Adversarial Robustness on Tiny-ImageNet (test)
42.76Natural Accuracy (Best)PGD-10 AT
Evaluation results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| PGD-10 ATAdversarial Step Type=Multi-step, Backbone=PreAct ResNet18, Subspace=none2021.11 | 42.76 | 19.84 | 46.57 | 14.18 | 15.7 | — | — | — | — | — | — | |
| PGD-10 AT (Sub-AT Variant)Adversarial Step Type=Multi-step, Backbone=PreAct ResNet18, Subspace=PGD-10 AT, Perturbation radius (epsilon)=16/2552021.11 | 40.99 | 21.87 | 41.27 | 21.6 | 8.6 | — | — | — | — | — | — | |
| PGD-10 AT (Sub-AT Variant)Adversarial Step Type=Multi-step, Backbone=PreAct ResNet18, Subspace=PGD-10 AT, Perturbation radius (epsilon)=12/2552021.11 | 40.88 | 21.42 | 42.27 | 21.41 | 8.6 | — | — | — | — | — | — | |
| PGD-10 Sub-ATAdversarial Step Type=Multi-step, Backbone=PreAct ResNet18, Subspace=PGD-10 AT2021.11 | 40.82 | 20.52 | 40.78 | 19.55 | 12.1 | — | — | — | — | — | — | |
| Fast Sub-ATAdversarial Step Type=Single-step, Backbone=PreAct ResNet18, Subspace=Fast AT, Perturbation radius (epsilon)=8/2552021.11 | 39.38 | 16.75 | 39.19 | 16.17 | 1.3 | — | — | — | — | — | — | |
| Fast Sub-ATAdversarial Step Type=Single-step, Backbone=PreAct ResNet18, Subspace=Fast AT, Perturbation radius (epsilon)=12/2552021.11 | 38.11 | 18.52 | 38.306 | 18.13 | 1.3 | — | — | — | — | — | — | |
| Fast Sub-ATAdversarial Step Type=Single-step, Backbone=PreAct ResNet18, Subspace=Fast AT, Perturbation radius (epsilon)=16/2552021.11 | 37.32 | 18.79 | 37.2 | 18.22 | 1.3 | — | — | — | — | — | — | |
| Fast ATAdversarial Step Type=Single-step, Backbone=PreAct ResNet18, Subspace=none2021.11 | 28.79 | 11.9 | 42.54 | 0 | 3.5 | — | — | — | — | — | — | |
| Adversarial PoisoningDefense=PGD-AT, Defense budget=8/255, Backbone=ResNet-182022.01 | — | — | — | — | — | 49.52 | 22.93 | 20.01 | 19.91 | 18.75 | 16.83 | |
| Adversarial PoisoningDefense budget=8/2552022.01 | — | — | — | — | — | 49.52 | 22.93 | 20.01 | 19.91 | 18.75 | 16.83 | |
| Hypocritical PerturbationDefense=PGD-AT, Defense budget=8/255, Backbone=ResNet-182022.01 | — | — | — | — | — | 55.92 | 20.21 | 15.61 | 15.26 | 14.99 | 12.53 | |
| Hypocritical PerturbationDefense budget=8/2552022.01 | — | — | — | — | — | 55.92 | 20.21 | 15.61 | 15.26 | 14.99 | 12.53 | |
| None (clean)Defense=PGD-AT, Defense budget=8/255, Backbone=ResNet-182022.01 | — | — | — | — | — | 49.34 | 25.67 | 22.99 | 22.86 | 20.67 | 18.54 | |
| None (clean)Defense budget=8/2552022.01 | — | — | — | — | — | 49.34 | 25.67 | 22.99 | 22.86 | 20.67 | 18.54 |