Attribution Robustness on MNIST (test)
56.13Top-K IntersectionTRADES+IGR
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| TRADES+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 56.13 | 0.4537 | |
| TRADES+AdvAATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 52.04 | 0.4315 | |
| AdvAATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 51.74 | 0.3791 | |
| IG-SUM-NORMAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 41.53 | 0.224 | |
| SSRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 38.77 | 0.165 | |
| MART+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 37.34 | 0.1854 | |
| TRADESAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 36.37 | 0.2127 | |
| IG-NORMAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 36.13 | 0.1562 | |
| ATAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 34.35 | 0.1846 | |
| AT+IGRAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 33.4 | 0.1582 | |
| MARTAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 32.5 | 0.1261 | |
| StandardAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 32.21 | 0.0955 | |
| ARTAttack Method=IFIA, Attack Steps=200, epsilon=0.3, k=100, Backbone=Simple CNN2022.05 | 30.38 | 0.1439 |