Explanation Hardening Evaluation on CIFAR-100 (8% utility loss, ϵ=10, δ=10⁻⁵, test)
0.64MLS (TPR@0.1% FPR) Pre-HardeningOcclusion
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| OcclusionHardening Method=DeepLeak2026.01 | 0.64 | 0.22 | 4.54 | |
| OcclusionHardening Method=DP-SGD2026.01 | 0.64 | 0.13 | 4.31 | |
| VarGradHardening Method=DeepLeak2026.01 | 6.68 | 1.62 | 8.36 | |
| VarGradHardening Method=DP-SGD2026.01 | 6.68 | 0.96 | 8.78 | |
| GradCAMHardening Method=DeepLeak2026.01 | 6.78 | 0.26 | 24.77 | |
| GradCAMHardening Method=DP-SGD2026.01 | 6.78 | 0.18 | 29 | |
| LIMEHardening Method=DeepLeak2026.01 | 10.26 | 1.07 | 1.77 | |
| LIMEHardening Method=DP-SGD2026.01 | 10.26 | 0.12 | 1.68 | |
| SmoothGradHardening Method=DeepLeak2026.01 | 10.38 | 0.64 | 7.23 | |
| SmoothGradHardening Method=DP-SGD2026.01 | 10.38 | 0.15 | 7.59 | |
| SHAPHardening Method=DeepLeak2026.01 | 11.8 | 0.06 | 4.79 | |
| SHAPHardening Method=DP-SGD2026.01 | 11.8 | 0.06 | 4.55 | |
| DeepLIFTHardening Method=DeepLeak2026.01 | 11.82 | 0 | 1.53 | |
| DeepLIFTHardening Method=DP-SGD2026.01 | 11.82 | 0.14 | 1.61 | |
| ProtoDashHardening Method=DeepLeak2026.01 | 14.9 | 0 | 0 | |
| ProtoDashHardening Method=DP-SGD2026.01 | 14.9 | 11.6 | 0 | |
| Integrated GradientsHardening Method=DeepLeak2026.01 | 16.42 | 4.02 | 0.0425 | |
| Integrated GradientsHardening Method=DP-SGD2026.01 | 16.42 | 0.68 | 24 | |
| GradCAM++Hardening Method=DeepLeak2026.01 | 18 | 3.6 | 0.0016 | |
| GradCAM++Hardening Method=DP-SGD2026.01 | 18 | 0.59 | 32 | |
| Saliency MapHardening Method=DeepLeak2026.01 | 18.84 | 0 | 98.7 | |
| Saliency MapHardening Method=DP-SGD2026.01 | 18.84 | 0.42 | 63 | |
| InputXGradHardening Method=DeepLeak2026.01 | 24.68 | 0 | 64.07 | |
| InputXGradHardening Method=DP-SGD2026.01 | 24.68 | 0.93 | 60.87 | |
| AnchorsHardening Method=DeepLeak2026.01 | 43.32 | 20.02 | 3.355 | |
| AnchorsHardening Method=DP-SGD2026.01 | 43.32 | 62.32 | 3.19 | |
| Guided BackPropHardening Method=DeepLeak2026.01 | 45.32 | 0.48 | 41.46 | |
| Guided BackPropHardening Method=DP-SGD2026.01 | 45.32 | 0.63 | 62 | |
| DeconvolutionHardening Method=DeepLeak2026.01 | 48.48 | 0.83 | 66.71 | |
| DeconvolutionHardening Method=DP-SGD2026.01 | 48.48 | 0.28 | 63.37 |