Backdoor Attack Detection on iNaturalist
87.1TPRRPP
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RPPBackdoor attack type=WaNet, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 87.1 | 12.8 | |
| RPPBackdoor attack type=Blend, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 82.2 | 17.2 | |
| RPPBackdoor attack type=Badnets, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 81.1 | 18.7 | |
| RPPBackdoor attack type=ISSBA, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 78.5 | 24.3 | |
| RPPBackdoor attack type=SIG, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 77 | 10.9 | |
| RPPBackdoor attack type=Trojan, n (calibration size)=100, alpha (significance level)=0.05, sigma (noise scale)=1.02026.01 | 74.8 | 15.6 |