# Adversarial Robustness Accuracy on CIFAR-100 (test) (FGSM and PGD Steps)

Source: [Adversarial Robustness Accuracy on CIFAR-100 (test) (FGSM and PGD Steps)](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:39:15.379Z

Evaluation of Image Classification model robustness on the CIFAR-100 test set, specifically reporting accuracy against Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD) attacks using 5, 10, and 20 iterations/steps.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | CIFAR-100 (test) |
| Metric | Clean Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 5 of 5 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Clean Accuracy](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps.md?metric=Clean%20Accuracy>): Higher is better; unit: PERCENT.

- [Robust Accuracy (FGSM)](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps.md?metric=Robust%20Accuracy%20(FGSM)>): Higher is better; unit: PERCENT.

- [Robust Accuracy (PGD-5)](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps.md?metric=Robust%20Accuracy%20(PGD-5)>): Higher is better; unit: PERCENT.

- [Robust Accuracy (PGD-10)](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps.md?metric=Robust%20Accuracy%20(PGD-10)>): Higher is better; unit: PERCENT.

- [Robust Accuracy (PGD-20)](<https://www.sota2.com/research/sota/adversarial-robustness-accuracy-on-cifar-100-test-fgsm-and-pgd-steps.md?metric=Robust%20Accuracy%20(PGD-20)>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Clean Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| Natural | 78.7 | Not recorded | 68fa6b361e209131cea2cf0b |
| MixACM | 68.91 | Not recorded | 68fa6b361e209131cea2cf0b |
| MixACM | 65.69 | Not recorded | 68fa6b361e209131cea2cf0b |
| IGAM | 62.39 | Not recorded | 68fa6b361e209131cea2cf0b |
| PGD7-AT | 60.4 | Not recorded | 68fa6b361e209131cea2cf0b |

### Natural

Clean Accuracy: 78.7. Result ID: 698e7150ffc3901de09da296.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa689e1e209131cea1d204.md>)

Recorded evaluation configuration: {"Defense":"Natural"}. This record does not assert independent reproduction.

### MixACM

Clean Accuracy: 68.91. Result ID: 698e7150ffc3901de09da299.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Implementation](<https://www.sota2.com/awaisrauf.github.io/MixACM>)

Recorded evaluation configuration: {"mixup":"false"}. This record does not assert independent reproduction.

### MixACM

Clean Accuracy: 65.69. Result ID: 698e7150ffc3901de09da29a.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Implementation](<https://www.sota2.com/awaisrauf.github.io/MixACM>)

Recorded evaluation configuration: {"mixup":"true"}. This record does not assert independent reproduction.

### IGAM

Clean Accuracy: 62.39. Result ID: 698e7150ffc3901de09da298.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa689e1e209131cea1d204.md>)

Recorded evaluation configuration: {"Defense":"IGAM"}. This record does not assert independent reproduction.

### PGD7-AT

Clean Accuracy: 60.4. Result ID: 698e7150ffc3901de09da297.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa689e1e209131cea1d204.md>)

Recorded evaluation configuration: {"Defense":"PGD7-AT"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.