Backdoor Certification on MNIST (test)
1.81AERCert-SSBD
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Cert-SSBDAttack Setting=BadNets, Radius=02025.04 | 1.81 | 100 | |
| Cert-SSBDAttack Setting=BadNets, Radius=0.252025.04 | 1.81 | 100 | |
| Cert-SSBDAttack Setting=BadNets, Radius=0.52025.04 | 1.81 | 100 | |
| Cert-SSBDAttack Setting=BadNets, Radius=0.752025.04 | 1.81 | 100 | |
| Cert-SSBDAttack Setting=BadNets, Radius=1.02025.04 | 1.81 | 100 | |
| Cert-SSBDAttack Setting=BadNets, Radius=1.252025.04 | 1.81 | 99.57 | |
| Cert-SSBDAttack Setting=BadNets, Radius=1.52025.04 | 1.81 | 99.15 | |
| Cert-SSBDAttack Setting=BadNets, Radius=1.752025.04 | 1.81 | 98.49 | |
| Cert-SSBDAttack Setting=SIG, Radius=02025.04 | 1.74 | 99.95 | |
| Cert-SSBDAttack Setting=SIG, Radius=0.252025.04 | 1.74 | 99.86 | |
| Cert-SSBDAttack Setting=SIG, Radius=0.52025.04 | 1.74 | 99.86 | |
| Cert-SSBDAttack Setting=SIG, Radius=0.752025.04 | 1.74 | 99.67 | |
| Cert-SSBDAttack Setting=SIG, Radius=1.02025.04 | 1.74 | 99.34 | |
| Cert-SSBDAttack Setting=SIG, Radius=1.252025.04 | 1.74 | 98.82 | |
| Cert-SSBDAttack Setting=SIG, Radius=1.52025.04 | 1.74 | 96.97 | |
| Cert-SSBDAttack Setting=SIG, Radius=1.752025.04 | 1.74 | 88.09 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=02025.04 | 1.67 | 99.95 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.252025.04 | 1.67 | 99.86 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.52025.04 | 1.67 | 99.72 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=0.752025.04 | 1.67 | 99.53 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=12025.04 | 1.67 | 99.11 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.252025.04 | 1.67 | 97.87 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.52025.04 | 1.67 | 92.11 | |
| Cert-SSBDAttack Setting=One-pixel, Radius=1.752025.04 | 1.67 | 11.11 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=02025.04 | 1.66 | 99.91 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.252025.04 | 1.66 | 99.81 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.52025.04 | 1.66 | 99.76 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=0.752025.04 | 1.66 | 99.57 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=12025.04 | 1.66 | 99.11 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.252025.04 | 1.66 | 98.35 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.52025.04 | 1.66 | 92.77 | |
| Cert-SSBDAttack Setting=Four-pixel, Radius=1.752025.04 | 1.66 | 5.21 | |
| Cert-SSBDAttack Setting=Blending, Radius=02025.04 | 1.66 | 99.95 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.252025.04 | 1.66 | 99.91 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.52025.04 | 1.66 | 99.77 | |
| Cert-SSBDAttack Setting=Blending, Radius=0.752025.04 | 1.66 | 99.72 | |
| Cert-SSBDAttack Setting=Blending, Radius=12025.04 | 1.66 | 99.05 | |
| Cert-SSBDAttack Setting=Blending, Radius=1.252025.04 | 1.66 | 97.97 | |
| Cert-SSBDAttack Setting=Blending, Radius=1.52025.04 | 1.66 | 92.25 | |
| Cert-SSBDAttack Setting=Blending, Radius=1.752025.04 | 1.66 | 16.17 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=02025.04 | 1.65 | 100 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=0.252025.04 | 1.65 | 99.86 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=0.52025.04 | 1.65 | 99.81 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=0.752025.04 | 1.65 | 99.62 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=1.02025.04 | 1.65 | 99.2 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=1.252025.04 | 1.65 | 98.53 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=1.52025.04 | 1.65 | 93.52 | |
| Cert-SSBDAttack Setting=Adaptive Trigger, Radius=1.752025.04 | 1.65 | 41.7 | |
| RABAttack Setting=BadNets, Radius=02025.04 | 1.56 | 99.95 | |
| RABAttack Setting=BadNets, Radius=0.252025.04 | 1.56 | 99.86 | |
| RABAttack Setting=BadNets, Radius=0.52025.04 | 1.56 | 99.76 | |
| RABAttack Setting=BadNets, Radius=0.752025.04 | 1.56 | 99.67 | |
| RABAttack Setting=BadNets, Radius=1.02025.04 | 1.56 | 99.43 | |
| RABAttack Setting=BadNets, Radius=1.252025.04 | 1.56 | 98.82 | |
| RABAttack Setting=BadNets, Radius=1.52025.04 | 1.56 | 74.8 | |
| RABAttack Setting=BadNets, Radius=1.752025.04 | 1.56 | 0 | |
| Cert-SSBDAttack Setting=WaNet, Radius=02025.04 | 1.56 | 100 | |
| Cert-SSBDAttack Setting=WaNet, Radius=0.252025.04 | 1.56 | 99.86 | |
| Cert-SSBDAttack Setting=WaNet, Radius=0.52025.04 | 1.56 | 99.81 | |
| Cert-SSBDAttack Setting=WaNet, Radius=0.752025.04 | 1.56 | 99.34 | |
| Cert-SSBDAttack Setting=WaNet, Radius=1.02025.04 | 1.56 | 98.91 | |
| Cert-SSBDAttack Setting=WaNet, Radius=1.252025.04 | 1.56 | 97.07 | |
| Cert-SSBDAttack Setting=WaNet, Radius=1.52025.04 | 1.56 | 78.16 | |
| Cert-SSBDAttack Setting=WaNet, Radius=1.752025.04 | 1.56 | 39.67 | |
| RABAttack Setting=SIG, Radius=02025.04 | 1.54 | 99.95 | |
| RABAttack Setting=SIG, Radius=0.252025.04 | 1.54 | 99.86 | |
| RABAttack Setting=SIG, Radius=0.52025.04 | 1.54 | 99.76 | |
| RABAttack Setting=SIG, Radius=0.752025.04 | 1.54 | 99.67 | |
| RABAttack Setting=SIG, Radius=1.02025.04 | 1.54 | 99.48 | |
| RABAttack Setting=SIG, Radius=1.252025.04 | 1.54 | 93.48 | |
| RABAttack Setting=SIG, Radius=1.52025.04 | 1.54 | 0 | |
| RABAttack Setting=SIG, Radius=1.752025.04 | 1.54 | 0 | |
| RABAttack Setting=Adaptive Trigger, Radius=02025.04 | 1.51 | 99.95 | |
| RABAttack Setting=Adaptive Trigger, Radius=0.252025.04 | 1.51 | 99.86 | |
| RABAttack Setting=Adaptive Trigger, Radius=0.52025.04 | 1.51 | 99.76 | |
| RABAttack Setting=Adaptive Trigger, Radius=0.752025.04 | 1.51 | 99.57 | |
| RABAttack Setting=Adaptive Trigger, Radius=1.02025.04 | 1.51 | 99.2 | |
| RABAttack Setting=Adaptive Trigger, Radius=1.252025.04 | 1.51 | 98.44 | |
| RABAttack Setting=Adaptive Trigger, Radius=1.52025.04 | 1.51 | 79.43 | |
| RABAttack Setting=Adaptive Trigger, Radius=1.752025.04 | 1.51 | 0 | |
| RABAttack Setting=WaNet, Radius=02025.04 | 1.49 | 100 | |
| RABAttack Setting=WaNet, Radius=0.252025.04 | 1.49 | 99.91 | |
| RABAttack Setting=WaNet, Radius=0.52025.04 | 1.49 | 99.67 | |
| RABAttack Setting=WaNet, Radius=0.752025.04 | 1.49 | 99.57 | |
| RABAttack Setting=WaNet, Radius=1.02025.04 | 1.49 | 98.96 | |
| RABAttack Setting=WaNet, Radius=1.252025.04 | 1.49 | 50.83 | |
| RABAttack Setting=WaNet, Radius=1.52025.04 | 1.49 | 0 | |
| RABAttack Setting=WaNet, Radius=1.752025.04 | 1.49 | 0 | |
| RABAttack Setting=One-pixel, Radius=02025.04 | 1.46 | 99.95 | |
| RABAttack Setting=One-pixel, Radius=0.252025.04 | 1.46 | 99.81 | |
| RABAttack Setting=One-pixel, Radius=0.52025.04 | 1.46 | 99.62 | |
| RABAttack Setting=One-pixel, Radius=0.752025.04 | 1.46 | 99.48 | |
| RABAttack Setting=One-pixel, Radius=12025.04 | 1.46 | 98.77 | |
| RABAttack Setting=One-pixel, Radius=1.252025.04 | 1.46 | 95.93 | |
| RABAttack Setting=One-pixel, Radius=1.52025.04 | 1.46 | 61.94 | |
| RABAttack Setting=One-pixel, Radius=1.752025.04 | 1.46 | 0 | |
| RABAttack Setting=Blending, Radius=02025.04 | 1.46 | 99.91 | |
| RABAttack Setting=Blending, Radius=0.252025.04 | 1.46 | 99.86 | |
| RABAttack Setting=Blending, Radius=0.52025.04 | 1.46 | 99.67 | |
| RABAttack Setting=Blending, Radius=0.752025.04 | 1.46 | 99.34 |