Backdoor Defense on Tiny-ImageNet-200 (test)
53.98BadNets CARNP
Evaluation results
| Method | Links | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RNPBackbone=ResNet-182026.06 | 53.98 | 0.2 | 45.9 | 1.2 | 43.67 | 0 | 48.05 | 0 | 36.52 | 0.1 | 18.98 | 0.2 | 39.34 | 96.82 | 41.42 | 28.66 | 40.98 | 15.89 | |
| CLPBackbone=ResNet-182026.06 | 50.52 | 1.74 | 46.71 | 94.4 | 30.66 | 78.3 | 41.3 | 99.8 | 35.07 | 4.2 | 35.24 | 1.4 | 48.45 | 98.15 | 36.2 | 100 | 40.51 | 59.74 | |
| No DefenseBackbone=ResNet-182026.06 | 48.8 | 99.08 | 50.08 | 100 | 45.42 | 99.9 | 49.8 | 99.9 | 40.53 | 100 | 40.5 | 99.8 | 51.8 | 96.14 | 50.68 | 100 | 47.2 | 99.35 | |
| EPBackbone=ResNet-182026.06 | 48.56 | 0.44 | 49.76 | 8.2 | 44.23 | 1.4 | 48.63 | 92.8 | 40.01 | 0.3 | 39.78 | 0.3 | 50.12 | 96.52 | 48.24 | 99.96 | 46.16 | 37.49 | |
| ANPBackbone=ResNet-182026.06 | 46.28 | 0.18 | 47.66 | 17.8 | 41.44 | 65.2 | 47.17 | 20.2 | 40.53 | 1.1 | 39.45 | 2.8 | 48.03 | 91.83 | 48.24 | 98.8 | 44.85 | 37.23 | |
| NCBackbone=ResNet-182026.06 | 45.86 | 1.02 | 47.5 | 4 | 43.12 | 1 | 47.52 | 70.4 | 39.55 | 1 | 36.26 | 0.9 | 48.15 | 93.78 | 47.08 | 0 | 44.38 | 21.51 | |
| BI-BAUBackbone=ResNet-18, Variant=U2026.06 | 44.6 | 1.18 | 46.73 | 4 | 40.55 | 8 | 45.28 | 0.5 | 39.18 | 1.1 | 40.75 | 0 | 35.7 | 8.5 | 35.8 | 11.8 | 39.78 | 1.9 | |
| BTI-DBFBackbone=ResNet-182026.06 | 43.72 | 0.12 | 45.68 | 0 | 41.8 | 0.1 | 46.47 | 0 | 37.46 | 0 | 31.53 | 0 | 40.17 | 11.01 | 42.4 | 0 | 41.15 | 1.4 | |
| BI-BAUBackbone=ResNet-18, Variant=T2026.06 | 41.14 | 4.34 | 32.8 | 0.5 | 36.8 | 6.8 | 32.36 | 0.4 | 36.7 | 11.4 | 35.97 | 1.5 | 30.68 | 21.06 | 30.5 | 0.06 | 34.61 | 5.75 | |
| SAUBackbone=ResNet-182026.06 | 40.02 | 3.3 | 40.94 | 20.3 | 35.92 | 20.7 | 40.11 | 22.8 | 31.28 | 16.9 | 31.41 | 5.5 | 42.56 | 84.9 | 40.54 | 1.3 | 37.84 | 21.96 | |
| I-BAUBackbone=ResNet-182026.06 | 35.94 | 38.86 | 37.23 | 74.5 | 37.36 | 78.7 | 37.02 | 31.8 | 35.74 | 1.2 | 34.1 | 0.1 | 37.75 | 86.19 | 40.86 | 60.26 | 37 | 46.45 |