# Adversarial Purification on CIFAR-100 Source: [Adversarial Purification on CIFAR-100]() Collection index: [llms.txt]() Data updated: 2026-03-31T11:46:06.888Z Evaluation of model robustness on the CIFAR-100 dataset after applying adversarial purification techniques, measured by average accuracy and worst-case accuracy. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Adversarial Purification | | Dataset (including any stated split) | CIFAR-100 | | Metric | Average Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 38 of 38 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Average Accuracy](): Higher is better; unit: PERCENT. - [Worst-Case Accuracy](): Higher is better; unit: PERCENT. ## Recorded results | Method | Average Accuracy | Result date | Report paper | | --- | --- | --- | --- | | FlowPureCW | 80.84 | Not recorded | 68fa78a31e209131cea79829 | | FlowPurePGD | 80.75 | Not recorded | 68fa78a31e209131cea79829 | | Victim | 80.73 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureCW | 75.51 | Not recorded | 68fa78a31e209131cea79829 | | FlowPurePGD | 66.67 | Not recorded | 68fa78a31e209131cea79829 | | GDMP | 66.26 | Not recorded | 68fa78a31e209131cea79829 | | GDMP | 65.46 | Not recorded | 68fa78a31e209131cea79829 | | ADBM | 64.76 | Not recorded | 68fa78a31e209131cea79829 | | GDMP | 64.39 | Not recorded | 68fa78a31e209131cea79829 | | DiffPure | 61.65 | Not recorded | 68fa78a31e209131cea79829 | | DiffPure | 60.78 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureGauss | 60.75 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureGauss | 60.65 | Not recorded | 68fa78a31e209131cea79829 | | ADBM | 60.24 | Not recorded | 68fa78a31e209131cea79829 | | DiffPure | 60.03 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureGauss | 59.57 | Not recorded | 68fa78a31e209131cea79829 | | ADBM | 57.43 | Not recorded | 68fa78a31e209131cea79829 | | FlowPurePGD | 52.9 | Not recorded | 68fa78a31e209131cea79829 | | LM | 45.56 | Not recorded | 68fa78a31e209131cea79829 | | LM | 39.98 | Not recorded | 68fa78a31e209131cea79829 | | GDMP | 37.27 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureGauss | 37.22 | Not recorded | 68fa78a31e209131cea79829 | | DiffPure | 35.52 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureCW | 28.67 | Not recorded | 68fa78a31e209131cea79829 | | LM | 26.89 | Not recorded | 68fa78a31e209131cea79829 | | ADBM | 23.52 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureGauss | 16.06 | Not recorded | 68fa78a31e209131cea79829 | | DiffPure | 15.87 | Not recorded | 68fa78a31e209131cea79829 | | LM | 13.05 | Not recorded | 68fa78a31e209131cea79829 | | GDMP | 11.77 | Not recorded | 68fa78a31e209131cea79829 | | ADBM | 7.13 | Not recorded | 68fa78a31e209131cea79829 | | LM | 3.35 | Not recorded | 68fa78a31e209131cea79829 | | FlowPurePGD | 2.67 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureCW | 2.47 | Not recorded | 68fa78a31e209131cea79829 | | FlowPurePGD | 0.38 | Not recorded | 68fa78a31e209131cea79829 | | FlowPureCW | 0.26 | Not recorded | 68fa78a31e209131cea79829 | | Victim | 0.01 | Not recorded | 68fa78a31e209131cea79829 | | Victim | 0 | Not recorded | 68fa78a31e209131cea79829 | ### FlowPureCW Average Accuracy: 80.84. Result ID: 69cbb3e247f34ce924b50a20. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### FlowPurePGD Average Accuracy: 80.75. Result ID: 69cbb3e247f34ce924b50a1b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### Victim Average Accuracy: 80.73. Result ID: 69cbb3e247f34ce924b50a04. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### FlowPureCW Average Accuracy: 75.51. Result ID: 69cbb3e247f34ce924b50a22. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### FlowPurePGD Average Accuracy: 66.67. Result ID: 69cbb3e247f34ce924b50a1d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### GDMP Average Accuracy: 66.26. Result ID: 69cbb3e247f34ce924b50a0c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### GDMP Average Accuracy: 65.46. Result ID: 69cbb3e247f34ce924b50a0e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### ADBM Average Accuracy: 64.76. Result ID: 69cbb3e247f34ce924b50a16. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### GDMP Average Accuracy: 64.39. Result ID: 69cbb3e247f34ce924b50a0d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### DiffPure Average Accuracy: 61.65. Result ID: 69cbb3e247f34ce924b50a07. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### DiffPure Average Accuracy: 60.78. Result ID: 69cbb3e247f34ce924b50a09. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### FlowPureGauss Average Accuracy: 60.75. Result ID: 69cbb3e247f34ce924b50a25. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### FlowPureGauss Average Accuracy: 60.65. Result ID: 69cbb3e247f34ce924b50a27. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### ADBM Average Accuracy: 60.24. Result ID: 69cbb3e247f34ce924b50a18. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### DiffPure Average Accuracy: 60.03. Result ID: 69cbb3e247f34ce924b50a08. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### FlowPureGauss Average Accuracy: 59.57. Result ID: 69cbb3e247f34ce924b50a26. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### ADBM Average Accuracy: 57.43. Result ID: 69cbb3e247f34ce924b50a17. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### FlowPurePGD Average Accuracy: 52.9. Result ID: 69cbb3e247f34ce924b50a1c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### LM Average Accuracy: 45.56. Result ID: 69cbb3e247f34ce924b50a11. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Standard Accuracy"}. This record does not assert independent reproduction. ### LM Average Accuracy: 39.98. Result ID: 69cbb3e247f34ce924b50a13. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. ### GDMP Average Accuracy: 37.27. Result ID: 69cbb3e247f34ce924b50a10. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### FlowPureGauss Average Accuracy: 37.22. Result ID: 69cbb3e247f34ce924b50a29. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### DiffPure Average Accuracy: 35.52. Result ID: 69cbb3e247f34ce924b50a0b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### FlowPureCW Average Accuracy: 28.67. Result ID: 69cbb3e247f34ce924b50a21. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### LM Average Accuracy: 26.89. Result ID: 69cbb3e247f34ce924b50a12. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### ADBM Average Accuracy: 23.52. Result ID: 69cbb3e247f34ce924b50a1a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### FlowPureGauss Average Accuracy: 16.06. Result ID: 69cbb3e247f34ce924b50a28. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### DiffPure Average Accuracy: 15.87. Result ID: 69cbb3e247f34ce924b50a0a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### LM Average Accuracy: 13.05. Result ID: 69cbb3e247f34ce924b50a15. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### GDMP Average Accuracy: 11.77. Result ID: 69cbb3e247f34ce924b50a0f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### ADBM Average Accuracy: 7.13. Result ID: 69cbb3e247f34ce924b50a19. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### LM Average Accuracy: 3.35. Result ID: 69cbb3e247f34ce924b50a14. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### FlowPurePGD Average Accuracy: 2.67. Result ID: 69cbb3e247f34ce924b50a1f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### FlowPureCW Average Accuracy: 2.47. Result ID: 69cbb3e247f34ce924b50a24. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"BPDA"}. This record does not assert independent reproduction. ### FlowPurePGD Average Accuracy: 0.38. Result ID: 69cbb3e247f34ce924b50a1e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### FlowPureCW Average Accuracy: 0.26. Result ID: 69cbb3e247f34ce924b50a23. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"White-box","Attack":"DH"}. This record does not assert independent reproduction. ### Victim Average Accuracy: 0.01. Result ID: 69cbb3e247f34ce924b50a05. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"PGD"}. This record does not assert independent reproduction. ### Victim Average Accuracy: 0. Result ID: 69cbb3e247f34ce924b50a06. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Type":"Robust Accuracy","Setting":"Preprocessor-blind","Attack":"CW"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.