Adversarial Purification on CIFAR-100
80.84Average AccuracyFlowPureCW
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| FlowPureCWType=Standard Accuracy2025.05 | 80.84 | 80.84 | |
| FlowPurePGDType=Standard Accuracy2025.05 | 80.75 | 80.75 | |
| VictimType=Standard Accuracy2025.05 | 80.73 | 80.73 | |
| FlowPureCWType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 75.51 | 75.51 | |
| FlowPurePGDType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 66.67 | 66.67 | |
| GDMPType=Standard Accuracy2025.05 | 66.26 | 44.28 | |
| GDMPType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 65.46 | 42.43 | |
| ADBMType=Standard Accuracy2025.05 | 64.76 | 39.07 | |
| GDMPType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 64.39 | 42.16 | |
| DiffPureType=Standard Accuracy2025.05 | 61.65 | 37.71 | |
| DiffPureType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 60.78 | 36.9 | |
| FlowPureGaussType=Standard Accuracy2025.05 | 60.75 | 37.31 | |
| FlowPureGaussType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 60.65 | 37.07 | |
| ADBMType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 60.24 | 32.72 | |
| DiffPureType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 60.03 | 35.23 | |
| FlowPureGaussType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 59.57 | 35.76 | |
| ADBMType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 57.43 | 29.99 | |
| FlowPurePGDType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 52.9 | 52.9 | |
| LMType=Standard Accuracy2025.05 | 45.56 | 23.23 | |
| LMType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 39.98 | 17.99 | |
| GDMPType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 37.27 | 16.08 | |
| FlowPureGaussType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 37.22 | 15.1 | |
| DiffPureType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 35.52 | 14.12 | |
| FlowPureCWType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 28.67 | 28.67 | |
| LMType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 26.89 | 10.98 | |
| ADBMType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 23.52 | 6.51 | |
| FlowPureGaussType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 16.06 | 5.33 | |
| DiffPureType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 15.87 | 5.2 | |
| LMType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 13.05 | 4.68 | |
| GDMPType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 11.77 | 4.49 | |
| ADBMType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 7.13 | 1.49 | |
| LMType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 3.35 | 0.46 | |
| FlowPurePGDType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 2.67 | 2.67 | |
| FlowPureCWType=Robust Accuracy, Setting=White-box, Attack=BPDA2025.05 | 2.47 | 2.47 | |
| FlowPurePGDType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 0.38 | 0.38 | |
| FlowPureCWType=Robust Accuracy, Setting=White-box, Attack=DH2025.05 | 0.26 | 0.26 | |
| VictimType=Robust Accuracy, Setting=Preprocessor-blind, Attack=PGD2025.05 | 0.01 | 0.01 | |
| VictimType=Robust Accuracy, Setting=Preprocessor-blind, Attack=CW2025.05 | 0 | 0 |