Adversarial Robustness on CIFAR-10 (Clean, AA, Robust Gap)
89.85Clean AccuracyHICAT
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| HICATBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 89.85 | 58.11 | 2.12 | |
| DHATBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 88.94 | 56.92 | 2.48 | |
| HICATBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 88.4 | 55.63 | 0.71 | |
| SGLRBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 87.72 | 53.77 | 11.25 | |
| DHATBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 87.62 | 54.42 | 0.83 | |
| UIATBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 86.73 | 54.59 | 9.41 | |
| SGLRBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 86.35 | 51.27 | 2.75 | |
| CFABackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 85.81 | 53.35 | 8.94 | |
| UIATBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 85.1 | 52.09 | 3.04 | |
| CFABackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 84.97 | 50.85 | 2.98 | |
| MARTBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 84.26 | 51.95 | 8.73 | |
| AWPBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 84.1 | 53.29 | 6.11 | |
| FSRBackbone=WRN28-10, Data Augmentation=Diffusion-generated samples2026.06 | 83.88 | 53.03 | 7.05 | |
| AWPBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 83.78 | 50.79 | 2.03 | |
| MARTBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 83.45 | 49.45 | 2.91 | |
| FSRBackbone=ResNet-18, Data Augmentation=Diffusion-generated samples2026.06 | 83.19 | 50.53 | 2.35 | |
| HICATBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 81.62 | 53.24 | 1.72 | |
| SGLRBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 80.62 | 50.73 | 5 | |
| SGLRBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 80.39 | 50.55 | 5.21 | |
| DHATBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 79.94 | 51.92 | 1.85 | |
| HICATBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 78.93 | 53.1 | 1.64 | |
| UIATBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 78.42 | 51 | 2.99 | |
| FSRBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 78.38 | 50.59 | 3.97 | |
| CFABackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 77.88 | 50.64 | 4.27 | |
| DHATBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 77.85 | 51.81 | 1.92 | |
| FSRBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 77.28 | 50.02 | 4.73 | |
| AWPBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 76.74 | 50.46 | 4.07 | |
| CFABackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 76.7 | 49.97 | 4.46 | |
| MARTBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 76.05 | 49.59 | 5.91 | |
| AWPBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 75.59 | 50.8 | 3.91 | |
| UIATBackbone=Inception-V3, Perturbation (epsilon)=8/2552026.06 | 75.19 | 51.23 | 3.7 | |
| MARTBackbone=ResNet-50, Perturbation (epsilon)=8/2552026.06 | 75.05 | 49.05 | 4.57 | |
| HICATBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 71.18 | 47.03 | 1.21 | |
| SGLRBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 70.9 | 45.04 | 3.94 | |
| CFABackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 70.45 | 45.53 | 4.66 | |
| DHATBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 70.01 | 46.4 | 1.34 | |
| FSRBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 69.59 | 44.9 | 3.3 | |
| UIATBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 68.46 | 45.27 | 3.57 | |
| AWPBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 67.14 | 45.97 | 3.47 | |
| MARTBackbone=VGG-16, Perturbation (epsilon)=8/2552026.06 | 66.72 | 44.27 | 3.6 |