# Backdoor Defense on Tiny-ImageNet BadNet (test) Source: [Backdoor Defense on Tiny-ImageNet BadNet (test)]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:39:17.119Z Evaluation of backdoor defense mechanisms on the Tiny-ImageNet test set specifically against the BadNet trigger. Metrics include Clean Accuracy (C-Acc) and Attack Success Rate (ASR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Backdoor Defense | | Dataset (including any stated split) | Tiny-ImageNet BadNet (test) | | Metric | Clean Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 13 of 13 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Clean Accuracy](): Higher is better; unit: PERCENT. - [Attack Success Rate](): Higher is better; unit: PERCENT. ## Recorded results | Method | Clean Accuracy | Result date | Report paper | | --- | --- | --- | --- | | Clean | 73.88 | Not recorded | 68fa753e1e209131cea66bbb | | Clean | 72.99 | Not recorded | 68fa753e1e209131cea66bbb | | Attack | 72.6 | Not recorded | 68fa753e1e209131cea66bbb | | EP | 70.9 | Not recorded | 68fa753e1e209131cea66bbb | | SAM | 70.9 | Not recorded | 68fa753e1e209131cea66bbb | | SAM | 70.65 | Not recorded | 68fa753e1e209131cea66bbb | | EP | 70.59 | Not recorded | 68fa753e1e209131cea66bbb | | PAM | 68.97 | Not recorded | 68fa753e1e209131cea66bbb | | BTI | 68.91 | Not recorded | 68fa753e1e209131cea66bbb | | PAM | 68.78 | Not recorded | 68fa753e1e209131cea66bbb | | BTI | 68.43 | Not recorded | 68fa753e1e209131cea66bbb | | FST | 65.36 | Not recorded | 68fa753e1e209131cea66bbb | | FST | 65.3 | Not recorded | 68fa753e1e209131cea66bbb | ### Clean Clean Accuracy: 73.88. Result ID: 699384653a6c314849168677. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### Clean Clean Accuracy: 72.99. Result ID: 699384653a6c314849168678. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### Attack Clean Accuracy: 72.6. Result ID: 699384653a6c314849168676. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Backdoor","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### EP Clean Accuracy: 70.9. Result ID: 699384653a6c314849168679. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### SAM Clean Accuracy: 70.9. Result ID: 699384653a6c31484916867c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### SAM Clean Accuracy: 70.65. Result ID: 699384653a6c31484916867b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### EP Clean Accuracy: 70.59. Result ID: 699384653a6c31484916867a. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### PAM Clean Accuracy: 68.97. Result ID: 699384653a6c314849168682. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BTI Clean Accuracy: 68.91. Result ID: 699384653a6c314849168680. [Reporting paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### PAM Clean Accuracy: 68.78. Result ID: 699384653a6c314849168681. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### BTI Clean Accuracy: 68.43. Result ID: 699384653a6c31484916867f. [Reporting paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### FST Clean Accuracy: 65.36. Result ID: 699384653a6c31484916867d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. ### FST Clean Accuracy: 65.3. Result ID: 699384653a6c31484916867e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.