Backdoor Attack on FMNIST
100ASRDoorping
Evaluation results
| Method | Links | ||
|---|---|---|---|
| DoorpingCondensation Method=DAM, Condensation Backbone=ConvNet2026.03 | 100 | 81.26 | |
| RelaxCondensation Method=DM, Condensation Backbone=ConvNet2026.03 | 100 | 82.79 | |
| RelaxCondensation Method=IDM, Condensation Backbone=ConvNet2026.03 | 100 | 87.5 | |
| RelaxCondensation Method=DAM, Condensation Backbone=ConvNet2026.03 | 100 | 87.37 | |
| DoorpingCondensation Method=IDM, Condensation Backbone=ConvNet2026.03 | 99.76 | 88.41 | |
| InkDropCondensation Method=DM, Condensation Backbone=ConvNet2026.03 | 99.72 | 88.83 | |
| InkDropCondensation Method=DAM, Condensation Backbone=ConvNet2026.03 | 98.89 | 88.41 | |
| InkDropCondensation Method=IDM, Condensation Backbone=ConvNet2026.03 | 98.56 | 84.17 | |
| Krumattack=Sybil2024.07 | 97.1 | — | |
| Krumattack=Alternate2024.07 | 95.3 | — | |
| FLTrustattack=Alternate2024.07 | 91.5 | — | |
| FLTrustattack=BadNet2024.07 | 83.6 | — | |
| FedAvgattack=BadNet2024.07 | 82.8 | — | |
| Medianattack=Sybil2024.07 | 81.3 | — | |
| Medianattack=BadNet2024.07 | 81.1 | — | |
| Trimattack=BadNet2024.07 | 80.4 | — | |
| Medianattack=Alternate2024.07 | 78.6 | — | |
| Trimattack=Sybil2024.07 | 73.6 | — | |
| Trimattack=Alternate2024.07 | 71.4 | — | |
| Krumattack=BadNet2024.07 | 68 | — | |
| FedAvgattack=Sybil2024.07 | 67.8 | — | |
| FedAvgattack=Alternate2024.07 | 66.7 | — | |
| Krumattack=IBA2024.07 | 66.2 | — | |
| CONTRAattack=BadNet2024.07 | 56.6 | — | |
| Medianattack=IBA2024.07 | 56.6 | — | |
| MESASattack=BadNet2024.07 | 55.7 | — | |
| Trimattack=DBA2024.07 | 53.9 | — | |
| FLTrustattack=DBA2024.07 | 50.7 | — | |
| FLTrustattack=IBA2024.07 | 48 | — | |
| FreqFedattack=BadNet2024.07 | 47 | — | |
| FedAvgattack=DBA2024.07 | 45.2 | — | |
| FLTrustattack=Sybil2024.07 | 44.8 | — | |
| Medianattack=DBA2024.07 | 42.8 | — | |
| MESASattack=Alternate2024.07 | 35.9 | — | |
| FedAvgattack=IBA2024.07 | 35.5 | — | |
| CONTRAattack=DBA2024.07 | 34.2 | — | |
| Trimattack=Neurotoxin2024.07 | 31.9 | — | |
| Krumattack=Neurotoxin2024.07 | 25 | — | |
| CONTRAattack=IBA2024.07 | 21.2 | — | |
| Trimattack=IBA2024.07 | 19.5 | — | |
| Medianattack=Neurotoxin2024.07 | 19 | — | |
| SimpleCondensation Method=DM, Condensation Backbone=ConvNet2026.03 | 17.84 | 86.82 | |
| AGSDattack=IBA2024.07 | 17 | — | |
| FLTrustattack=Neurotoxin2024.07 | 16.9 | — | |
| SimpleCondensation Method=IDM, Condensation Backbone=ConvNet2026.03 | 15.88 | 87.86 | |
| CONTRAattack=Alternate2024.07 | 15.4 | — | |
| SimpleCondensation Method=DAM, Condensation Backbone=ConvNet2026.03 | 15.08 | 88.01 | |
| FedAvgattack=Neurotoxin2024.07 | 11.4 | — | |
| FreqFedattack=IBA2024.07 | 11 | — | |
| CONTRAattack=Neurotoxin2024.07 | 10.4 | — | |
| FreqFedattack=Sybil2024.07 | 10.3 | — | |
| MESASattack=IBA2024.07 | 10.3 | — | |
| NaiveCondensation Method=DAM, Condensation Backbone=ConvNet2026.03 | 9.8 | 88.11 | |
| AGSDattack=Neurotoxin2024.07 | 9.7 | — | |
| NaiveCondensation Method=IDM, Condensation Backbone=ConvNet2026.03 | 9.32 | 88.67 | |
| DoorpingCondensation Method=DM, Condensation Backbone=ConvNet2026.03 | 9.28 | 87.64 | |
| NaiveCondensation Method=DM, Condensation Backbone=ConvNet2026.03 | 9 | 88.68 | |
| MESASattack=Neurotoxin2024.07 | 8.1 | — | |
| FreqFedattack=Neurotoxin2024.07 | 7.6 | — | |
| Krumattack=DBA2024.07 | 7.1 | — | |
| AGSDattack=Sybil2024.07 | 5.3 | — | |
| CONTRAattack=Sybil2024.07 | 3.9 | — | |
| AGSDattack=BadNet2024.07 | 3.7 | — | |
| FreqFedattack=DBA2024.07 | 3.2 | — | |
| MESASattack=Sybil2024.07 | 2.6 | — | |
| FreqFedattack=Alternate2024.07 | 1.9 | — | |
| MESASattack=DBA2024.07 | 1.7 | — | |
| AGSDattack=DBA2024.07 | 1 | — | |
| AGSDattack=Alternate2024.07 | 0.4 | — | |
| BoBaattack=Neurotoxin2024.07 | 0.3 | — | |
| BoBaattack=Alternate2024.07 | 0.1 | — | |
| BoBaattack=Sybil2024.07 | 0.1 | — | |
| BoBaattack=IBA2024.07 | 0.1 | — | |
| BoBaattack=BadNet2024.07 | 0 | — | |
| BoBaattack=DBA2024.07 | 0 | — |