Backdoor Attack in Dataset Condensation on CIFAR10
73.92Clean Trigger Accuracy (CTA)Naive
Evaluation results
| Method | Links | ||
|---|---|---|---|
| NaiveCondensation Strategy=IDM, Backbone=AlexNetBN2026.03 | 73.92 | 10.44 | |
| SIMPLEAttack Type=SIMPLE, Condensation Method=IDM, Backbone=AlexNetBN2026.03 | 72.7 | 14.6 | |
| SimpleCondensation Strategy=IDM, Backbone=AlexNetBN2026.03 | 72.68 | 14.56 | |
| InkDropCondensation Strategy=IDM, Backbone=AlexNetBN2026.03 | 72.63 | 100 | |
| SNEAKDOORAttack Type=SNEAKDOOR, Condensation Method=IDM, Backbone=AlexNetBN2026.03 | 70 | 94.6 | |
| DOORPINGCondensation Method=IDM2026.03 | 65.4 | 16.5 | |
| RELAXCondensation Method=IDM2026.03 | 65.3 | 52.2 | |
| SIMPLECondensation Method=IDM2026.03 | 65.2 | 14.2 | |
| SNEAKDOORCondensation Method=IDM2026.03 | 64.3 | 97.5 | |
| DoorpingCondensation Strategy=IDM, Backbone=AlexNetBN2026.03 | 63.87 | 100 | |
| SNEAKDOORCondensation Method=DM2026.03 | 62.6 | 98.9 | |
| DOORPINGCondensation Method=DM2026.03 | 62.1 | 98.8 | |
| NaiveCondensation Strategy=DAM, Backbone=AlexNetBN2026.03 | 60.89 | 9.64 | |
| NaiveCondensation Strategy=DM, Backbone=AlexNetBN2026.03 | 60.77 | 9.28 | |
| SNEAKDOORAttack Type=SNEAKDOOR, Condensation Method=DAM, Backbone=AlexNetBN2026.03 | 60.6 | 72.1 | |
| InkDropCondensation Strategy=DM, Backbone=AlexNetBN2026.03 | 60.37 | 97.73 | |
| RelaxCondensation Strategy=DM, Backbone=AlexNetBN2026.03 | 60.3 | 70.4 | |
| RELAXAttack Type=RELAX, Condensation Method=DM, Backbone=AlexNetBN2026.03 | 60.3 | 70.4 | |
| SNEAKDOORAttack Type=SNEAKDOOR, Condensation Method=DM, Backbone=AlexNetBN2026.03 | 59.5 | 94.7 | |
| InkDropCondensation Strategy=DAM, Backbone=AlexNetBN2026.03 | 59.41 | 99.67 | |
| SNEAKDOORCondensation Method=DAM2026.03 | 59.1 | 97.9 | |
| RELAXAttack Type=RELAX, Condensation Method=DAM, Backbone=AlexNetBN2026.03 | 59.1 | 97.8 | |
| RelaxCondensation Strategy=DAM, Backbone=AlexNetBN2026.03 | 59.05 | 97.76 | |
| SimpleCondensation Strategy=DAM, Backbone=AlexNetBN2026.03 | 58.43 | 20.4 | |
| SIMPLECondensation Method=DM2026.03 | 58.4 | 59 | |
| SIMPLEAttack Type=SIMPLE, Condensation Method=DAM, Backbone=AlexNetBN2026.03 | 58.4 | 20.4 | |
| SIMPLEAttack Type=SIMPLE, Condensation Method=DM, Backbone=AlexNetBN2026.03 | 58.1 | 18.3 | |
| SimpleCondensation Strategy=DM, Backbone=AlexNetBN2026.03 | 58.07 | 18.28 | |
| RELAXCondensation Method=DM2026.03 | 57.4 | 100 | |
| DOORPINGCondensation Method=DC2026.03 | 56.6 | 100 | |
| DoorpingCondensation Strategy=DAM, Backbone=AlexNetBN2026.03 | 56.46 | 100 | |
| RELAXCondensation Method=DAM2026.03 | 55.9 | 100 | |
| SNEAKDOORCondensation Method=DC2026.03 | 53.7 | 99.6 | |
| SIMPLECondensation Method=DAM2026.03 | 53.7 | 67.4 | |
| DOORPINGCondensation Method=DAM2026.03 | 53.1 | 100 | |
| RELAXCondensation Method=DC2026.03 | 51.1 | 100 | |
| DoorpingCondensation Strategy=DM, Backbone=AlexNetBN2026.03 | 50.46 | 100 | |
| SIMPLECondensation Method=DC2026.03 | 49.7 | 65.7 | |
| RELAXAttack Type=RELAX, Condensation Method=IDM, Backbone=AlexNetBN2026.03 | 25.2 | 63.6 | |
| RelaxCondensation Strategy=IDM, Backbone=AlexNetBN2026.03 | 25.15 | 63.56 | |
| SNEAKDOORAttack Type=SNEAKDOOR, Condensation Method=DC, Backbone=AlexNetBN2026.03 | 22.2 | 0.3 | |
| SIMPLEAttack Type=SIMPLE, Condensation Method=DC, Backbone=AlexNetBN2026.03 | 16.9 | 0 | |
| RELAXAttack Type=RELAX, Condensation Method=DC, Backbone=AlexNetBN2026.03 | 15.2 | 4.7 |