Backdoor Defense Robustness on Tiny-ImageNet 200
53.98BadNets CARNP
Evaluation results
| Method | Links | ||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RNPBackbone=ResNet-182026.06 | 53.98 | 0.2 | 3.18 | 0.32 | 45.9 | 1.2 | 5.1 | 0.6 | 43.67 | 0 | 18.5 | 0.2 | 48.05 | 0 | 60.9 | 0 | 36.52 | 0.1 | 14.1 | 0 | 18.98 | 0.2 | 0.9 | 0.2 | 39.34 | 96.82 | 87.17 | 85.69 | 41.42 | 28.66 | 100 | 99.96 | 44.26 | 83.8 | 80.5 | 78 | 41.07 | 1.6 | 9.1 | 1.7 | 41.31 | 21.25 | 37.94 | 26.66 | |
| No DefenseBackbone=ResNet-182026.06 | 49.82 | 98.34 | — | — | 50.08 | 100 | — | — | 45.42 | 99.9 | — | — | 49.8 | 99.9 | — | — | 40.53 | 100 | — | — | 40.5 | 99.8 | — | — | 51.8 | 96.14 | — | — | 49.8 | 99.74 | — | — | 50.13 | 93.7 | — | — | 50.33 | 98.2 | — | — | 47.82 | 98.57 | — | — | |
| ANPBackbone=ResNet-182026.06 | 46.78 | 2.14 | 91.5 | 11.82 | 47.66 | 17.8 | 99.6 | 48.3 | 41.56 | 65.2 | 99.6 | 79.9 | 47.17 | 20.2 | 98.6 | 55 | 40.53 | 1.1 | 96.4 | 31 | 39.45 | 2.8 | 4.8 | 6.8 | 48.03 | 91.83 | 97.26 | 92.6 | 48.24 | 98.86 | 99.3 | 99.4 | 46.45 | 6.3 | 59.1 | 24.1 | 47.36 | 41.1 | 74.2 | 59.3 | 45.32 | 34.73 | 82.03 | 50.82 | |
| PAMBackbone=ResNet-182026.06 | 43.66 | 2.24 | 1.34 | 2.52 | 25.05 | 34.2 | 76 | 38.8 | 39.93 | 5.3 | 97.8 | 52.2 | 31.73 | 89.9 | 82 | 75.7 | 32.38 | 4.1 | 9.8 | 5.4 | 33.06 | 4.7 | 0.7 | 5.1 | 35.56 | 1.16 | 97.44 | 23.9 | 42.72 | 0 | 100 | 62.16 | 42.87 | 6.5 | 95.6 | 88.3 | 39.21 | 0.1 | 85.5 | 20.9 | 36.61 | 14.82 | 64.61 | 37.49 | |
| BI-BAU (T)Backbone=ResNet-18, Variant=T2026.06 | 41.14 | 4.34 | 2.54 | 3.98 | 32.8 | 0.5 | 4 | 0.7 | 36.8 | 6.8 | 14 | 5.8 | 32.36 | 0.4 | 9.2 | 0.8 | 36.7 | 11.4 | 9 | 11.8 | 35.97 | 1.5 | 0.7 | 0.9 | 30.68 | 21.06 | 65.9 | 17.25 | 30.5 | 0.06 | 1.18 | 0.04 | 29.87 | 0.6 | 9.5 | 0.4 | 30.67 | 6.3 | 19.3 | 5.2 | 33.74 | 5.29 | 13.53 | 4.68 | |
| SAUBackbone=ResNet-182026.06 | 40.98 | 1.94 | 93.86 | 13.12 | 40.94 | 20.3 | 96.6 | 61.6 | 36.07 | 20.7 | 97.9 | 96.4 | 40.1 | 22.8 | 98.4 | 63.8 | 31.28 | 16.9 | 94.8 | 54.2 | 31.4 | 5.5 | 0.6 | 7 | 42.58 | 84.9 | 98.13 | 87.78 | 40.54 | 1.3 | 99.76 | 76.52 | 41.62 | 1.3 | 83.9 | 57.6 | 41.44 | 33.5 | 91.2 | 73.2 | 39.69 | 20.91 | 85.51 | 59.12 | |
| BI-BAU (U)Backbone=ResNet-18, Variant=U2026.06 | 39.56 | 0.34 | 0.98 | 0.52 | 1.6 | — | — | — | 38.78 | 1.3 | 25.4 | 0.5 | 40.28 | 0 | 25.7 | 0.1 | 38.44 | 2.2 | 11.7 | 2.5 | 38.91 | 1.3 | 0.6 | 0 | 32.89 | 26.57 | 96.72 | 13.95 | 31.16 | 2.94 | 66.68 | 34.88 | 31.5 | 0.2 | 24.6 | 0.8 | 30.34 | 8 | 30.6 | 8.9 | 36.29 | 4.44 | 31.91 | 7.43 | |
| BTI-DBFBackbone=ResNet-182026.06 | 39.44 | 0.2 | 96.36 | 36.28 | 45.7 | 0 | 86.6 | 0 | 41.9 | 0.1 | 88.6 | 36.9 | 46.47 | 0 | 99.5 | 16.9 | 37.47 | 0 | 1.9 | 0.1 | 31.53 | 0 | 0.1 | 0.1 | 40.15 | 11.05 | 98.69 | 85.83 | 42.42 | 0 | 96.8 | 0 | 39.17 | 5.6 | 97.9 | 91.7 | 35.48 | 7.5 | 93.1 | 69.7 | 39.97 | 2.44 | 75.95 | 33.75 | |
| IBUBackbone=ResNet-182026.06 | 32.12 | 0 | 0 | 0 | 32.9 | 0 | 42.3 | 4.1 | 40.11 | 0 | 0 | 0 | 43.42 | 0 | 0.1 | 0 | 36.88 | 0 | 0 | 0 | 34.04 | 0 | 0 | 0 | 46.36 | 0 | 0 | 0.02 | 31.38 | 0 | 0 | 0 | 44.64 | 0 | 0 | 0 | 44.91 | 0 | 0 | 0 | 38.67 | 0 | 4.24 | 0.41 |