# Backdoor Attack on CIFAR-10 (ASR, MSE, SSIM)

Source: [Backdoor Attack on CIFAR-10 (ASR, MSE, SSIM)](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-asr-mse-ssim>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-06-23T12:33:01.105Z

Evaluation of backdoor attack effectiveness on the CIFAR-10 dataset, focusing on Attack Success Rate (ASR) and image quality metrics (MSE, SSIM).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Backdoor Attack |
| Dataset (including any stated split) | CIFAR-10 |
| Metric | ASR |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 18 of 18 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [ASR](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-asr-mse-ssim.md?metric=ASR>): Higher is better; unit: PERCENT.

- [MSE](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-asr-mse-ssim.md?metric=MSE>): Lower is better; unit: SCALAR.

- [SSIM](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-asr-mse-ssim.md?metric=SSIM>): Higher is better; unit: PERCENT.

## Recorded results

| Method | ASR | Result date | Report paper |
| --- | --- | --- | --- |
| TooBad | 99 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 98 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 96 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 94 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 93 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 93 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 74 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 68 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 38 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 16 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 7 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 3 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 2 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 1 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 0 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 0 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 0 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 0 | Not recorded | 6a3a1392206542251d7c769c |

### TooBad

ASR: 99. Result ID: 6a3a7ce3fbc373592c38f11b.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"10%"}. This record does not assert independent reproduction.

### TooBad

ASR: 98. Result ID: 6a3a7ce3fbc373592c38f11a.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"5%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 96. Result ID: 6a3a7ce3fbc373592c38f10f.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"10%"}. This record does not assert independent reproduction.

### TooBad

ASR: 94. Result ID: 6a3a7ce3fbc373592c38f118.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"2%"}. This record does not assert independent reproduction.

### TooBad

ASR: 93. Result ID: 6a3a7ce3fbc373592c38f117.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"1%"}. This record does not assert independent reproduction.

### TooBad

ASR: 93. Result ID: 6a3a7ce3fbc373592c38f119.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"3%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 74. Result ID: 6a3a7ce3fbc373592c38f115.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"10%"}. This record does not assert independent reproduction.

### TooBad

ASR: 68. Result ID: 6a3a7ce3fbc373592c38f116.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison Rate":"0.2%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 38. Result ID: 6a3a7ce3fbc373592c38f10e.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"5%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 16. Result ID: 6a3a7ce3fbc373592c38f114.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"5%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 7. Result ID: 6a3a7ce3fbc373592c38f113.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"3%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 3. Result ID: 6a3a7ce3fbc373592c38f10d.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"3%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 2. Result ID: 6a3a7ce3fbc373592c38f112.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"2%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 1. Result ID: 6a3a7ce3fbc373592c38f10c.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"2%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 0. Result ID: 6a3a7ce3fbc373592c38f10a.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"0.2%"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 0. Result ID: 6a3a7ce3fbc373592c38f10b.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison Rate":"1%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 0. Result ID: 6a3a7ce3fbc373592c38f110.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"0.2%"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 0. Result ID: 6a3a7ce3fbc373592c38f111.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison Rate":"1%"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
