Adversarial Robustness on CIFAR-10 (Clean, PGD, C&W, AA Evaluation)
85.92Clean AccuracyHICAT
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| HICATBackbone=WRN28-10, Attack perturbation budget (epsilon)=8/2552026.06 | 85.92 | 61.87 | 61.42 | 61.11 | 56.59 | 54.56 | 2.86 | |
| MARTBackbone=WRN28-10, Attack perturbation budget (epsilon)=8/2552026.06 | 82.99 | 56.25 | 55.48 | 55.45 | 52.26 | 50.67 | 9.52 | |
| HICATBackbone=ResNet-50, Attack perturbation budget (epsilon)=8/2552026.06 | 81.62 | — | — | — | — | 53.24 | 1.72 | |
| HICATBackbone=Inception-V3, Attack perturbation budget (epsilon)=8/2552026.06 | 78.93 | — | — | — | — | 53.1 | 1.64 | |
| MARTBackbone=Inception-V3, Attack perturbation budget (epsilon)=8/2552026.06 | 76.05 | — | — | — | — | 49.59 | 5.91 | |
| MARTBackbone=ResNet-50, Attack perturbation budget (epsilon)=8/2552026.06 | 75.05 | — | — | — | — | 49.05 | 4.57 | |
| HICATBackbone=VGG-16, Attack perturbation budget (epsilon)=8/2552026.06 | 71.18 | — | — | — | — | 47.03 | 1.21 | |
| MARTBackbone=VGG-16, Attack perturbation budget (epsilon)=8/2552026.06 | 66.72 | — | — | — | — | 44.27 | 3.6 |