Backdoor Poisoning Sample Isolation on Tiny-ImageNet (train)
99.52PrecisionHARVEY
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| HARVEYModel=ResNet34, Attack=BadNets2026.07 | 99.52 | 99.99 | 99.75 | 0 | |
| HARVEYModel=ResNet34, Attack=Trojan2026.07 | 97.29 | 99.98 | 98.62 | 0 | |
| HARVEYModel=ResNet34, Attack=IAB2026.07 | 96 | 99.81 | 97.87 | 0.02 | |
| HARVEYModel=ResNet34, Attack=WaNet2026.07 | 95.54 | 99.48 | 97.47 | 0.06 | |
| D-STModel=ResNet34, Attack=BadNets2026.07 | 91.52 | 100 | 95.57 | 0 | |
| HARVEYModel=ResNet34, Attack=Average2026.07 | 90.94 | 99.7 | 97.63 | 0.02 | |
| D-STModel=ResNet34, Attack=Trojan2026.07 | 90.61 | 100 | 95.07 | 0 | |
| D-STModel=ResNet34, Attack=IAB2026.07 | 89.48 | 99.93 | 94.42 | 0.01 | |
| HARVEYModel=ResNet34, Attack=Blend2026.07 | 89.48 | 99.93 | 94.42 | 0.01 | |
| D-STModel=ResNet34, Attack=WaNet2026.07 | 84.91 | 91.81 | 88.23 | 0.92 | |
| HARVEYModel=ResNet34, Attack=CLB2026.07 | 67.81 | 99 | 80.49 | 0.01 | |
| HARVEYModel=ResNet34, Attack=Worst Case2026.07 | 67.81 | 99 | 80.49 | 0.06 | |
| D-STModel=ResNet34, Attack=Average2026.07 | 60.68 | 66.63 | 75.57 | 1.93 | |
| D-STModel=ResNet34, Attack=Blend2026.07 | 6.77 | 3.42 | 4.54 | 10.17 | |
| DBDModel=ResNet34, Attack=WaNet2026.07 | 0.82 | 4.11 | 1.37 | 19.18 | |
| D-STModel=ResNet34, Attack=CLB2026.07 | 0.8 | 4.6 | 1.36 | 0.49 | |
| D-STModel=ResNet34, Attack=Worst Case2026.07 | 0.8 | 3.42 | 1.36 | 10.17 | |
| DBDModel=ResNet34, Attack=Trojan2026.07 | 0.36 | 1.8 | 0.6 | 19.64 | |
| DBDModel=ResNet34, Attack=Average2026.07 | 0.24 | 1.37 | 0.48 | 16.59 | |
| DBDModel=ResNet34, Attack=IAB2026.07 | 0.1 | 0.49 | 0.17 | 19.9 | |
| DBDModel=ResNet34, Attack=BadNets2026.07 | 0.09 | 0.45 | 0.15 | 19.91 | |
| DBDModel=ResNet34, Attack=Blend2026.07 | 0.08 | 0.38 | 0.13 | 19.92 | |
| DBDModel=ResNet34, Attack=CLB2026.07 | 0.01 | 1 | 0.02 | 0.99 | |
| DBDModel=ResNet34, Attack=Worst Case2026.07 | 0.01 | 0.38 | 0.02 | 19.92 |