Backdoor Defense on GTSRB 1% poison rate (test)
98Clean AccuracyNo Defense
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| No DefenseAggregation=Average2026.01 | 98 | 79 | — | — | |
| RefineAggregation=Average2026.01 | 97.7 | 11 | 0.4 | 68 | |
| ScaleUpAggregation=Average2026.01 | 97.3 | 46.8 | 0.7 | 32.2 | |
| BDMAEAggregation=Average2026.01 | 96.8 | 35.8 | 1.3 | 43.2 | |
| ZIPAggregation=Average2026.01 | 96.2 | 25.2 | 1.8 | 53.8 | |
| LPPAggregation=Average2026.01 | 95.7 | 20.4 | 2.4 | 58.6 | |
| PRISMAttack=BPP, Attack Category=Dynamic2026.01 | 95.7 | 0 | — | — | |
| PRISMAttack=IAB, Attack Category=Dynamic2026.01 | 95.7 | 0 | — | — | |
| PRISMAttack=BadNet, Attack Category=Classic2026.01 | 95.6 | 0 | — | — | |
| TeCoAggregation=Average2026.01 | 95.2 | 47.8 | 2.8 | 31.3 | |
| PRISMAttack=Blend, Attack Category=Classic2026.01 | 93.6 | 2.5 | — | — | |
| CLPAggregation=Average2026.01 | 93.5 | 26.3 | 4.5 | 52.7 | |
| PRISMFMB Variant=One-to-One2026.01 | 93.4 | 0 | — | — | |
| PRISMAggregation=Average2026.01 | 93.4 | 3.6 | 4.7 | 75.4 | |
| PRISMAttack=WaNet, Attack Category=Dynamic2026.01 | 93 | 0.8 | — | — | |
| PRISMAttack=LC, Attack Category=Clean Label2026.01 | 93 | 9.9 | — | — | |
| PRISMFMB Variant=All-to-One2026.01 | 92.9 | 2.2 | — | — | |
| PRISMAttack=CTRL, Attack Category=Clean Label2026.01 | 92.7 | 6.7 | — | — | |
| PRISMAttack=SIG, Attack Category=Clean Label2026.01 | 92.7 | 0.8 | — | — | |
| PRISMAttack=FLIP, Attack Category=Clean Image2026.01 | 92.2 | 4.8 | — | — | |
| No DefenseFMB Variant=One-to-One2026.01 | 92 | 85 | — | — | |
| PRISMAttack=GCB, Attack Category=Clean Image2026.01 | 91.9 | 6.7 | — | — | |
| No DefenseFMB Variant=All-to-One2026.01 | 91.5 | 77.7 | — | — | |
| EnsembleProtocol=Naive VLM Baseline, Aggregation=Average2026.01 | 91.2 | 28.8 | 6.8 | 50.3 | |
| PRISMAttack=SSBA, Attack Category=Dynamic2026.01 | 90.9 | 7.6 | — | — | |
| C&CAggregation=Average2026.01 | 81.8 | 28.2 | 16.2 | 50.8 | |
| Zero-shotProtocol=Naive VLM Baseline, Aggregation=Average2026.01 | 25.1 | 0.1 | 72.9 | 78.9 |