Backdoor Defense on ImageNet200
78.56Backdoor Accuracy (BA)No defense
Evaluation results
| Method | Links | ||
|---|---|---|---|
| No defenseAttack=Bpp, Backbone=ResNet-182024.05 | 78.56 | 99.88 | |
| No defenseAttack=WaNet, Backbone=ResNet-182024.05 | 77.01 | 99.74 | |
| No defenseAttack=IAD, Backbone=ResNet-182024.05 | 76.72 | 99.75 | |
| BANAttack=Bpp, Backbone=ResNet-182024.05 | 72.59 | 2.68 | |
| BANAttack=IAD, Backbone=ResNet-182024.05 | 72.18 | 1.3 | |
| Fine-tuningAttack=Bpp, Backbone=ResNet-182024.05 | 70.89 | 0.82 | |
| BANAttack=WaNet, Backbone=ResNet-182024.05 | 69.95 | 0.58 | |
| Fine-tuningAttack=IAD, Backbone=ResNet-182024.05 | 69.91 | 0.42 | |
| BTI-DBF(U)Attack=Bpp, Backbone=ResNet-182024.05 | 67.02 | 3.1 | |
| Fine-tuningAttack=WaNet, Backbone=ResNet-182024.05 | 66.71 | 0.78 | |
| BTI-DBF(U)Attack=IAD, Backbone=ResNet-182024.05 | 64.33 | 1.24 | |
| BTI-DBF(U)Attack=WaNet, Backbone=ResNet-182024.05 | 63.47 | 1 |