Backdoor Defense on ImageNette
0.67AERCert-SSBD
Evaluation results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Cert-SSBDAttack Setting=Four-pixel2025.04 | 0.67 | 94.9 | 86.82 | 77 | 55.22 | 34.52 | 20.22 | 5.76 | 0 | |
| Cert-SSBDAttack Setting=One-pixel2025.04 | 0.64 | 95.2 | 86.36 | 72.5 | 45.08 | 32.1 | 17.36 | 5.08 | 0 | |
| Cert-SSBDAttack Setting=Blending2025.04 | 0.64 | 94.94 | 83.46 | 58.66 | 46.3 | 34.52 | 20.22 | 5.76 | 0 | |
| RABAttack Setting=One-pixel2025.04 | 0.49 | 94.62 | 74.18 | 52.6 | 35.42 | 14.6 | 0 | 0 | 0 | |
| Cert-SSBDAttack Setting=Four-pixel2025.04 | 0.49 | 49 | 42.48 | 36.76 | 26.26 | 19.08 | 11.44 | 4 | 0 | |
| RABAttack Setting=Four-pixel2025.04 | 0.48 | 94.8 | 73.94 | 52.26 | 33.36 | 13.26 | 0 | 0 | 0 | |
| Cert-SSBDAttack Setting=Blending2025.04 | 0.48 | 49.1 | 42.86 | 38.96 | 34.48 | 27.62 | 19.06 | 6.74 | 0 | |
| RABAttack Setting=Blending2025.04 | 0.47 | 94.78 | 74.32 | 51.44 | 33.02 | 12.62 | 0 | 0 | 0 | |
| Cert-SSBDAttack Setting=One-pixel2025.04 | 0.44 | 52.72 | 46.86 | 38.24 | 30.64 | 22.54 | 13.64 | 4.26 | 0 | |
| Cert-SSBDAttack Setting=Four-pixel2025.04 | 0.41 | 56.88 | 49.42 | 39.58 | 28.4 | 20.78 | 11.86 | 3.28 | 0 | |
| Cert-SSBDAttack Setting=Blending2025.04 | 0.36 | 50.58 | 42.02 | 32.24 | 24.02 | 16.58 | 8.92 | 2.7 | 0 | |
| Cert-SSBDAttack Setting=One-pixel2025.04 | 0.36 | 48.7 | 43.96 | 38.06 | 26.66 | 16.58 | 9.48 | 3.42 | 0 | |
| RABAttack Setting=One-pixel2025.04 | 0.27 | 48.4 | 39.78 | 30.3 | 20.3 | 8.22 | 0 | 0 | 0 | |
| RABAttack Setting=Blending2025.04 | 0.27 | 48.72 | 40.14 | 29.62 | 19.02 | 7.16 | 0 | 0 | 0 | |
| RABAttack Setting=Four-pixel2025.04 | 0.26 | 48.68 | 40.1 | 29 | 18.32 | 7.1 | 0 | 0 | 0 | |
| RABAttack Setting=One-pixel2025.04 | 0.01 | 7.76 | 3.88 | 1.68 | 0.04 | 0 | 0 | 0 | 0 | |
| RABAttack Setting=Four-pixel2025.04 | 0.01 | 6.52 | 2.84 | 1.04 | 0.48 | 0 | 0 | 0 | 0 | |
| RABAttack Setting=Blending2025.04 | 0.01 | 6.64 | 3.2 | 1.36 | 0.32 | 0 | 0 | 0 | 0 |