Backdoor Defense on CIFAR-10 0.1% clean data (50 images) (train)
93.73ACC (Badnets)Before (No Defense)
Evaluation Results
| Method | Links | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Before (No Defense)Backbone=ResNet-18, Number of random runs=52021.10 | 93.73 | 94.82 | 93.89 | 94.1 | 93.78 | 93.64 | 99.97 | 100 | 98.49 | 92.88 | 99.94 | 94.26 | |
| No DefenseBackbone=ResNet-18, Clean Data Images=502021.10 | 93.73 | 94.82 | 93.89 | 94.1 | 93.78 | 93.64 | 99.97 | 100 | 98.49 | 92.88 | 99.94 | 94.26 | |
| FPBackbone=ResNet-18, Number of random runs=52021.10 | 90.69 | 91.29 | 90.74 | 90.26 | 89.27 | 89.96 | 30.71 | 99.95 | 30.82 | 42.38 | 1.35 | 0.13 | |
| Fine-pruning (FP)Backbone=ResNet-18, Clean Data Images=502021.10 | 90.69 | 91.29 | 90.74 | 90.26 | 89.27 | 89.96 | 30.71 | 99.95 | 30.82 | 42.38 | 1.35 | 0.13 | |
| FTBackbone=ResNet-18, Defense Configuration=0.01, Number of random runs=52021.10 | 88.9 | 91.21 | 88.17 | 84.21 | 91.1 | 90 | 82.58 | 100 | 1.24 | 14.69 | 50.25 | 12.59 | |
| Fine-tuning (FT)Backbone=ResNet-18, ratio=0.01, Clean Data Images=502021.10 | 88.9 | 91.21 | 88.17 | 84.21 | 91.1 | 90 | 82.58 | 100 | 1.24 | 14.69 | 50.25 | 12.59 | |
| ANPBackbone=ResNet-18, Number of random runs=52021.10 | 86.62 | 88.12 | 88.54 | 85.66 | 86.73 | 89.54 | 0.45 | 5.7 | 1.84 | 1.43 | 0.23 | 2.85 | |
| Adversarial Neuron Pruning (ANP)Backbone=ResNet-18, Clean Data Images=502021.10 | 86.62 | 88.12 | 88.54 | 85.66 | 86.73 | 89.54 | 0.45 | 5.7 | 1.84 | 1.43 | 0.23 | 2.85 | |
| FTBackbone=ResNet-18, Defense Configuration=0.02, Number of random runs=52021.10 | 82.06 | 86.79 | 75.28 | 60.45 | 88.11 | 84.37 | 16.27 | 99.99 | 2.29 | 3.78 | 22.71 | 0.07 | |
| Fine-tuning (FT)Backbone=ResNet-18, ratio=0.02, Clean Data Images=502021.10 | 82.06 | 86.79 | 75.28 | 60.45 | 88.11 | 84.37 | 16.27 | 99.99 | 2.29 | 3.78 | 22.71 | 0.07 | |
| MCRBackbone=ResNet-18, Defense Configuration=0.3, Number of random runs=52021.10 | 80.21 | 81.35 | 79.1 | 82.53 | 77.33 | 85.88 | 33.7 | 43.57 | 52.23 | 53.17 | 12.77 | 1.1 | |
| Model Cleanse and Repair (MCR)Backbone=ResNet-18, parameter=0.3, Clean Data Images=502021.10 | 80.21 | 81.35 | 79.1 | 82.53 | 77.33 | 85.88 | 33.7 | 43.57 | 52.23 | 53.17 | 12.77 | 1.1 |