Backdoor Attack Evaluation Summary
10Poison RateWaNet
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| WaNetClean-Label=true, Model-Agnostic=false, Data-Free=true, Invisible Trigger=true2025.12 | 10 | — | — | |
| BadNetsClean-Label=false, Model-Agnostic=true, Data-Free=true, Invisible Trigger=false2025.12 | 7 | — | — | |
| BlendedClean-Label=false, Model-Agnostic=true, Data-Free=true, Invisible Trigger=true2025.12 | 7 | — | — | |
| RefoolClean-Label=true, Model-Agnostic=true, Data-Free=true, Invisible Trigger=true2025.12 | 0.57 | — | — | |
| PhysicalBAClean-Label=false, Model-Agnostic=true, Data-Free=true, Invisible Trigger=false2025.12 | 0.5 | — | — | |
| LabelConsistentClean-Label=true, Model-Agnostic=true, Data-Free=false, Invisible Trigger=true2025.12 | 0.4 | — | — | |
| TUAPClean-Label=false, Model-Agnostic=false, Data-Free=true, Invisible Trigger=true2025.12 | 0.3 | — | — | |
| AdaptivePatchClean-Label=false, Model-Agnostic=true, Data-Free=true, Invisible Trigger=false2025.12 | 0.3 | — | — | |
| NarcissusClean-Label=true, Model-Agnostic=false, Data-Free=true, Invisible Trigger=true2025.12 | 0.05 | — | — | |
| EminenceClean-Label=true, Model-Agnostic=true, Data-Free=true, Invisible Trigger=true2025.12 | 0.01 | — | — |