Adversarial Robustness (Rejection) on CIFAR-10 PGD-100, l_inf, 8/255 (test)
58.52TPR-95Rectified Rejection
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Rectified RejectionAT=TRADES, Rejector=RR, Backbone=ResNet-182021.05 | 58.52 | 0.786 | |
| Rectified RejectionAT=PGD-AT, Rejector=RR, Backbone=ResNet-182021.05 | 58.21 | 0.776 | |
| Con.AT=TRADES, Rejector=Con., Backbone=ResNet-182021.05 | 57.62 | 0.774 | |
| Con.AT=PGD-AT, Rejector=Con., Backbone=ResNet-182021.05 | 57.3 | 0.768 | |
| EBDAT=PGD-AT, Rejector=EBD, Backbone=ResNet-182021.05 | 57.04 | 0.763 | |
| SNetAT=PGD-AT, Rejector=SNet, Backbone=ResNet-182021.05 | 56.41 | 0.73 | |
| LIDAT=PGD-AT, Rejector=LID, Backbone=ResNet-182021.05 | 54.92 | 0.66 | |
| GMMAT=PGD-AT, Rejector=GMM, Backbone=ResNet-182021.05 | 54.35 | 0.607 | |
| Rectified RejectionAT=CCAT, Rejector=RR, Backbone=ResNet-182021.05 | 53.89 | 0.662 | |
| GDA*AT=PGD-AT, Rejector=GDA*, Backbone=ResNet-182021.05 | 53.88 | 0.589 | |
| KDAT=PGD-AT, Rejector=KD, Backbone=ResNet-182021.05 | 53.12 | 0.588 | |
| GDAAT=PGD-AT, Rejector=GDA, Backbone=ResNet-182021.05 | 52.67 | 0.461 | |
| Con.AT=CCAT, Rejector=Con., Backbone=ResNet-182021.05 | 51.68 | 0.637 | |
| Margin (CARL)AT=CARL, Rejector=Margin, Backbone=ResNet-182021.05 | 51.67 | 0.539 | |
| Margin (ATRO)AT=ATRO, Rejector=Margin, Backbone=ResNet-182021.05 | 36.04 | 0.654 |