Backdoor Detection on CIFAR-10
100TPRK-Arm
Evaluation results
| Method | Links | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| K-ArmAttack Type=BadNet2023.10 | 100 | — | 5 | — | — | — | — | — | — | — | — | — | |
| MNTDAttack Type=CB2023.10 | 100 | — | 5 | — | — | — | — | — | — | — | — | — | |
| CBDsupAttack Type=CB2023.10 | 100 | — | 5 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0, Attack Type=CB2023.10 | 100 | 90 | 0 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.1, Attack Type=CB2023.10 | 100 | 95 | 20 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.2, Attack Type=CB2023.10 | 100 | 100 | 25 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=Badnet, Poisoning ratio=10%2024.06 | 100 | — | 10.4 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=Blend, Poisoning ratio=10%2024.06 | 100 | — | 13.5 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=WaNet, Poisoning ratio=10%2024.06 | 100 | — | 11.6 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 100 | — | 11.3 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=Badnet, Poisoning ratio=10%2024.06 | 100 | — | 11.3 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=Badnet, Poisoning ratio=10%2024.06 | 100 | — | 0.9 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 100 | — | 0 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=Badnet, Poisoning ratio=10%2024.06 | 100 | — | 20.5 | — | — | — | — | — | — | — | — | — | |
| FeatureREModel=ConvNet2026.05 | 100 | — | 100 | — | — | — | — | — | — | — | — | 0 | |
| CowardAttack=Vanilla2025.08 | 100 | — | 3.3 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 99.9 | — | 16.1 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=Badnet, Poisoning ratio=10%2024.06 | 99.8 | — | 15.8 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 99.6 | — | 11.2 | — | — | — | — | — | — | — | — | — | |
| CowardAttack=NTX2025.08 | 99.5 | — | 7.8 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=Average2024.06 | 99.4 | — | 13.6 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 99.4 | — | 11.7 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=Blend, Poisoning ratio=10%2024.06 | 99.3 | — | 11.8 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 99.2 | — | 13 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=Blend, Poisoning ratio=10%2024.06 | 99.1 | — | 0 | — | — | — | — | — | — | — | — | — | |
| FlameNonIID=0.92025.08 | 99 | — | 33.4 | — | — | — | — | — | — | — | — | — | |
| CowardNonIID=0.92025.08 | 99 | — | 3.9 | — | — | — | — | — | — | — | — | — | |
| CowardNonIID=0.62025.08 | 99 | — | 9.2 | — | — | — | — | — | — | — | — | — | |
| CowardNonIID=0.32025.08 | 99 | — | 9.6 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 98.3 | — | 17.1 | — | — | — | — | — | — | — | — | — | |
| PSBDAttack Type=Adaptive-Blend, Poisoning ratio=1%2024.06 | 98.2 | — | 18.4 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 97.9 | — | 1.4 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=Blend, Poisoning ratio=10%2024.06 | 97.6 | — | 15.6 | — | — | — | — | — | — | — | — | — | |
| IndicatorNonIID=0.92025.08 | 97.5 | — | 23 | — | — | — | — | — | — | — | — | — | |
| CowardAttack=PGD2025.08 | 97.5 | — | 4.2 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 96.5 | — | 15.7 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 96.3 | — | 1.1 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 96.2 | — | 15.9 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=Badnet, Poisoning ratio=10%2024.06 | 95.3 | — | 45 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=Blend, Poisoning ratio=10%2024.06 | 95.3 | — | 45 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 95.3 | — | 45 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=WaNet, Poisoning ratio=10%2024.06 | 95.1 | — | 45 | — | — | — | — | — | — | — | — | — | |
| NCAttack Type=CB2023.10 | 95 | — | 20 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 95 | — | 45 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 95 | — | 45 | — | — | — | — | — | — | — | — | — | |
| CowardAttack=CML2025.08 | 94.5 | — | 9.1 | — | — | — | — | — | — | — | — | — | |
| IndicatorNonIID=0.62025.08 | 94 | — | 26.1 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=Blend, Poisoning ratio=10%2024.06 | 93.9 | — | 24.4 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 93.9 | — | 29 | — | — | — | — | — | — | — | — | — | |
| MultiKrumNonIID=0.92025.08 | 93.5 | — | 34.1 | — | — | — | — | — | — | — | — | — | |
| IndicatorNonIID=0.32025.08 | 93 | — | 31 | — | — | — | — | — | — | — | — | — | |
| IndicatorAttack=Vanilla2025.08 | 93 | — | 34.7 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=Average2024.06 | 92.3 | — | 40.6 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=TrojanNN, Poisoning ratio=10%2024.06 | 92.1 | — | 22.7 | — | — | — | — | — | — | — | — | — | |
| IndicatorAttack=PGD2025.08 | 92 | — | 34.1 | — | — | — | — | — | — | — | — | — | |
| MNTDAttack Type=BadNet2023.10 | 90 | — | 5 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=Average2024.06 | 89.9 | — | 24.4 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=WaNet, Poisoning ratio=10%2024.06 | 89.1 | — | 3.4 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=Label-Consistent, Poisoning ratio=10%2024.06 | 88.9 | — | 23.7 | — | — | — | — | — | — | — | — | — | |
| IndicatorAttack=CML2025.08 | 87 | — | 33.8 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=WaNet, Poisoning ratio=10%2024.06 | 86.9 | — | 25.1 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=WaNet, Poisoning ratio=10%2024.06 | 86.3 | — | 14.4 | — | — | — | — | — | — | — | — | — | |
| CD-LAttack Type=Average2024.06 | 85.5 | — | 15.7 | — | — | — | — | — | — | — | — | — | |
| SCANAttack Type=Average2024.06 | 83.2 | — | 1.3 | — | — | — | — | — | — | — | — | — | |
| K-ArmAttack Type=CB2023.10 | 80 | — | 5 | — | — | — | — | — | — | — | — | — | |
| DeepSightAttack=Vanilla2025.08 | 77.9 | — | 64 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=ISSBA, Poisoning ratio=10%2024.06 | 77.4 | — | 12 | — | — | — | — | — | — | — | — | — | |
| DeepSightAttack=PGD2025.08 | 75.5 | — | 61 | — | — | — | — | — | — | — | — | — | |
| SpectreAttack Type=Adaptive-Blend, Poisoning ratio=1%2024.06 | 75.3 | — | 14.4 | — | — | — | — | — | — | — | — | — | |
| MNTDAttack Type=Blend2023.10 | 75 | — | 5 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.1, Attack Type=BadNet2023.10 | 75 | 20 | 20 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.2, Attack Type=BadNet2023.10 | 75 | 25 | 25 | — | — | — | — | — | — | — | — | — | |
| DeepSightNonIID=0.92025.08 | 74 | — | 60.3 | — | — | — | — | — | — | — | — | — | |
| SCPAttack Type=Adaptive-Blend, Poisoning ratio=1%2024.06 | 72.1 | — | 25.7 | — | — | — | — | — | — | — | — | — | |
| DeepSightAttack=NTX2025.08 | 69.2 | — | 58.5 | — | — | — | — | — | — | — | — | — | |
| FlameNonIID=0.62025.08 | 69 | — | 36.8 | — | — | — | — | — | — | — | — | — | |
| StripAttack Type=Average2024.06 | 68.9 | — | 10.7 | — | — | — | — | — | — | — | — | — | |
| DeepSightNonIID=0.62025.08 | 66 | — | 53.2 | — | — | — | — | — | — | — | — | — | |
| CBDsupAttack Type=BadNet2023.10 | 65 | — | 5 | — | — | — | — | — | — | — | — | — | |
| MultiKrumNonIID=0.62025.08 | 62 | — | 37.6 | — | — | — | — | — | — | — | — | — | |
| FlameNonIID=0.32025.08 | 62 | — | 37.5 | — | — | — | — | — | — | — | — | — | |
| SSAttack Type=Adaptive-Blend, Poisoning ratio=1%2024.06 | 60.8 | — | 14.5 | — | — | — | — | — | — | — | — | — | |
| FoolsGoldNonIID=0.32025.08 | 60.5 | — | 57.2 | — | — | — | — | — | — | — | — | — | |
| NCAttack Type=Blend2023.10 | 60 | — | 20 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.2, Attack Type=Blend2023.10 | 60 | 40 | 25 | — | — | — | — | — | — | — | — | — | |
| MultiKrumNonIID=0.32025.08 | 57.5 | — | 38.1 | — | — | — | — | — | — | — | — | — | |
| DeepSightNonIID=0.32025.08 | 57 | — | 44.8 | — | — | — | — | — | — | — | — | — | |
| K-ArmAttack Type=Blend2023.10 | 55 | — | 5 | — | — | — | — | — | — | — | — | — | |
| CBDsupAttack Type=Blend2023.10 | 55 | — | 5 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0.1, Attack Type=Blend2023.10 | 55 | 35 | 20 | — | — | — | — | — | — | — | — | — | |
| FoolsGoldAttack=Vanilla2025.08 | 53.5 | — | 44.4 | — | — | — | — | — | — | — | — | — | |
| FoolsGoldAttack=PGD2025.08 | 53.5 | — | 44.6 | — | — | — | — | — | — | — | — | — | |
| IndicatorAttack=NTX2025.08 | 52.5 | — | 31.7 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0, Attack Type=BadNet2023.10 | 50 | 5 | 0 | — | — | — | — | — | — | — | — | — | |
| Neural CleanseModel=ResNet-182026.05 | 50 | — | 30 | — | — | — | — | — | — | — | — | 20 | |
| UNICORNModel=ResNet-182026.05 | 50 | — | 20 | — | — | — | — | — | — | — | — | 30 | |
| FoolsGoldNonIID=0.62025.08 | 47.5 | — | 50.3 | — | — | — | — | — | — | — | — | — | |
| FoolsGoldAttack=CML2025.08 | 46.5 | — | 44.1 | — | — | — | — | — | — | — | — | — | |
| SSAttack Type=WaNet, Poisoning ratio=10%2024.06 | 45.6 | — | 50.5 | — | — | — | — | — | — | — | — | — | |
| CBDbeta=0, Attack Type=Blend2023.10 | 45 | 30 | 0 | — | — | — | — | — | — | — | — | — |