Backdoor Attack Robustness on MSTAR (test)
99.37ASRFedAvg
Evaluation results
| Method | Links | |
|---|---|---|
| FedAvgAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 99.37 | |
| FedAvgAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 99.1 | |
| FedAvgAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 98.34 | |
| FedAvgAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 98.21 | |
| FedAvgAttack frequency=Persistent, Data distribution=alpha=12025.12 | 97.8 | |
| FedAvgAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 97.62 | |
| FedAvgAttack frequency=Persistent, Data distribution=IID2025.12 | 96.46 | |
| FedAvgAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 95.61 | |
| FedAvgAttack frequency=One-shot, Data distribution=alpha=12025.12 | 94.04 | |
| FedAvgAttack frequency=One-shot, Data distribution=IID2025.12 | 92.24 | |
| KrumAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 77.44 | |
| KrumAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 75.83 | |
| MedianAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 71.12 | |
| KrumAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 70.72 | |
| MedianAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 69.46 | |
| KrumAttack frequency=Persistent, Data distribution=alpha=12025.12 | 68.16 | |
| MedianAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 65.07 | |
| MedianAttack frequency=Persistent, Data distribution=alpha=12025.12 | 62.74 | |
| KrumAttack frequency=Persistent, Data distribution=IID2025.12 | 62.56 | |
| KrumAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 57.26 | |
| MedianAttack frequency=Persistent, Data distribution=IID2025.12 | 56.55 | |
| KrumAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 56.37 | |
| MedianAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 52.42 | |
| KrumAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 52.15 | |
| MedianAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 50.85 | |
| KrumAttack frequency=One-shot, Data distribution=alpha=12025.12 | 50.31 | |
| FSBAAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 47.71 | |
| MedianAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 46.46 | |
| FSBAAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 46.37 | |
| KrumAttack frequency=One-shot, Data distribution=IID2025.12 | 45.42 | |
| MedianAttack frequency=One-shot, Data distribution=alpha=12025.12 | 44.53 | |
| RRPDAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 42.83 | |
| FSBAAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 42.56 | |
| RRPDAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 41.35 | |
| FSBAAttack frequency=Persistent, Data distribution=alpha=12025.12 | 40.83 | |
| MedianAttack frequency=One-shot, Data distribution=IID2025.12 | 39.24 | |
| RRPDAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 37.43 | |
| RRPDAttack frequency=Persistent, Data distribution=alpha=12025.12 | 35.52 | |
| FSBAAttack frequency=Persistent, Data distribution=IID2025.12 | 35.35 | |
| FedIDAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 33.74 | |
| EH-ATAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 32.91 | |
| FedIDAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 32.57 | |
| FSBAAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 31.96 | |
| EH-ATAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 31.65 | |
| FSBAAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 31.13 | |
| LockdownAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 30.26 | |
| RRPDAttack frequency=Persistent, Data distribution=IID2025.12 | 30.17 | |
| FedIDAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 29.91 | |
| LockdownAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 29.17 | |
| EH-ATAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 28.74 | |
| FedIDAttack frequency=Persistent, Data distribution=alpha=12025.12 | 28.65 | |
| FSBAAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 27.87 | |
| EH-ATAttack frequency=Persistent, Data distribution=alpha=12025.12 | 27.43 | |
| RRPDAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 27.26 | |
| LockdownAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 26.48 | |
| FSBAAttack frequency=One-shot, Data distribution=alpha=12025.12 | 26.43 | |
| RRPDAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 26.43 | |
| LockdownAttack frequency=Persistent, Data distribution=alpha=12025.12 | 25.13 | |
| FedIDAttack frequency=Persistent, Data distribution=IID2025.12 | 24.78 | |
| RRPDAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 23.57 | |
| EH-ATAttack frequency=Persistent, Data distribution=IID2025.12 | 22.96 | |
| RRPDAttack frequency=One-shot, Data distribution=alpha=12025.12 | 22.26 | |
| FSBAAttack frequency=One-shot, Data distribution=IID2025.12 | 22.17 | |
| FedIDAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 21.3 | |
| LockdownAttack frequency=Persistent, Data distribution=IID2025.12 | 21.22 | |
| FedIDAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 20.65 | |
| EH-ATAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 20.57 | |
| EH-ATAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 19.83 | |
| LockdownAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 18.83 | |
| FedIDAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 18.78 | |
| RRPDAttack frequency=One-shot, Data distribution=IID2025.12 | 18.48 | |
| LockdownAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 18.04 | |
| FedIDAttack frequency=One-shot, Data distribution=alpha=12025.12 | 17.91 | |
| EH-ATAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 17.91 | |
| EH-ATAttack frequency=One-shot, Data distribution=alpha=12025.12 | 16.96 | |
| LockdownAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 16.22 | |
| FedIDAttack frequency=One-shot, Data distribution=IID2025.12 | 15.39 | |
| LockdownAttack frequency=One-shot, Data distribution=alpha=12025.12 | 15.35 | |
| EH-ATAttack frequency=One-shot, Data distribution=IID2025.12 | 14.17 | |
| LockdownAttack frequency=One-shot, Data distribution=IID2025.12 | 12.65 | |
| NADAFDAttack frequency=Persistent, Data distribution=alpha=0.052025.12 | 9.96 | |
| NADAFDAttack frequency=Persistent, Data distribution=alpha=0.12025.12 | 9.91 | |
| NADAFDAttack frequency=Persistent, Data distribution=alpha=0.52025.12 | 9.26 | |
| NADAFDAttack frequency=Persistent, Data distribution=alpha=12025.12 | 8.87 | |
| NADAFDAttack frequency=Persistent, Data distribution=IID2025.12 | 7.48 | |
| NADAFDAttack frequency=One-shot, Data distribution=alpha=0.052025.12 | 6.91 | |
| NADAFDAttack frequency=One-shot, Data distribution=alpha=0.12025.12 | 6.57 | |
| NADAFDAttack frequency=One-shot, Data distribution=alpha=0.52025.12 | 5.65 | |
| NADAFDAttack frequency=One-shot, Data distribution=alpha=12025.12 | 5.26 | |
| NADAFDAttack frequency=One-shot, Data distribution=IID2025.12 | 4.17 |