Federated Backdoor Defense on CIFAR-10
0ASRCoward
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| CowardWatermark Trigger (S)=Diagonal, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 91.8 | 98.5 | 17.3 | |
| CowardWatermark Trigger (S)=Square, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 91.4 | 98.5 | 16.2 | |
| CowardWatermark Trigger (S)=Triangle, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 90.8 | 99 | 12.3 | |
| CowardWatermark Trigger (S)=Noise, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 91.4 | 99.5 | 7.3 | |
| CowardWatermark Trigger (S)=Mosaic, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 90.7 | 99 | 14.2 | |
| CowardWatermark Trigger (S)=WaNet, Attacker Trigger (A)=Semantic (implicit)2025.08 | 0 | 90.8 | 98 | 11.9 | |
| CowardWatermark Trigger (S)=Mosaic, Attacker Trigger (A)=Blend (invisible)2025.08 | 4.6 | 91.3 | 99.5 | 12 | |
| CowardWatermark Trigger (S)=Square, Attacker Trigger (A)=Blend (invisible)2025.08 | 4.8 | 91.4 | 99.5 | 9.1 | |
| CowardWatermark Trigger (S)=Diagonal, Attacker Trigger (A)=Blend (invisible)2025.08 | 5.2 | 91.7 | 99.5 | 6.6 | |
| CowardWatermark Trigger (S)=WaNet, Attacker Trigger (A)=Blend (invisible)2025.08 | 5.4 | 91.5 | 99.5 | 6.8 | |
| CowardWatermark Trigger (S)=Triangle, Attacker Trigger (A)=Blend (invisible)2025.08 | 7.8 | 91.7 | 98.5 | 6.2 | |
| CowardWatermark Trigger (S)=Noise, Attacker Trigger (A)=Blend (invisible)2025.08 | 7.9 | 91.5 | 99 | 6.7 | |
| IndicatorNonIID=0.92025.08 | 9.4 | 91.2 | — | — | |
| CowardWatermark Trigger (S)=Square, Attacker Trigger (A)=Pixel (visible)2025.08 | 9.6 | 91.4 | 100 | 9.4 | |
| CowardWatermark Trigger (S)=Diagonal, Attacker Trigger (A)=Pixel (visible)2025.08 | 9.8 | 91.6 | 100 | 6.1 | |
| CowardWatermark Trigger (S)=Triangle, Attacker Trigger (A)=Pixel (visible)2025.08 | 9.8 | 91.6 | 99.5 | 4.6 | |
| CowardWatermark Trigger (S)=WaNet, Attacker Trigger (A)=Pixel (visible)2025.08 | 9.8 | 91.4 | 99.5 | 7.3 | |
| CowardWatermark Trigger (S)=Noise, Attacker Trigger (A)=Pixel (visible)2025.08 | 9.9 | 91.5 | 99.5 | 6.1 | |
| FlameNonIID=0.92025.08 | 9.9 | 92.1 | — | — | |
| CowardNonIID=0.62025.08 | 9.9 | 90.8 | — | — | |
| CowardNonIID=0.32025.08 | 10 | 90.4 | — | — | |
| CowardNonIID=0.92025.08 | 10.3 | 90.5 | — | — | |
| CowardWatermark Trigger (S)=Mosaic, Attacker Trigger (A)=Pixel (visible)2025.08 | 18 | 91.6 | 96.5 | 10.6 | |
| IndicatorNonIID=0.32025.08 | 24.2 | 91.5 | — | — | |
| MultiKrumNonIID=0.92025.08 | 34.1 | 92.1 | — | — | |
| IndicatorNonIID=0.62025.08 | 35.3 | 91.5 | — | — | |
| DeepSightNonIID=0.92025.08 | 58.2 | 91.9 | — | — | |
| DeepSightNonIID=0.62025.08 | 66.4 | 92 | — | — | |
| DeepSightNonIID=0.32025.08 | 72.7 | 91.8 | — | — | |
| FoolsGoldNonIID=0.32025.08 | 84.5 | 90.8 | — | — | |
| FlameNonIID=0.62025.08 | 87.2 | 91.8 | — | — | |
| FlameNonIID=0.32025.08 | 88.5 | 91.8 | — | — | |
| MultiKrumNonIID=0.62025.08 | 88.9 | 91.9 | — | — | |
| FoolsGoldNonIID=0.62025.08 | 89.5 | 91.4 | — | — | |
| MultiKrumNonIID=0.32025.08 | 90.2 | 91.7 | — | — | |
| RflbatNonIID=0.32025.08 | 91.2 | 91.9 | — | — | |
| FoolsGoldNonIID=0.92025.08 | 91.3 | 92.1 | — | — | |
| RflbatNonIID=0.92025.08 | 91.3 | 91.8 | — | — | |
| RflbatNonIID=0.62025.08 | 91.3 | 92 | — | — |