Backdoor Attack on ImageNet 100
100Attack Success Rate (ASR)LoRA-based attack
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| LoRA-based attackBackbone=ViT-B/162026.05 | 100 | 89.3 | — | |
| VIPERBackbone=ViT-B/162026.05 | 100 | 91.44 | — | |
| BadViTBackbone=ViT-B/162026.05 | 99.99 | 90.9 | — | |
| AIBABackbone=ViT-B/162026.05 | 99.98 | 91.02 | — | |
| MarksmanBackbone=ResNet2025.04 | 99.94 | 81.08 | 0.072 | |
| Swarm (VPT-based)Backbone=ViT-B/162026.05 | 99.94 | 83.51 | — | |
| UBABackbone=VGG, Data Augmentation=without2025.04 | 99.9 | 88.28 | 0.0202 | |
| UBABackbone=ResNet, Data Augmentation=without2025.04 | 99.8 | 87.55 | 0.0005 | |
| SFIBABackbone=ResNet, Data Augmentation=without2025.04 | 99.58 | 86.62 | 0.0098 | |
| MarksmanBackbone=VGG2025.04 | 99.48 | 85.68 | 0.0426 | |
| SFIBABackbone=VGG, Data Augmentation=without2025.04 | 99.33 | 89.48 | 0.0082 | |
| SFIBABackbone=VGG, Data Augmentation=with2025.04 | 99.28 | 89.24 | 0.007 | |
| SFIBABackbone=ResNet, Data Augmentation=with2025.04 | 99.24 | 86.74 | 0.0154 | |
| WaNetBackbone=ViT-B/162026.05 | 98.9 | 90.56 | — | |
| BE-based attackBackbone=ViT-B/162026.05 | 98.58 | 90.2 | — | |
| TrojViTBackbone=ViT-B/162026.05 | 98.52 | 79.22 | — | |
| BadNetBackbone=ViT-B/162026.05 | 80.12 | 84.28 | — | |
| One-to-NBackbone=ResNet2025.04 | 11.64 | 82.22 | 0.0606 | |
| One-to-NBackbone=VGG2025.04 | 10.13 | 83.44 | 0.065 |