Backdoor Attack Stealthiness Evaluation on CIFAR10
1SSIMNo Attack
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| No Attack2026.03 | 1 | — | — | — | — | — | — | |
| DSBA2026.03 | 0.9918 | 36.8312 | 0.0042 | 0.973 | 14.425 | — | — | |
| CAAmask pattern=8 × 8 checkerboard2026.03 | 0.965 | 37.4 | — | — | — | 52.4 | — | |
| INACTIVE2024.05 | 0.9633 | 35.8649 | 0.009 | 0.969 | 16.32 | — | — | |
| IMPERATIVE2026.03 | 0.9542 | 35.7435 | 0.0088 | 0.924 | 16.357 | — | — | |
| BadNet2026.03 | 0.916 | 21.76 | — | — | — | 8.3 | — | |
| CTRL2026.03 | 0.9125 | 31.4783 | 0.0006 | 0.876 | 71.145 | — | — | |
| CTRL2024.05 | 0.9025 | 32.4098 | 0.0003 | 0.865 | 71.138 | — | — | |
| SSLBKD2024.05 | 0.8737 | 16.2414 | 0.0964 | 0.891 | 118.32 | — | — | |
| SSLBKD2026.03 | 0.8725 | 16.5314 | 0.0942 | 0.886 | 115.422 | — | — | |
| BLTO2024.05 | 0.8417 | 29.6756 | 0.0094 | 0.95 | 36.385 | — | — | |
| Badencoder/DRUPE2024.05 | 0.8355 | 14.111 | 0.0769 | 0.82 | 53.363 | — | — | |
| BadEncoder2026.03 | 0.8217 | 14.1311 | 0.0743 | 0.837 | 54.165 | — | — | |
| WaNet2026.03 | 0.7761 | 15.2713 | 0.0751 | 0.654 | 97.996 | — | — | |
| WaNet2024.05 | 0.7704 | 14.2372 | 0.0743 | 0.662 | 98.092 | — | — | |
| SNEAKDOORCondensation Method=IDM2026.03 | 0.77 | 74.88 | — | — | — | — | 0 | |
| SNEAKDOORCondensation Method=DAM2026.03 | 0.74 | 74.4 | — | — | — | — | 0 | |
| SimpleCondensation Method=DM2026.03 | 0.69 | 60.98 | — | — | — | — | 0.0001 | |
| SimpleCondensation Method=IDM2026.03 | 0.69 | 61.05 | — | — | — | — | 0.0001 | |
| SimpleCondensation Method=DC2026.03 | 0.66 | 60.74 | — | — | — | — | 0.0001 | |
| SimpleCondensation Method=DAM2026.03 | 0.64 | 60.85 | — | — | — | — | 0.0001 | |
| SNEAKDOORCondensation Method=DM2026.03 | 0.61 | 73.94 | — | — | — | — | 0.0001 | |
| Ins-Xpro22024.05 | 0.5981 | 17.9173 | 0.0443 | 0.817 | 35.084 | — | — | |
| Ins-Xpro22026.03 | 0.5842 | 18.9145 | 0.0432 | 0.823 | 36.128 | — | — | |
| Ins-Kelvin2024.05 | 0.4955 | 16.1925 | 0.14 | 0.677 | 96.449 | — | — | |
| Ins-Kelvin2026.03 | 0.4877 | 17.1355 | 0.1502 | 0.633 | 96.233 | — | — | |
| SNEAKDOORCondensation Method=DC2026.03 | 0.46 | 70.48 | — | — | — | — | 0.0001 | |
| naiveCondensation Method=DC2026.03 | 0.18 | 64.46 | — | — | — | — | 0.0004 | |
| naiveCondensation Method=DM2026.03 | 0.15 | 63.67 | — | — | — | — | 0.0004 | |
| naiveCondensation Method=IDM2026.03 | 0.14 | 64.23 | — | — | — | — | 0.0003 | |
| naiveCondensation Method=DAM2026.03 | 0.13 | 62.99 | — | — | — | — | 0.0005 | |
| POIENC2024.05 | 0.1214 | 11.2787 | 0.1587 | 0.597 | 172.22 | — | — | |
| DoorpingCondensation Method=IDM2026.03 | 0.1 | 59.23 | — | — | — | — | 0.0002 | |
| DoorpingCondensation Method=DM2026.03 | 0.08 | 59.85 | — | — | — | — | 0.0002 | |
| DoorpingCondensation Method=DAM2026.03 | 0.08 | 59.52 | — | — | — | — | 0.0002 | |
| DoorpingCondensation Method=DC2026.03 | 0.05 | 59.22 | — | — | — | — | 0.0002 | |
| RelaxCondensation Method=DC2026.03 | 0.04 | 61.37 | — | — | — | — | 0.0002 | |
| RelaxCondensation Method=IDM2026.03 | 0.02 | 61.18 | — | — | — | — | 0.0002 | |
| RelaxCondensation Method=DAM2026.03 | 0.02 | 61.19 | — | — | — | — | 0.0002 | |
| RelaxCondensation Method=DM2026.03 | -0.01 | 60.97 | — | — | — | — | 0.0002 |