# Backdoor Defense on Tiny-ImageNet Blended (test)

Source: [Backdoor Defense on Tiny-ImageNet Blended (test)](<https://www.sota2.com/research/sota/backdoor-defense-on-tiny-imagenet-blended-test>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:39:17.140Z

Evaluation of backdoor defense mechanisms on the Tiny-ImageNet Blended test set, reporting Clean Accuracy (C-Acc) and Attack Success Rate (ASR).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Backdoor Defense |
| Dataset (including any stated split) | Tiny-ImageNet Blended (test) |
| Metric | Clean Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 13 of 13 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Clean Accuracy](<https://www.sota2.com/research/sota/backdoor-defense-on-tiny-imagenet-blended-test.md?metric=Clean%20Accuracy>): Higher is better; unit: PERCENT.

- [Attack Success Rate](<https://www.sota2.com/research/sota/backdoor-defense-on-tiny-imagenet-blended-test.md?metric=Attack%20Success%20Rate>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Clean Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| Clean | 73.88 | Not recorded | 68fa753e1e209131cea66bbb |
| Attack | 73.68 | Not recorded | 68fa753e1e209131cea66bbb |
| Clean | 73.48 | Not recorded | 68fa753e1e209131cea66bbb |
| SAM | 71.3 | Not recorded | 68fa753e1e209131cea66bbb |
| EP | 71.11 | Not recorded | 68fa753e1e209131cea66bbb |
| EP | 70.93 | Not recorded | 68fa753e1e209131cea66bbb |
| SAM | 70.8 | Not recorded | 68fa753e1e209131cea66bbb |
| BTI | 68.74 | Not recorded | 68fa753e1e209131cea66bbb |
| BTI | 68.41 | Not recorded | 68fa753e1e209131cea66bbb |
| PAM | 67.89 | Not recorded | 68fa753e1e209131cea66bbb |
| PAM | 66.86 | Not recorded | 68fa753e1e209131cea66bbb |
| FST | 66.55 | Not recorded | 68fa753e1e209131cea66bbb |
| FST | 65.58 | Not recorded | 68fa753e1e209131cea66bbb |

### Clean

Clean Accuracy: 73.88. Result ID: 699384653a6c314849168684.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### Attack

Clean Accuracy: 73.68. Result ID: 699384653a6c314849168683.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"O-Backdoor","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### Clean

Clean Accuracy: 73.48. Result ID: 699384653a6c314849168685.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### SAM

Clean Accuracy: 71.3. Result ID: 699384653a6c314849168689.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71021e209131cea4e7e4.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### EP

Clean Accuracy: 71.11. Result ID: 699384653a6c314849168686.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### EP

Clean Accuracy: 70.93. Result ID: 699384653a6c314849168687.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### SAM

Clean Accuracy: 70.8. Result ID: 699384653a6c314849168688.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71021e209131cea4e7e4.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### BTI

Clean Accuracy: 68.74. Result ID: 699384653a6c31484916868c.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### BTI

Clean Accuracy: 68.41. Result ID: 699384653a6c31484916868d.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### PAM

Clean Accuracy: 67.89. Result ID: 699384653a6c31484916868e.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### PAM

Clean Accuracy: 66.86. Result ID: 699384653a6c31484916868f.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### FST

Clean Accuracy: 66.55. Result ID: 699384653a6c31484916868a.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70f31e209131cea4e4dd.md>)

Recorded evaluation configuration: {"Mode":"O-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

### FST

Clean Accuracy: 65.58. Result ID: 699384653a6c31484916868b.

[Reporting paper](<https://www.sota2.com/research/paper/68fa753e1e209131cea66bbb.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70f31e209131cea4e4dd.md>)

Recorded evaluation configuration: {"Mode":"P-Robustness","Backbone":"ResNet-18","Poisoning Rate":"5%"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
