Backdoor Defense on GTSRB SIG attack
98.56AccuracyInfected Model (Before)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Infected Model (Before)Clean extra dataset=No, Attack Setting=All-to-one2022.02 | 98.56 | 95.81 | |
| PBEClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 94.05 | 1.78 | |
| Neural CleanseClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 93.4 | 1.32 | |
| ANPClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 93.32 | 3.65 | |
| NADClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 92.94 | 6.9 | |
| Fine-tuningClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 91.63 | 36.3 | |
| PBEClean extra dataset=No, Attack Setting=All-to-one2022.02 | 90.31 | 7.59 | |
| Fine-pruningClean extra dataset=Yes, Attack Setting=All-to-one2022.02 | 89.53 | 93.26 |