Backdoor Detection on CIFAR-100
100True Positive Rate (TPR)Coward
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| CowardNonIID=0.62025.08 | 100 | — | 4.3 | |
| CowardAttack=Vanilla2025.08 | 100 | — | 1.9 | |
| CowardAttack=PGD2025.08 | 100 | — | 5.8 | |
| CowardAttack=NTX2025.08 | 100 | — | 9.4 | |
| IndicatorAttack=CML2025.08 | 98.5 | — | 47.5 | |
| CowardAttack=CML2025.08 | 98.2 | — | 7.3 | |
| MultiKrumNonIID=0.92025.08 | 98 | — | 22.4 | |
| CowardNonIID=0.92025.08 | 98 | — | 2.9 | |
| CowardNonIID=0.32025.08 | 98 | — | 8.6 | |
| FlameNonIID=0.92025.08 | 97 | — | 22.6 | |
| MultiKrumNonIID=0.62025.08 | 96 | — | 22.7 | |
| IndicatorAttack=NTX2025.08 | 96 | — | 46.9 | |
| FlameNonIID=0.62025.08 | 95 | — | 22.8 | |
| IndicatorNonIID=0.92025.08 | 95 | — | 47 | |
| IndicatorAttack=Vanilla2025.08 | 91 | — | 45.3 | |
| IndicatorAttack=PGD2025.08 | 88 | — | 45.7 | |
| IndicatorNonIID=0.62025.08 | 81 | — | 47.8 | |
| IndicatorNonIID=0.32025.08 | 76 | — | 43.6 | |
| DeepSightNonIID=0.32025.08 | 75 | — | 65.3 | |
| DeepSightNonIID=0.62025.08 | 55 | — | 47.8 | |
| DeepSightAttack=NTX2025.08 | 51.3 | — | 42.7 | |
| DeepSightAttack=Vanilla2025.08 | 48.7 | — | 44.4 | |
| DeepSightAttack=PGD2025.08 | 46.7 | — | 43 | |
| DeepSightAttack=CML2025.08 | 41 | — | 34.7 | |
| DeepSightNonIID=0.92025.08 | 39 | — | 32.6 | |
| RflbatNonIID=0.92025.08 | 12 | — | 22.6 | |
| RflbatNonIID=0.62025.08 | 11 | — | 22.4 | |
| FlameAttack=Vanilla2025.08 | 7.5 | — | 32.5 | |
| MultiKrumAttack=NTX2025.08 | 7 | — | 32.6 | |
| MultiKrumAttack=Vanilla2025.08 | 6.5 | — | 32.6 | |
| MultiKrumAttack=PGD2025.08 | 6.5 | — | 32.6 | |
| RflbatNonIID=0.32025.08 | 6 | — | 23.3 | |
| FlameNonIID=0.32025.08 | 5 | — | 32.8 | |
| RlbatAttack=CML2025.08 | 5 | — | 24.3 | |
| RlbatAttack=NTX2025.08 | 4.5 | — | 23.2 | |
| RlbatAttack=Vanilla2025.08 | 3.5 | — | 23.7 | |
| RlbatAttack=PGD2025.08 | 2.5 | — | 23.4 | |
| FlameAttack=NTX2025.08 | 2.5 | — | 33.1 | |
| MultiKrumNonIID=0.32025.08 | 2 | — | 33.1 | |
| FlameAttack=PGD2025.08 | 2 | — | 33.1 | |
| FoolsGoldNonIID=0.92025.08 | 0 | — | 0 | |
| FoolsGoldNonIID=0.62025.08 | 0 | — | 0 | |
| FoolsGoldNonIID=0.32025.08 | 0 | — | 0 | |
| MultiKrumAttack=CML2025.08 | 0 | — | 33.3 | |
| FoolsGoldAttack=Vanilla2025.08 | 0 | — | 0 | |
| FoolsGoldAttack=PGD2025.08 | 0 | — | 0 | |
| FoolsGoldAttack=NTX2025.08 | 0 | — | 0 | |
| FoolsGoldAttack=CML2025.08 | 0 | — | 0 | |
| FlameAttack=CML2025.08 | 0 | — | 33.3 | |
| ANPAttack=Avg. (6 attacks), Poisoning Rate=5%2026.04 | — | 75.8 | — | |
| Functional Attribution (CLC)Attack=Avg. (6 attacks), Detection Setting=Online, Coupling Measure=CLC, Poisoning Rate=5%2026.04 | — | 94 | — | |
| Functional Attribution (UMAP K-NN)Attack=Avg. (6 attacks), Detection Setting=Offline, Poisoning Rate=5%2026.04 | — | 95.9 | — |