Defense against Adaptive Adversarial Attacks on CelebA
85.26AccuracyPre
Evaluation Results
| Method | Links | |
|---|---|---|
| PreDefense Protocol=Relabeling2024.05 | 85.26 | |
| PreDefense Protocol=Reweighting2024.05 | 85.26 | |
| EKFACDefense Protocol=Relabeling2024.05 | 77.36 | |
| DataInfDefense Protocol=Relabeling2024.05 | 77.36 | |
| IP EnsembleDefense Protocol=Relabeling2024.05 | 77.3 | |
| IPDefense Protocol=Relabeling2024.05 | 77.28 | |
| Self-TracInDefense Protocol=Relabeling2024.05 | 75.58 | |
| Self-LiSSADefense Protocol=Relabeling2024.05 | 75.55 | |
| PostDefense Protocol=Relabeling2024.05 | 75.33 | |
| PostDefense Protocol=Reweighting2024.05 | 75.33 | |
| EKFACDefense Protocol=Reweighting2024.05 | 75.11 | |
| IPDefense Protocol=Reweighting2024.05 | 75.1 | |
| IP EnsembleDefense Protocol=Reweighting2024.05 | 75.1 | |
| DataInfDefense Protocol=Reweighting2024.05 | 74.74 | |
| LiSSADefense Protocol=Reweighting2024.05 | 73.23 | |
| Self-LiSSADefense Protocol=Reweighting2024.05 | 73.17 | |
| Self-TracInDefense Protocol=Reweighting2024.05 | 73.12 | |
| LiSSADefense Protocol=Relabeling2024.05 | 68.68 |