Adversarial Robustness (Rejection) on CIFAR-10 PGD-100 (l_inf, ε=16/255) (test)
48.02TPR-95Rectified Rejection
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Rectified RejectionAT=CCAT, Rejector=RR, Backbone=ResNet-182021.05 | 48.02 | 0.688 | |
| Con.AT=CCAT, Rejector=Con., Backbone=ResNet-182021.05 | 45.12 | 0.683 | |
| Rectified RejectionAT=TRADES, Rejector=RR, Backbone=ResNet-182021.05 | 38.06 | 0.748 | |
| Con.AT=TRADES, Rejector=Con., Backbone=ResNet-182021.05 | 37.55 | 0.739 | |
| Rectified RejectionAT=PGD-AT, Rejector=RR, Backbone=ResNet-182021.05 | 35.32 | 0.705 | |
| SNetAT=PGD-AT, Rejector=SNet, Backbone=ResNet-182021.05 | 35.25 | 0.692 | |
| EBDAT=PGD-AT, Rejector=EBD, Backbone=ResNet-182021.05 | 34.96 | 0.69 | |
| Con.AT=PGD-AT, Rejector=Con., Backbone=ResNet-182021.05 | 34.77 | 0.685 | |
| LIDAT=PGD-AT, Rejector=LID, Backbone=ResNet-182021.05 | 32.75 | 0.621 | |
| KDAT=PGD-AT, Rejector=KD, Backbone=ResNet-182021.05 | 31.97 | 0.535 | |
| GMMAT=PGD-AT, Rejector=GMM, Backbone=ResNet-182021.05 | 31.96 | 0.532 | |
| GDA*AT=PGD-AT, Rejector=GDA*, Backbone=ResNet-182021.05 | 31.94 | 0.527 | |
| GDAAT=PGD-AT, Rejector=GDA, Backbone=ResNet-182021.05 | 31.89 | 0.454 | |
| Margin (CARL)AT=CARL, Rejector=Margin, Backbone=ResNet-182021.05 | 30.41 | 0.516 | |
| Margin (ATRO)AT=ATRO, Rejector=Margin, Backbone=ResNet-182021.05 | 21.37 | 0.644 |