Image Classification on 14 datasets average
22.02PGD Robust AccAdvFLYPfull
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| AdvFLYPfullepsilon (ϵ) Attack Budget=2/2552026.04 | 22.02 | 22.69 | 20.35 | 21.69 | |
| AdvFLYPepsilon (ϵ) Attack Budget=2/2552026.04 | 19.94 | 21.27 | 19.01 | 20.07 | |
| PMG-AFTepsilon (ϵ) Attack Budget=2/2552026.04 | 18.66 | 19.25 | 17 | 18.31 | |
| TeCoAepsilon (ϵ) Attack Budget=2/2552026.04 | 17.89 | 18.67 | 16.57 | 17.71 | |
| AdvFLYPfullepsilon (ϵ) Attack Budget=4/2552026.04 | 6.45 | 7.36 | 3.98 | 5.93 | |
| AdvFLYPepsilon (ϵ) Attack Budget=4/2552026.04 | 6.18 | 7.27 | 4.15 | 5.87 | |
| PMG-AFTepsilon (ϵ) Attack Budget=4/2552026.04 | 4.44 | 5.3 | 2.26 | 4 | |
| TeCoAepsilon (ϵ) Attack Budget=4/2552026.04 | 4.4 | 5.37 | 2.49 | 4.09 |