Attribution Adversarial Sensitivity on STL10 96x96 (test)
0.91VGradSharp. Aware Min. (SAM)
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Sharp. Aware Min. (SAM)Architecture=ViT-Tiny (d=8)2026.05 | 0.91 | — | 0.64 | 0.67 | 0.19 | 0.61 | |
| Post-hoc Act. Reg. (PAR)Architecture=ViT-Tiny (d=8)2026.05 | 0.77 | — | 0.42 | 0.51 | 0.1 | 0.77 | |
| No Regularization (Base)Architecture=ViT-Tiny (d=8)2026.05 | 0.69 | — | 0.39 | 0.38 | 0.09 | 0.45 | |
| Ante-hoc Act. Reg. (AAR)Architecture=ViT-Tiny (d=8)2026.05 | 0.69 | — | 0.42 | 0.6 | 0.23 | 0.69 | |
| Explicit Curv. Reg. (ECR)Architecture=ViT-Tiny (d=8)2026.05 | 0.65 | — | 0.4 | 0.39 | 0.17 | 0.43 | |
| Implicit Curv. Reg. (ICR†)Architecture=ViT-Tiny (d=8)2026.05 | 0.65 | — | 0.47 | 0.53 | 0.18 | 0.45 | |
| Implicit Curv. Reg. (ICR†)Architecture=ViT-Tiny (unnormalized kernelized attention + GELU)2026.05 | 0.53 | — | 0.34 | 0.04 | 0.3 | 0.53 | |
| Adv. Trainig Reg. (ATR)Architecture=ViT-Tiny (d=8)2026.05 | 0.52 | — | 0.26 | 0.3 | 0.14 | 0.41 | |
| No Regularization (Base)Architecture=ResNet342026.05 | 0.27 | — | 0.15 | 0.09 | 0.1 | 0.05 | |
| Explicit Curv. Reg. (ECR)Architecture=ResNet342026.05 | 0.2 | — | 0.1 | 0.12 | 0.04 | 0.13 | |
| Adv. Trainig Reg. (ATR)Architecture=ResNet342026.05 | 0.18 | — | 0.12 | 0.04 | 0.08 | 0.04 | |
| Sharp. Aware Min. (SAM)Architecture=ResNet342026.05 | 0.16 | — | 0.11 | 0.08 | 0.04 | 0.1 | |
| Implicit Curv. Reg. (ICR)Architecture=ResNet342026.05 | 0.16 | — | 0.09 | 0.07 | 0.04 | 0.12 | |
| Ante-hoc Act. Reg. (AAR)Architecture=ResNet342026.05 | 0.15 | — | 0.15 | 0.09 | 0.07 | 0.15 | |
| Post-hoc Act. Reg. (PAR)Architecture=ResNet342026.05 | 0.14 | — | 0.14 | 0.07 | 0.08 | 0.14 |