Backdoor Re-activation Attack on CIFAR-10
99.99Accuracy (No Defense)Transfer-based Re-activation Attack (TA)
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 2.76 | 99.76 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 5.77 | 99.09 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 0.54 | 96.18 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 4.12 | 89.58 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 1.39 | 83.67 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Trojan [32], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.99 | 8.93 | 21.79 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 99.76 | 100 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 47.64 | 99.98 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 26.83 | 99.83 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 12.17 | 99.63 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 5.2 | 93.36 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Blended [10], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.76 | 0.2 | 24.07 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 0.7 | 99.98 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 0.92 | 99.98 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 0.02 | 99.77 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 1.07 | 21.78 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 1.26 | 15.56 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=Input-Aware [36], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.3 | 0 | 95.28 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 99.06 | 99.93 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 75.47 | 99.84 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 11.99 | 98.35 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 6.43 | 99.04 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 2.49 | 96.62 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=LF [58], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 99.06 | 5.43 | 80.09 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 98.9 | 99.72 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 0.73 | 99.86 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 0.88 | 83.79 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 0.96 | 94.67 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 0.82 | 89.49 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=WaNet [37], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 98.9 | 0.26 | 98.69 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 97.07 | 99.27 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 70.77 | 99.38 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 2.89 | 20.44 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 4.06 | 91.29 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 2.16 | 95.03 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=SSBA [27], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 97.07 | 0.54 | 76.21 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=NC [45], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 2.01 | 95.43 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=NAD [26], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 1.96 | 98.42 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=i-BAU [57], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 4.48 | 97.9 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=FT-SAM [62], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 1.63 | 97.42 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=SAU [49], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 1.3 | 90.17 | |
| Transfer-based Re-activation Attack (TA)Base Backdoor=BadNets [15], Defense=FST [35], l2-norm bound=1, Backbone=PreAct-ResNet182024.05 | 93.79 | 1.46 | 96.21 |