Backdoor Detection on Calibration Set
36FPR (Calibration Set)badnet-Y-step100
Evaluation Results
| Method | Links | |
|---|---|---|
| badnet-Y-step100Training Method=FFT, Attack Type=badnet, Target Identifier=Y, Training Steps=1002025.07 | 36 | |
| badnet-X-step100Training Method=FFT, Attack Type=badnet, Target Identifier=X, Training Steps=1002025.07 | 38 | |
| ctba-X-step300Training Method=FFT, Attack Type=ctba, Target Identifier=X, Training Steps=3002025.07 | 38 | |
| badnet-X-step300Training Method=FFT, Attack Type=badnet, Target Identifier=X, Training Steps=3002025.07 | 40 | |
| mtba-X-step100Training Method=FFT, Attack Type=mtba, Target Identifier=X, Training Steps=1002025.07 | 42 | |
| badnet-Z-step200Training Method=FFT, Attack Type=badnet, Target Identifier=Z, Training Steps=2002025.07 | 44 | |
| ctba-Z-step200Training Method=FFT, Attack Type=ctba, Target Identifier=Z, Training Steps=2002025.07 | 44 | |
| badnet-Z-step500Training Method=FFT, Attack Type=badnet, Target Identifier=Z, Training Steps=5002025.07 | 46 | |
| ctba-Z-step300Training Method=FFT, Attack Type=ctba, Target Identifier=Z, Training Steps=3002025.07 | 46 | |
| mtba-Y-step500Training Method=FFT, Attack Type=mtba, Target Identifier=Y, Training Steps=5002025.07 | 46 | |
| mtba-Z-step200Training Method=FFT, Attack Type=mtba, Target Identifier=Z, Training Steps=2002025.07 | 46 | |
| badnet-X-step200Training Method=FFT, Attack Type=badnet, Target Identifier=X, Training Steps=2002025.07 | 48 | |
| mtba-Y-step100Training Method=FFT, Attack Type=mtba, Target Identifier=Y, Training Steps=1002025.07 | 48 | |
| mtba-Y-step200Training Method=FFT, Attack Type=mtba, Target Identifier=Y, Training Steps=2002025.07 | 50 | |
| trojan4Training Method=PPO, Attack Type=trojan, Target Identifier=42025.07 | 50 | |
| ctba-Y-step200Training Method=FFT, Attack Type=ctba, Target Identifier=Y, Training Steps=2002025.07 | 52 | |
| mtba-X-step200Training Method=FFT, Attack Type=mtba, Target Identifier=X, Training Steps=2002025.07 | 52 | |
| mtba-Z-step100Training Method=FFT, Attack Type=mtba, Target Identifier=Z, Training Steps=1002025.07 | 52 | |
| badnet-Z-step100Training Method=FFT, Attack Type=badnet, Target Identifier=Z, Training Steps=1002025.07 | 54 | |
| ctba-Y-step100Training Method=FFT, Attack Type=ctba, Target Identifier=Y, Training Steps=1002025.07 | 54 | |
| mtba-X-step300Training Method=FFT, Attack Type=mtba, Target Identifier=X, Training Steps=3002025.07 | 54 | |
| ctba-Z-step500Training Method=FFT, Attack Type=ctba, Target Identifier=Z, Training Steps=5002025.07 | 56 | |
| mtba-X-step400Training Method=FFT, Attack Type=mtba, Target Identifier=X, Training Steps=4002025.07 | 56 | |
| mtba-Z-step300Training Method=FFT, Attack Type=mtba, Target Identifier=Z, Training Steps=3002025.07 | 56 | |
| mtba-Z-step400Training Method=FFT, Attack Type=mtba, Target Identifier=Z, Training Steps=4002025.07 | 56 | |
| badnet-Y-step200Training Method=FFT, Attack Type=badnet, Target Identifier=Y, Training Steps=2002025.07 | 58 | |
| ctba-Y-step300Training Method=FFT, Attack Type=ctba, Target Identifier=Y, Training Steps=3002025.07 | 58 | |
| badnet-Z-step300Training Method=FFT, Attack Type=badnet, Target Identifier=Z, Training Steps=3002025.07 | 60 | |
| ctba-Z-step100Training Method=FFT, Attack Type=ctba, Target Identifier=Z, Training Steps=1002025.07 | 60 | |
| badnet-X-step400Training Method=FFT, Attack Type=badnet, Target Identifier=X, Training Steps=4002025.07 | 62 | |
| ctba-X-step100Training Method=FFT, Attack Type=ctba, Target Identifier=X, Training Steps=1002025.07 | 62 | |
| badnet-Y-step500Training Method=FFT, Attack Type=badnet, Target Identifier=Y, Training Steps=5002025.07 | 64 | |
| ctba-X-step500Training Method=FFT, Attack Type=ctba, Target Identifier=X, Training Steps=5002025.07 | 64 | |
| ctba-Y-step400Training Method=FFT, Attack Type=ctba, Target Identifier=Y, Training Steps=4002025.07 | 64 | |
| ctba-Z-step400Training Method=FFT, Attack Type=ctba, Target Identifier=Z, Training Steps=4002025.07 | 64 | |
| badnet-Y-step400Training Method=FFT, Attack Type=badnet, Target Identifier=Y, Training Steps=4002025.07 | 68 | |
| trojan5Training Method=PPO, Attack Type=trojan, Target Identifier=52025.07 | 68 | |
| badnet-Z-step400Training Method=FFT, Attack Type=badnet, Target Identifier=Z, Training Steps=4002025.07 | 72 | |
| ctba-Y-step500Training Method=FFT, Attack Type=ctba, Target Identifier=Y, Training Steps=5002025.07 | 72 | |
| trojan3Training Method=PPO, Attack Type=trojan, Target Identifier=32025.07 | 72 | |
| ctba-X-step400Training Method=FFT, Attack Type=ctba, Target Identifier=X, Training Steps=4002025.07 | 74 | |
| badnet-X-step500Training Method=FFT, Attack Type=badnet, Target Identifier=X, Training Steps=5002025.07 | 76 | |
| badnet-Y-step300Training Method=FFT, Attack Type=badnet, Target Identifier=Y, Training Steps=3002025.07 | 76 | |
| mtba-Y-step400Training Method=FFT, Attack Type=mtba, Target Identifier=Y, Training Steps=4002025.07 | 76 | |
| ctba-X-step200Training Method=FFT, Attack Type=ctba, Target Identifier=X, Training Steps=2002025.07 | 78 | |
| trojan2Training Method=PPO, Attack Type=trojan, Target Identifier=22025.07 | 78 | |
| mtba-Z-step500Training Method=FFT, Attack Type=mtba, Target Identifier=Z, Training Steps=5002025.07 | 80 | |
| mtba-X-step500Training Method=FFT, Attack Type=mtba, Target Identifier=X, Training Steps=5002025.07 | 84 | |
| trojan1Training Method=PPO, Attack Type=trojan, Target Identifier=12025.07 | 84 | |
| mtba-Y-step300Training Method=FFT, Attack Type=mtba, Target Identifier=Y, Training Steps=3002025.07 | 98 |