Backdoor Image Classification on CIFAR-10 (test)
94.58BA (DCB)COMBAT
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| COMBATPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.58 | 94.21 | 93.28 | 63.51 | |
| LCPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.57 | 90.47 | 36.18 | 14.13 | |
| Without RegistryPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.53 | — | — | — | |
| Without RegistryPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.53 | — | — | — | |
| U-COMBATPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.42 | 94.15 | 93.28 | 65.22 | |
| LCPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.39 | 89.95 | 67.27 | 72.19 | |
| SIGPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.36 | 93.51 | 91.43 | 76.3 | |
| COMBATPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.3 | 94.03 | 97.72 | 75.03 | |
| SIGPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.2 | 93.32 | 96.8 | 99.61 | |
| NarcissusPoisoning Setting=Half-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.2 | 93.54 | 97.88 | 58.61 | |
| U-COMBATPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.17 | 93.9 | 97.72 | 79.8 | |
| NarcissusPoisoning Setting=Full-poison, Upstream Generator=CFG-DDPM, Downstream Classifier=PreAct-ResNet18, Training Protocol=Train-from-scratch2025.12 | 94.15 | 93.38 | 98.79 | 63.29 |