdamW, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 80.74 | — | 24.58 | 58.84 | 25.42 | 19.97 | |
| AdamWNorm=ℓ1, Optimizer=AdamW, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 79.36 | — | 19.09 | 54.36 | 49.68 | 19.09 | |
| SGDNorm=ℓ∞+ℓ1, Optimizer=SGD, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 79.21 | — | 40.84 | 64.86 | 52.15 | 40.37 | |
| SGDNorm=ℓ∞, Optimizer=SGD, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 78.6 | — | 45.81 | 58.2 | 8.05 | 8.05 | |
| MuonNorm=ℓ∞, Optimizer=Muon, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 78.04 | — | 43.86 | 58.58 | 10.16 | 10.16 | |
| MuonNorm=ℓ∞+ℓ1, Optimizer=Muon, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 77.48 | — | 39.67 | 63.08 | 51.03 | 39.27 | |
| MuonNorm=ℓ1, Optimizer=Muon, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 76.3 | — | 23.63 | 57.75 | 51.71 | 23.63 | |
| AdamWNorm=ℓ1, Optimizer=AdamW, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 71.5 | — | 21.83 | 54.64 | 49.62 | 21.83 | |
| AdamWNorm=ℓ∞+ℓ1, Optimizer=AdamW, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 69.98 | — | 32.78 | 55.36 | 43.76 | 32.38 | |
| AdamWNorm=ℓ∞, Optimizer=AdamW, Checkpoint=Last, Backbone=PreActResNet-182026.05 | 69.22 | — | 38.63 | 48.96 | 7.87 | 7.87 | |
| AdamWNorm=ℓ∞+ℓ1, Optimizer=AdamW, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 66.26 | — | 36.83 | 55.19 | 45.59 | 36.53 | |
| AdamWNorm=ℓ∞, Optimizer=AdamW, Checkpoint=Best, Backbone=PreActResNet-182026.05 | 65.18 | — | 39.64 | 47.76 | 10.07 | 10.07 |