Image Classification on CIFAR-10 32 x 32 (test)
85.3CANo Defense
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| No DefenseAttack=PhysicalBA2023.03 | 85.3 | 98.73 | 11.2 | |
| ShrinkPadAttack=PhysicalBA2023.03 | 82.84 | 90.5 | 18.37 | |
| No DefenseAttack=Average2023.03 | 82.62 | 99.56 | 10.41 | |
| No DefenseAttack=BadNet2023.03 | 82.31 | 99.98 | 10 | |
| No DefenseAttack=Blended2023.03 | 80.26 | 99.96 | 10.03 | |
| No DefenseAttack=None2023.03 | 80.15 | — | — | |
| ZIPAttack=PhysicalBA2023.03 | 80.1 | 4.33 | 80.33 | |
| ZIPAttack=BadNet2023.03 | 78.97 | 5.53 | 79.1 | |
| ZIPAttack=Average2023.03 | 77.23 | 5.87 | 72.47 | |
| ZIPAttack=Blended2023.03 | 72.62 | 7.75 | 57.98 | |
| ShrinkPadAttack=Average2023.03 | 68.23 | 34.04 | 40.57 | |
| ShrinkPadAttack=BadNet2023.03 | 62.89 | 9.34 | 63.12 | |
| ShrinkPadAttack=Blended2023.03 | 58.97 | 2.28 | 40.22 | |
| BlurAttack=BadNet2023.03 | 58.19 | 21.78 | 53.47 | |
| BlurAttack=Blended2023.03 | 55.91 | 3.04 | 49.91 | |
| BlurAttack=Average2023.03 | 51.98 | 8.64 | 48.25 | |
| BlurAttack=PhysicalBA2023.03 | 41.84 | 1.09 | 41.37 |