Attribution Robustness on Fashion-MNIST (test)
80.62Top-K IntersectionTRADES+IGR
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| TRADES+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 80.62 | 0.6565 | |
| TRADES+AdvAATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 79.15 | 0.5794 | |
| AdvAATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 73.62 | 0.581 | |
| SSRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 60.4 | 0.4321 | |
| MARTAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 58.57 | 0.4262 | |
| MART+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 57.97 | 0.4317 | |
| IG-SUM-NORMAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 57.27 | 0.4097 | |
| TRADESAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 57.01 | 0.2582 | |
| AT+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 53.36 | 0.375 | |
| IG-NORMAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 51.84 | 0.3446 | |
| StandardAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 42.83 | 0.1884 | |
| ATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 32 | 0.1516 | |
| ARTAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 31.71 | 0.2079 |