# Backdoor Defense on CIFAR-10 LC DenseNet-161 (test) Source: [Backdoor Defense on CIFAR-10 LC DenseNet-161 (test)]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:39:17.096Z Evaluation of backdoor defense mechanisms on the CIFAR-10 test set specifically against the LC attack trigger, tested using the DenseNet-161 architecture. Metrics include Clean Accuracy (C-Acc) and Attack Success Rate (ASR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Backdoor Defense | | Dataset (including any stated split) | CIFAR-10 LC DenseNet-161 (test) | | Metric | Clean Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 17 of 17 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Clean Accuracy](): Higher is better; unit: PERCENT. - [Attack Success Rate](): Higher is better; unit: PERCENT. ## Recorded results | Method | Clean Accuracy | Result date | Report paper | | --- | --- | --- | --- | | Clean | 90.17 | Not recorded | 68fa753e1e209131cea66bbb | | Attack | 90.13 | Not recorded | 68fa753e1e209131cea66bbb | | ANP | 90.04 | Not recorded | 68fa753e1e209131cea66bbb | | ANP | 89.45 | Not recorded | 68fa753e1e209131cea66bbb | | Clean | 89.41 | Not recorded | 68fa753e1e209131cea66bbb | | EP | 88.94 | Not recorded | 68fa753e1e209131cea66bbb | | BAU | 88.84 | Not recorded | 68fa753e1e209131cea66bbb | | EP | 88.59 | Not recorded | 68fa753e1e209131cea66bbb | | BAU | 88.02 | Not recorded | 68fa753e1e209131cea66bbb | | BTI | 87.93 | Not recorded | 68fa753e1e209131cea66bbb | | SAM | 87.79 | Not recorded | 68fa753e1e209131cea66bbb | | PAM | 87.7 | Not recorded | 68fa753e1e209131cea66bbb | | BTI | 87.67 | Not recorded | 68fa753e1e209131cea66bbb | | FST | 87.47 | Not recorded | 68fa753e1e209131cea66bbb | | FST | 87.4 | Not recorded | 68fa753e1e209131cea66bbb | | SAM | 87.3 | Not recorded | 68fa753e1e209131cea66bbb | | PAM | 86.44 | Not recorded | 68fa753e1e209131cea66bbb | ### Clean Clean Accuracy: 90.17. Result ID: 699384653a6c314849168666. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### Attack Clean Accuracy: 90.13. Result ID: 699384653a6c314849168665. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Backdoor","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### ANP Clean Accuracy: 90.04. Result ID: 699384653a6c31484916866a. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### ANP Clean Accuracy: 89.45. Result ID: 699384653a6c31484916866b. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### Clean Clean Accuracy: 89.41. Result ID: 699384653a6c314849168667. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### EP Clean Accuracy: 88.94. Result ID: 699384653a6c314849168669. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BAU Clean Accuracy: 88.84. Result ID: 699384653a6c31484916866d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### EP Clean Accuracy: 88.59. Result ID: 699384653a6c314849168668. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BAU Clean Accuracy: 88.02. Result ID: 699384653a6c31484916866c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BTI Clean Accuracy: 87.93. Result ID: 699384653a6c314849168672. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### SAM Clean Accuracy: 87.79. Result ID: 699384653a6c31484916866e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### PAM Clean Accuracy: 87.7. Result ID: 699384653a6c314849168674. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BTI Clean Accuracy: 87.67. Result ID: 699384653a6c314849168673. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### FST Clean Accuracy: 87.47. Result ID: 699384653a6c314849168671. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### FST Clean Accuracy: 87.4. Result ID: 699384653a6c314849168670. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### SAM Clean Accuracy: 87.3. Result ID: 699384653a6c31484916866f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### PAM Clean Accuracy: 86.44. Result ID: 699384653a6c314849168675. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"DenseNet-161","Poisoning Rate":"5%"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.