# Defense against Adaptive Adversarial Attacks on CelebA Source: [Defense against Adaptive Adversarial Attacks on CelebA]() Collection index: [llms.txt]() Data updated: 2026-03-24T13:55:05.480Z Evaluation of defense mechanisms against adaptive adversarial attacks on the CelebA dataset, reporting performance metrics like Accuracy. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Defense against adaptive adversarial attacks | | Dataset (including any stated split) | CelebA | | Metric | Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 18 of 18 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Accuracy](): Higher is better; unit: PERCENT. ## Recorded results | Method | Accuracy | Result date | Report paper | | --- | --- | --- | --- | | Pre | 85.26 | Not recorded | 68fa75521e209131cea67277 | | Pre | 85.26 | Not recorded | 68fa75521e209131cea67277 | | EKFAC | 77.36 | Not recorded | 68fa75521e209131cea67277 | | DataInf | 77.36 | Not recorded | 68fa75521e209131cea67277 | | IP Ensemble | 77.3 | Not recorded | 68fa75521e209131cea67277 | | IP | 77.28 | Not recorded | 68fa75521e209131cea67277 | | Self-TracIn | 75.58 | Not recorded | 68fa75521e209131cea67277 | | Self-LiSSA | 75.55 | Not recorded | 68fa75521e209131cea67277 | | Post | 75.33 | Not recorded | 68fa75521e209131cea67277 | | Post | 75.33 | Not recorded | 68fa75521e209131cea67277 | | EKFAC | 75.11 | Not recorded | 68fa75521e209131cea67277 | | IP | 75.1 | Not recorded | 68fa75521e209131cea67277 | | IP Ensemble | 75.1 | Not recorded | 68fa75521e209131cea67277 | | DataInf | 74.74 | Not recorded | 68fa75521e209131cea67277 | | LiSSA | 73.23 | Not recorded | 68fa75521e209131cea67277 | | Self-LiSSA | 73.17 | Not recorded | 68fa75521e209131cea67277 | | Self-TracIn | 73.12 | Not recorded | 68fa75521e209131cea67277 | | LiSSA | 68.68 | Not recorded | 68fa75521e209131cea67277 | ### Pre Accuracy: 85.26. Result ID: 69c2970b47f34ce924ab078c. [Reporting paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### Pre Accuracy: 85.26. Result ID: 69c2970b47f34ce924ab0795. [Reporting paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### EKFAC Accuracy: 77.36. Result ID: 69c2970b47f34ce924ab078f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### DataInf Accuracy: 77.36. Result ID: 69c2970b47f34ce924ab0790. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### IP Ensemble Accuracy: 77.3. Result ID: 69c2970b47f34ce924ab0794. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### IP Accuracy: 77.28. Result ID: 69c2970b47f34ce924ab0793. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### Self-TracIn Accuracy: 75.58. Result ID: 69c2970b47f34ce924ab0791. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### Self-LiSSA Accuracy: 75.55. Result ID: 69c2970b47f34ce924ab0792. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### Post Accuracy: 75.33. Result ID: 69c2970b47f34ce924ab078d. [Reporting paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. ### Post Accuracy: 75.33. Result ID: 69c2970b47f34ce924ab0796. [Reporting paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### EKFAC Accuracy: 75.11. Result ID: 69c2970b47f34ce924ab0798. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### IP Accuracy: 75.1. Result ID: 69c2970b47f34ce924ab079c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### IP Ensemble Accuracy: 75.1. Result ID: 69c2970b47f34ce924ab079d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### DataInf Accuracy: 74.74. Result ID: 69c2970b47f34ce924ab0799. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### LiSSA Accuracy: 73.23. Result ID: 69c2970b47f34ce924ab0797. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### Self-LiSSA Accuracy: 73.17. Result ID: 69c2970b47f34ce924ab079b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### Self-TracIn Accuracy: 73.12. Result ID: 69c2970b47f34ce924ab079a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Reweighting"}. This record does not assert independent reproduction. ### LiSSA Accuracy: 68.68. Result ID: 69c2970b47f34ce924ab078e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense Protocol":"Relabeling"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.