Downstream Classification on CIFAR-10 modified (test)
90.7AccuracyNo Defense
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=No Attack2024.11 | 90.7 | 10.2 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=No Attack2024.11 | 90.5 | 18.8 | |
| DEDEBackdoor Attack=BadEncoder2024.11 | 86.5 | 1.3 | |
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=BadEncoder2024.11 | 86.4 | 99.9 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=BadEncoder2024.11 | 86.3 | 100 | |
| ASSETBackdoor Attack=BadEncoder2024.11 | 86.3 | 55.3 | |
| ASSETBackdoor Attack=DRUPE2024.11 | 85.9 | 53.7 | |
| DEDEBackdoor Attack=DRUPE2024.11 | 85.9 | 2.1 | |
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=DRUPE2024.11 | 85.8 | 96.3 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=DRUPE2024.11 | 85.6 | 100 | |
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=BadCLIP2024.11 | 83.1 | 11.7 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=BadCLIP2024.11 | 82.8 | 98.3 | |
| DEDEBackdoor Attack=BadCLIP2024.11 | 81.6 | 30.5 | |
| ASSETBackdoor Attack=BadCLIP2024.11 | 81.1 | 97.4 | |
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=CLIP Backdoor2024.11 | 79.7 | 98.4 | |
| DEDEBackdoor Attack=CLIP Backdoor2024.11 | 79.7 | 0 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=CLIP Backdoor2024.11 | 79.4 | 100 | |
| ASSETBackdoor Attack=CLIP Backdoor2024.11 | 78.5 | 98.3 | |
| No DefenseDownstream Training Data=Clean dataset, Backdoor Attack=CTRL2024.11 | 74 | 63.8 | |
| No DefenseDownstream Training Data=Poison dataset, Backdoor Attack=CTRL2024.11 | 73.9 | 95.4 | |
| ASSETBackdoor Attack=CTRL2024.11 | 72.7 | 49.3 | |
| DEDEBackdoor Attack=CTRL2024.11 | 72.2 | 4.8 |