# Backdoor Attack on CIFAR-10 (Image Quality Metrics)

Source: [Backdoor Attack on CIFAR-10 (Image Quality Metrics)](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-image-quality-metrics>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-04-28T07:41:29.615Z

Evaluation of backdoor attack effectiveness on the CIFAR-10 dataset, focusing on image quality metrics such as Attack Success Rate (ASR) and various Peak Signal-to-Noise Ratio (PSNR) measurements.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Backdoor Attack |
| Dataset (including any stated split) | CIFAR-10 |
| Metric | ASR |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 25 of 25 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [ASR](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-image-quality-metrics.md?metric=ASR>): Higher is better; unit: PERCENT.

- [PSNR (\*)](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-image-quality-metrics.md?metric=PSNR%20(*)>): Higher is better; unit: SCALAR.

- [PSNR (°)](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-image-quality-metrics.md?metric=PSNR%20(%C2%B0)>): Higher is better; unit: SCALAR.

- [Delta PSNR](<https://www.sota2.com/research/sota/backdoor-attack-on-cifar-10-image-quality-metrics.md?metric=Delta%20PSNR>): Higher is better; unit: SCALAR.

## Recorded results

| Method | ASR | Result date | Report paper |
| --- | --- | --- | --- |
| SemBugger | 97.19 | Not recorded | 69f03ee555a3c32af89f9ead |
| SemBugger | 96.16 | Not recorded | 69f03ee555a3c32af89f9ead |
| SemBugger | 96.04 | Not recorded | 69f03ee555a3c32af89f9ead |
| SemBugger | 94.44 | Not recorded | 69f03ee555a3c32af89f9ead |
| SemBugger | 94.08 | Not recorded | 69f03ee555a3c32af89f9ead |
| BASS | 91.27 | Not recorded | 69f03ee555a3c32af89f9ead |
| IHTG | 90.11 | Not recorded | 69f03ee555a3c32af89f9ead |
| IHTG | 89.91 | Not recorded | 69f03ee555a3c32af89f9ead |
| IHTG | 89.34 | Not recorded | 69f03ee555a3c32af89f9ead |
| BASS | 89.21 | Not recorded | 69f03ee555a3c32af89f9ead |
| IHTG | 88.45 | Not recorded | 69f03ee555a3c32af89f9ead |
| BASS | 86.87 | Not recorded | 69f03ee555a3c32af89f9ead |
| BASS | 86.62 | Not recorded | 69f03ee555a3c32af89f9ead |
| IHTG | 85.72 | Not recorded | 69f03ee555a3c32af89f9ead |
| BASS | 82.65 | Not recorded | 69f03ee555a3c32af89f9ead |
| SC Trojan | 76.42 | Not recorded | 69f03ee555a3c32af89f9ead |
| SC Trojan | 75.45 | Not recorded | 69f03ee555a3c32af89f9ead |
| SC Trojan | 72.32 | Not recorded | 69f03ee555a3c32af89f9ead |
| SC Trojan | 71.46 | Not recorded | 69f03ee555a3c32af89f9ead |
| SC Trojan | 67.75 | Not recorded | 69f03ee555a3c32af89f9ead |
| Clean | 0 | Not recorded | 69f03ee555a3c32af89f9ead |
| Clean | 0 | Not recorded | 69f03ee555a3c32af89f9ead |
| Clean | 0 | Not recorded | 69f03ee555a3c32af89f9ead |
| Clean | 0 | Not recorded | 69f03ee555a3c32af89f9ead |
| Clean | 0 | Not recorded | 69f03ee555a3c32af89f9ead |

### SemBugger

ASR: 97.19. Result ID: 69f064a147f34ce924d5fa48.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SemCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### SemBugger

ASR: 96.16. Result ID: 69f064a147f34ce924d5fa39.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-f","SNR":"5 dB"}. This record does not assert independent reproduction.

### SemBugger

ASR: 96.04. Result ID: 69f064a147f34ce924d5fa3e.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-q","SNR":"5 dB"}. This record does not assert independent reproduction.

### SemBugger

ASR: 94.44. Result ID: 69f064a147f34ce924d5fa43.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SCAN","SNR":"5 dB"}. This record does not assert independent reproduction.

### SemBugger

ASR: 94.08. Result ID: 69f064a147f34ce924d5fa34.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### BASS

ASR: 91.27. Result ID: 69f064a147f34ce924d5fa3c.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f91e209131cea59b09.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-q","SNR":"5 dB"}. This record does not assert independent reproduction.

### IHTG

ASR: 90.11. Result ID: 69f064a147f34ce924d5fa38.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-f","SNR":"5 dB"}. This record does not assert independent reproduction.

### IHTG

ASR: 89.91. Result ID: 69f064a147f34ce924d5fa33.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### IHTG

ASR: 89.34. Result ID: 69f064a147f34ce924d5fa47.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SemCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### BASS

ASR: 89.21. Result ID: 69f064a147f34ce924d5fa46.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f91e209131cea59b09.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SemCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### IHTG

ASR: 88.45. Result ID: 69f064a147f34ce924d5fa3d.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-q","SNR":"5 dB"}. This record does not assert independent reproduction.

### BASS

ASR: 86.87. Result ID: 69f064a147f34ce924d5fa32.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f91e209131cea59b09.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### BASS

ASR: 86.62. Result ID: 69f064a147f34ce924d5fa37.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f91e209131cea59b09.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-f","SNR":"5 dB"}. This record does not assert independent reproduction.

### IHTG

ASR: 85.72. Result ID: 69f064a147f34ce924d5fa42.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SCAN","SNR":"5 dB"}. This record does not assert independent reproduction.

### BASS

ASR: 82.65. Result ID: 69f064a147f34ce924d5fa41.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72f91e209131cea59b09.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SCAN","SNR":"5 dB"}. This record does not assert independent reproduction.

### SC Trojan

ASR: 76.42. Result ID: 69f064a147f34ce924d5fa40.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa59ed1e209131ce9bb9f2.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SCAN","SNR":"5 dB"}. This record does not assert independent reproduction.

### SC Trojan

ASR: 75.45. Result ID: 69f064a147f34ce924d5fa36.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa59ed1e209131ce9bb9f2.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-f","SNR":"5 dB"}. This record does not assert independent reproduction.

### SC Trojan

ASR: 72.32. Result ID: 69f064a147f34ce924d5fa3b.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa59ed1e209131ce9bb9f2.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-q","SNR":"5 dB"}. This record does not assert independent reproduction.

### SC Trojan

ASR: 71.46. Result ID: 69f064a147f34ce924d5fa31.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa59ed1e209131ce9bb9f2.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### SC Trojan

ASR: 67.75. Result ID: 69f064a147f34ce924d5fa45.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa59ed1e209131ce9bb9f2.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SemCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### Clean

ASR: 0. Result ID: 69f064a147f34ce924d5fa30.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC","SNR":"5 dB"}. This record does not assert independent reproduction.

### Clean

ASR: 0. Result ID: 69f064a147f34ce924d5fa35.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-f","SNR":"5 dB"}. This record does not assert independent reproduction.

### Clean

ASR: 0. Result ID: 69f064a147f34ce924d5fa3a.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"JSCC-q","SNR":"5 dB"}. This record does not assert independent reproduction.

### Clean

ASR: 0. Result ID: 69f064a147f34ce924d5fa3f.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SCAN","SNR":"5 dB"}. This record does not assert independent reproduction.

### Clean

ASR: 0. Result ID: 69f064a147f34ce924d5fa44.

[Reporting paper](<https://www.sota2.com/research/paper/69f03ee555a3c32af89f9ead.md>)

Recorded evaluation configuration: {"Attacking Architecture":"SemCC","SNR":"5 dB"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
