Backdoor Attack on MNIST (test)
99.89Classification Accuracy (C-Acc)WaveAttack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| WaveAttackpoisoning_rate=1%, defense=No defense2026.05 | 99.89 | 99.97 | |
| WaveAttackpoisoning_rate=1%, defense=FST2026.05 | 99.71 | 0.13 | |
| WaveAttackpoisoning_rate=0.5%, defense=FT-init2026.05 | 99.71 | 2.89 | |
| WaveAttackpoisoning_rate=0.5%, defense=FST2026.05 | 99.71 | 0.16 | |
| BppAttackpoisoning_rate=0.5%, defense=No defense2026.05 | 99.58 | 9.87 | |
| BppAttackpoisoning_rate=1%, defense=No defense2026.05 | 99.47 | 14.03 | |
| WaveAttackpoisoning_rate=5%, defense=FT-init2026.05 | 99.34 | 3.33 | |
| WaveAttackpoisoning_rate=1%, defense=FT-init2026.05 | 99.24 | 3.37 | |
| WaveAttackpoisoning_rate=5%, defense=No defense2026.05 | 99.17 | 99.74 | |
| SSBApoisoning_rate=1%, defense=No defense2026.05 | 99.14 | 100 | |
| Blendedpoisoning_rate=5%, defense=No defense2026.05 | 99.09 | 99.98 | |
| Adapt-Blendpoisoning_rate=0.5%, defense=No defense2026.05 | 99.07 | 92.83 | |
| BadNetpoisoning_rate=5%, defense=No defense2026.05 | 99.02 | 100 | |
| Blendedpoisoning_rate=0.5%, defense=No defense2026.05 | 99.02 | 99.97 | |
| SSBApoisoning_rate=0.5%, defense=No defense2026.05 | 99.02 | 99.99 | |
| BadNetpoisoning_rate=0.5%, defense=No defense2026.05 | 99.01 | 96.12 | |
| SSBApoisoning_rate=5%, defense=No defense2026.05 | 98.98 | 100 | |
| WaveAttackpoisoning_rate=0.5%, defense=No defense2026.05 | 98.98 | 99.92 | |
| BadNetpoisoning_rate=1%, defense=No defense2026.05 | 98.96 | 96.71 | |
| Blendedpoisoning_rate=1%, defense=No defense2026.05 | 98.91 | 100 | |
| Adapt-Blendpoisoning_rate=5%, defense=No defense2026.05 | 98.91 | 99.21 | |
| DSApoisoning_rate=1%, defense=No defense2026.05 | 98.9 | 100 | |
| BppAttackpoisoning_rate=5%, defense=No defense2026.05 | 98.83 | 96.4 | |
| DSApoisoning_rate=5%, defense=No defense2026.05 | 98.83 | 100 | |
| WaveAttackpoisoning_rate=5%, defense=FST2026.05 | 98.69 | 0.17 | |
| WaveAttackpoisoning_rate=1%, defense=FE-tuning2026.05 | 98.69 | 0.17 | |
| DSApoisoning_rate=0.5%, defense=No defense2026.05 | 98.68 | 100 | |
| WaveAttackpoisoning_rate=5%, defense=FE-tuning2026.05 | 98.59 | 0.13 | |
| WaveAttackpoisoning_rate=0.5%, defense=FE-tuning2026.05 | 98.54 | 0.12 | |
| BppAttackpoisoning_rate=1%, defense=FST2026.05 | 98.37 | 0.02 | |
| BppAttackpoisoning_rate=1%, defense=FT-init2026.05 | 98.27 | 1.03 | |
| SSBApoisoning_rate=1%, defense=FST2026.05 | 98.14 | 0 | |
| LIRAdefense=No defense2026.05 | 98.14 | 100 | |
| BppAttackpoisoning_rate=1%, defense=FE-tuning2026.05 | 98.12 | 0.07 | |
| Blendedpoisoning_rate=0.5%, defense=FT-init2026.05 | 98.06 | 0.08 | |
| BppAttackpoisoning_rate=5%, defense=FST2026.05 | 97.84 | 0.41 | |
| BppAttackpoisoning_rate=0.5%, defense=FT-init2026.05 | 97.81 | 0.01 | |
| BppAttackpoisoning_rate=0.5%, defense=FST2026.05 | 97.61 | 0.01 | |
| Blendedpoisoning_rate=1%, defense=FST2026.05 | 97.6 | 0.08 | |
| BadNetpoisoning_rate=1%, defense=FE-tuning2026.05 | 97.59 | 2.93 | |
| BppAttackpoisoning_rate=5%, defense=FT-init2026.05 | 97.58 | 1.42 | |
| BadNetpoisoning_rate=1%, defense=FT-init2026.05 | 97.48 | 0.31 | |
| BadNetpoisoning_rate=5%, defense=FT-init2026.05 | 97.46 | 0.01 | |
| BppAttackpoisoning_rate=0.5%, defense=FE-tuning2026.05 | 97.43 | 0.02 | |
| SSBApoisoning_rate=0.5%, defense=FT-init2026.05 | 97.38 | 0.76 | |
| BadNetpoisoning_rate=0.5%, defense=FT-init2026.05 | 97.34 | 0.05 | |
| Adapt-Blendpoisoning_rate=1%, defense=No defense2026.05 | 97.24 | 96.31 | |
| BppAttackpoisoning_rate=5%, defense=FE-tuning2026.05 | 97.21 | 0.23 | |
| Adapt-Blendpoisoning_rate=1%, defense=FST2026.05 | 97.14 | 0.21 | |
| DSApoisoning_rate=5%, defense=FT-init2026.05 | 97.04 | 99.02 | |
| SSBApoisoning_rate=0.5%, defense=FST2026.05 | 97.02 | 0 | |
| Adapt-Blendpoisoning_rate=1%, defense=FT-init2026.05 | 97.02 | 0.14 | |
| Blendedpoisoning_rate=1%, defense=FT-init2026.05 | 97 | 0 | |
| SSBApoisoning_rate=5%, defense=FT-init2026.05 | 96.89 | 0.04 | |
| SSBApoisoning_rate=0.5%, defense=FE-tuning2026.05 | 96.88 | 0 | |
| LIRAdefense=FST2026.05 | 96.83 | 5.41 | |
| BadNetpoisoning_rate=5%, defense=FST2026.05 | 96.82 | 0 | |
| Adapt-Blendpoisoning_rate=0.5%, defense=FT-init2026.05 | 96.81 | 0.04 | |
| Adapt-Blendpoisoning_rate=5%, defense=FT-init2026.05 | 96.73 | 0.27 | |
| LIRAdefense=FT-init2026.05 | 96.52 | 1.74 | |
| Adapt-Blendpoisoning_rate=1%, defense=FE-tuning2026.05 | 96.48 | 1.31 | |
| Blendedpoisoning_rate=0.5%, defense=FE-tuning2026.05 | 96.4 | 0 | |
| Adapt-Blendpoisoning_rate=5%, defense=FST2026.05 | 96.38 | 1.47 | |
| Blendedpoisoning_rate=1%, defense=FE-tuning2026.05 | 96.35 | 1.75 | |
| SSBApoisoning_rate=5%, defense=FE-tuning2026.05 | 96.24 | 0 | |
| DSApoisoning_rate=1%, defense=FST2026.05 | 96.22 | 96.67 | |
| DSApoisoning_rate=0.5%, defense=FT-init2026.05 | 96.19 | 98.13 | |
| Blendedpoisoning_rate=5%, defense=FST2026.05 | 96.17 | 1.02 | |
| SSBApoisoning_rate=5%, defense=FST2026.05 | 96.11 | 0 | |
| SSBApoisoning_rate=1%, defense=FE-tuning2026.05 | 96.11 | 0.8 | |
| DSApoisoning_rate=1%, defense=FT-init2026.05 | 96.07 | 100 | |
| BadNetpoisoning_rate=5%, defense=FE-tuning2026.05 | 96.03 | 4.32 | |
| DSApoisoning_rate=5%, defense=FST2026.05 | 95.88 | 100 | |
| Adapt-Blendpoisoning_rate=5%, defense=FE-tuning2026.05 | 95.82 | 0.39 | |
| Blendedpoisoning_rate=5%, defense=FT-init2026.05 | 95.45 | 0.5 | |
| DSApoisoning_rate=0.5%, defense=FST2026.05 | 95.03 | 99.97 | |
| BadNetpoisoning_rate=0.5%, defense=FE-tuning2026.05 | 94.83 | 2.03 | |
| Adapt-Blendpoisoning_rate=0.5%, defense=FST2026.05 | 94.72 | 0.06 | |
| SSBApoisoning_rate=1%, defense=FT-init2026.05 | 94.52 | 0 | |
| Blendedpoisoning_rate=0.5%, defense=FST2026.05 | 94.28 | 0.02 | |
| Adapt-Blendpoisoning_rate=0.5%, defense=FE-tuning2026.05 | 94.19 | 0.08 | |
| BadNetpoisoning_rate=1%, defense=FST2026.05 | 94.13 | 0.01 | |
| Blendedpoisoning_rate=5%, defense=FE-tuning2026.05 | 93.74 | 0.69 | |
| DSApoisoning_rate=5%, defense=FE-tuning2026.05 | 92.1 | 32.71 | |
| BadNetpoisoning_rate=0.5%, defense=FST2026.05 | 92.01 | 0 | |
| LIRAdefense=FE-tuning2026.05 | 91.37 | 2.18 | |
| DSApoisoning_rate=1%, defense=FE-tuning2026.05 | 91.04 | 61.29 | |
| DSApoisoning_rate=0.5%, defense=FE-tuning2026.05 | 91 | 52.79 |