Backdoor Defense on CIFAR-10 BadNet v1 (test)
95.3Clean AccuracyClean retraining
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Clean retrainingType=Upper bound2026.06 | 95.3 | 0.7 | |
| CleanMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 94.6 | 0.72 | |
| Fine-Pruning2026.06 | 94.3 | 20.7 | |
| NAD2026.06 | 94.1 | 10.4 | |
| CleanMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 94.06 | 4.1 | |
| AttackMode=O-Backdoor, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 93.81 | 99.92 | |
| NPD2026.06 | 93.5 | 62.9 | |
| ANPMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 93.44 | 92.02 | |
| No defenseBackbone=ResNet182024.05 | 93.37 | 99.41 | |
| ANPBackbone=ResNet182024.05 | 93.16 | 2.13 | |
| FSTMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 93.12 | 85.08 | |
| BAUMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.85 | 17.94 | |
| EPMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.84 | 0.98 | |
| PAMMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.58 | 0.94 | |
| I-BAU2026.06 | 92.5 | 25.9 | |
| FSTMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.46 | 0.38 | |
| BTIMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.37 | 100 | |
| EPMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.33 | 1.48 | |
| BTIMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.27 | 4.67 | |
| ANPMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.26 | 1.01 | |
| BANBackbone=ResNet182024.05 | 92.26 | 2.04 | |
| BAUMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 92.17 | 1.23 | |
| SAMMode=O-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 91.53 | 2.69 | |
| PAMMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 91.49 | 1.46 | |
| SAMMode=P-Robustness, Backbone=ResNet-50, Poisoning Rate=5%2024.10 | 91.39 | 66.87 | |
| InstantForget2026.06 | 89.4 | 0.7 |