Explanation Hardening Evaluation on GTSRB 2.5% utility loss, ϵ = 9, δ = 10⁻⁵ (test)
0.39MLS (TPR@0.1% FPR) PreGradCAM
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| GradCAMHardening Method=DeepLeak2026.01 | 0.39 | 0 | — | |
| GradCAMHardening Method=DP-SGD2026.01 | 0.39 | 0.19 | — | |
| OcclusionHardening Method=DeepLeak2026.01 | 0.53 | 0.16 | — | |
| OcclusionHardening Method=DP-SGD2026.01 | 0.53 | 0.13 | — | |
| VarGradHardening Method=DeepLeak2026.01 | 3.52 | 0 | — | |
| VarGradHardening Method=DP-SGD2026.01 | 3.52 | 0.39 | — | |
| GradCAM++Hardening Method=DeepLeak2026.01 | 3.72 | 0.26 | — | |
| GradCAM++Hardening Method=DP-SGD2026.01 | 3.72 | 0.19 | — | |
| Saliency MapHardening Method=DeepLeak2026.01 | 5.84 | 0 | — | |
| Saliency MapHardening Method=DP-SGD2026.01 | 5.84 | 0.35 | — | |
| DeconvolutionHardening Method=DeepLeak2026.01 | 5.84 | 0 | — | |
| DeconvolutionHardening Method=DP-SGD2026.01 | 5.84 | 0.06 | — | |
| SmoothGradHardening Method=DeepLeak2026.01 | 6.31 | 0.76 | — | |
| SmoothGradHardening Method=DP-SGD2026.01 | 6.31 | 0.19 | — | |
| Guided BackPropHardening Method=DeepLeak2026.01 | 6.64 | 0 | — | |
| Guided BackPropHardening Method=DP-SGD2026.01 | 6.64 | 0.06 | — | |
| LIMEHardening Method=DeepLeak2026.01 | 21.52 | 0.13 | — | |
| LIMEHardening Method=DP-SGD2026.01 | 21.52 | 18.47 | — | |
| SHAPHardening Method=DeepLeak2026.01 | 28.83 | 0.29 | — | |
| SHAPHardening Method=DP-SGD2026.01 | 28.83 | 8.23 | — | |
| DeepLIFTHardening Method=DeepLeak2026.01 | 37.61 | 0.19 | — | |
| DeepLIFTHardening Method=DP-SGD2026.01 | 37.61 | 0.27 | — | |
| Integrated GradientsHardening Method=DeepLeak2026.01 | 43.52 | 15.88 | — | |
| Integrated GradientsHardening Method=DP-SGD2026.01 | 43.52 | 0.39 | — | |
| InputXGradHardening Method=DeepLeak2026.01 | 46.37 | 0 | — | |
| InputXGradHardening Method=DP-SGD2026.01 | 46.37 | 0.2 | — | |
| ProtoDashHardening Method=DeepLeak2026.01 | 52.96 | 0 | — | |
| ProtoDashHardening Method=DP-SGD2026.01 | 52.96 | 14.15 | — | |
| AnchorsHardening Method=DeepLeak2026.01 | 80.8 | 0 | — | |
| AnchorsHardening Method=DP-SGD2026.01 | 80.8 | 67.37 | — |