Adversarial Detection on CIFAR-10 Clean (test)
94.12TPR-95Rectified Rejection
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Rectified RejectionAT=CCAT, Rejector=RR, Backbone=ResNet-182021.05 | 94.12 | 0.909 | |
| Con.AT=CCAT, Rejector=Con., Backbone=ResNet-182021.05 | 92.44 | 0.806 | |
| RRBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 90.74 | 0.897 | |
| EBDBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 89.63 | 0.86 | |
| GMMBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 88.36 | 0.747 | |
| SNetBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 88.3 | 0.803 | |
| GDA*Backbone=WRN-34-10, AT framework=PGD-AT2021.05 | 87.16 | 0.694 | |
| LIDBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 86.94 | 0.76 | |
| Rectified RejectionAT=PGD-AT, Rejector=RR, Backbone=ResNet-182021.05 | 86.91 | 0.861 | |
| Con.AT=PGD-AT, Rejector=Con., Backbone=ResNet-182021.05 | 86.52 | 0.857 | |
| Rectified RejectionAT=TRADES, Rejector=RR, Backbone=ResNet-182021.05 | 86.47 | 0.849 | |
| Con.AT=TRADES, Rejector=Con., Backbone=ResNet-182021.05 | 86.07 | 0.837 | |
| Margin (CARL)AT=CARL, Rejector=Margin, Backbone=ResNet-182021.05 | 85.54 | 0.682 | |
| KDBackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 85.51 | 0.759 | |
| GMMAT=PGD-AT, Rejector=GMM, Backbone=ResNet-182021.05 | 85.44 | 0.703 | |
| EBDAT=PGD-AT, Rejector=EBD, Backbone=ResNet-182021.05 | 85.34 | 0.832 | |
| GDABackbone=WRN-34-10, AT framework=PGD-AT2021.05 | 85.1 | 0.512 | |
| GDA*AT=PGD-AT, Rejector=GDA*, Backbone=ResNet-182021.05 | 84.51 | 0.664 | |
| SNetAT=PGD-AT, Rejector=SNet, Backbone=ResNet-182021.05 | 84.19 | 0.796 | |
| LIDAT=PGD-AT, Rejector=LID, Backbone=ResNet-182021.05 | 84.02 | 0.712 | |
| KDAT=PGD-AT, Rejector=KD, Backbone=ResNet-182021.05 | 82.59 | 0.618 | |
| GDAAT=PGD-AT, Rejector=GDA, Backbone=ResNet-182021.05 | 82.35 | 0.453 | |
| Margin (ATRO)AT=ATRO, Rejector=Margin, Backbone=ResNet-182021.05 | 73.42 | 0.669 |