Backdoor Certification on CIFAR-10 (test)
0.5AERRAB
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RABAttack Setting=Blending, Radius=02025.04 | 0.5 | 87.4 | |
| RABAttack Setting=Blending, Radius=0.252025.04 | 0.5 | 49.5 | |
| RABAttack Setting=Blending, Radius=0.52025.04 | 0.5 | 24.1 | |
| RABAttack Setting=Blending, Radius=0.752025.04 | 0.5 | 2.65 | |
| RABAttack Setting=One-pixel, Radius=02025.04 | 0.54 | 86.5 | |
| RABAttack Setting=One-pixel, Radius=0.252025.04 | 0.54 | 69.7 | |
| RABAttack Setting=One-pixel, Radius=0.52025.04 | 0.54 | 55.9 | |
| RABAttack Setting=One-pixel, Radius=0.752025.04 | 0.54 | 36.05 | |
| RABAttack Setting=One-pixel, Radius=12025.04 | 0.54 | 14.11 | |
| RABAttack Setting=One-pixel, Radius=1.252025.04 | 0.54 | 2.85 | |
| RABAttack Setting=One-pixel, Radius=1.52025.04 | 0.54 | 0.05 | |
| RABAttack Setting=One-pixel, Radius=1.752025.04 | 0.54 | 0 | |
| RABAttack Setting=Four-pixel, Radius=02025.04 | 0.55 | 87.7 | |
| RABAttack Setting=Four-pixel, Radius=0.252025.04 | 0.55 | 69.7 | |
| RABAttack Setting=Four-pixel, Radius=0.52025.04 | 0.55 | 56.8 | |
| RABAttack Setting=Four-pixel, Radius=0.752025.04 | 0.55 | 38.15 | |
| RABAttack Setting=Four-pixel, Radius=12025.04 | 0.55 | 17.05 | |
| RABAttack Setting=Four-pixel, Radius=1.252025.04 | 0.55 | 3.1 | |
| RABAttack Setting=Four-pixel, Radius=1.52025.04 | 0.55 | 0.05 | |
| RABAttack Setting=Four-pixel, Radius=1.752025.04 | 0.55 | 0 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=02025.04 | 0.62 | 86.55 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.252025.04 | 0.62 | 74.25 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.52025.04 | 0.62 | 61.5 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.752025.04 | 0.62 | 42.35 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=12025.04 | 0.62 | 21.25 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.252025.04 | 0.62 | 5.55 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.52025.04 | 0.62 | 1.8 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.752025.04 | 0.62 | 0.5 | |
| Cert-SSBDAttack Setting=Blending, Radius=02025.04 | 0.67 | 86.9 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.252025.04 | 0.67 | 68.1 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.52025.04 | 0.67 | 50.1 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.752025.04 | 0.67 | 22.35 | |
| Cert-SSBDAttack Setting=Blending, Radius=12025.04 | 0.67 | 22.35 | |
| Cert-SSBDAttack Setting=Blending, Radius=1.252025.04 | 0.67 | 0.45 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=02025.04 | 0.73 | 85.55 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.252025.04 | 0.73 | 74.75 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.52025.04 | 0.73 | 68.35 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.752025.04 | 0.73 | 58.15 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=12025.04 | 0.73 | 39.95 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.252025.04 | 0.73 | 10.65 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.52025.04 | 0.73 | 1.2 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.752025.04 | 0.73 | 0.05 |