Adversarial Robustness (Rejection) on CIFAR-10 PGD-100, l_2, 128/255 (test)
70.24TPR-95Rectified Rejection
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Rectified RejectionAT=PGD-AT, Rejector=RR, Backbone=ResNet-182021.05 | 70.24 | 0.796 | |
| Con.AT=PGD-AT, Rejector=Con., Backbone=ResNet-182021.05 | 69.1 | 0.783 | |
| Rectified RejectionAT=TRADES, Rejector=RR, Backbone=ResNet-182021.05 | 68.97 | 0.793 | |
| Rectified RejectionAT=CCAT, Rejector=RR, Backbone=ResNet-182021.05 | 67.98 | 0.785 | |
| Con.AT=TRADES, Rejector=Con., Backbone=ResNet-182021.05 | 67.88 | 0.781 | |
| EBDAT=PGD-AT, Rejector=EBD, Backbone=ResNet-182021.05 | 67.82 | 0.774 | |
| SNetAT=PGD-AT, Rejector=SNet, Backbone=ResNet-182021.05 | 67.49 | 0.741 | |
| Con.AT=CCAT, Rejector=Con., Backbone=ResNet-182021.05 | 67.07 | 0.772 | |
| GMMAT=PGD-AT, Rejector=GMM, Backbone=ResNet-182021.05 | 66.54 | 0.635 | |
| LIDAT=PGD-AT, Rejector=LID, Backbone=ResNet-182021.05 | 66.07 | 0.663 | |
| Margin (CARL)AT=CARL, Rejector=Margin, Backbone=ResNet-182021.05 | 65.98 | 0.645 | |
| GDA*AT=PGD-AT, Rejector=GDA*, Backbone=ResNet-182021.05 | 65.71 | 0.605 | |
| KDAT=PGD-AT, Rejector=KD, Backbone=ResNet-182021.05 | 64.6 | 0.599 | |
| GDAAT=PGD-AT, Rejector=GDA, Backbone=ResNet-182021.05 | 64.13 | 0.459 | |
| Margin (ATRO)AT=ATRO, Rejector=Margin, Backbone=ResNet-182021.05 | 41.52 | 0.655 |