Adversarial Robustness Evaluation on TissueMNIST
70.54Clean AccuracyBenign
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| BenignArchitecture=PreActResNet-182026.05 | 70.54 | 14.27 | 0 | 0 | |
| NuATArchitecture=PreActResNet-182026.05 | 65.93 | 27.3 | 15.26 | 9.91 | |
| MultiGradArchitecture=PreActResNet-182026.05 | 61.79 | 42.72 | 16.92 | 15.92 | |
| SORAArchitecture=WideResNet-282026.05 | 60.68 | 49.33 | 47.91 | 45.92 | |
| ELLEArchitecture=PreActResNet-182026.05 | 60.57 | 47.61 | 46.07 | 42.67 | |
| PGD-2Architecture=PreActResNet-182026.05 | 59.4 | 49.15 | 48.25 | 46.75 | |
| SORAArchitecture=PreActResNet-182026.05 | 58.86 | 49.43 | 48.55 | 47.06 | |
| AAERArchitecture=WideResNet-282026.05 | 57.83 | 50.39 | 50 | 48.95 | |
| PGD-10Architecture=PreActResNet-182026.05 | 57.75 | 50.13 | 49.62 | 48.56 | |
| N-FGSMArchitecture=WideResNet-282026.05 | 57.69 | 50.4 | 49.99 | 47.76 | |
| N-FGSMArchitecture=PreActResNet-182026.05 | 57.47 | 49.75 | 49.25 | 48.15 | |
| AAERArchitecture=PreActResNet-182026.05 | 57.47 | 49.75 | 49.25 | 48.15 | |
| ZeroGradArchitecture=PreActResNet-182026.05 | 57.36 | 69.01 | 0.1 | 0.01 | |
| GradAlignArchitecture=PreActResNet-182026.05 | 55.41 | 70.13 | 16.23 | 15.51 | |
| TRADESArchitecture=PreActResNet-182026.05 | 53.43 | 45.3 | 44.85 | 42.71 | |
| FGSM-RSArchitecture=PreActResNet-182026.05 | 52.32 | 80.82 | 0.35 | 0.12 | |
| FGSMArchitecture=PreActResNet-182026.05 | 51.8 | 81.39 | 0.28 | 0.04 | |
| FGSMArchitecture=WideResNet-282026.05 | 46.96 | 80.31 | 0.07 | 0.01 | |
| FGSM-RSArchitecture=WideResNet-282026.05 | 43.32 | 68.66 | 0.11 | 0.01 | |
| ATASArchitecture=PreActResNet-182026.05 | 31.95 | 56.36 | 0.08 | 0 |