Image Classification on CIFAR-10 AA
72.13AccuracyEV-AT
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| EV-ATData Augmentation Strategy=AutoAug, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 72.13 | 7.89 | 6.34 | 90.94 | |
| EV-ATData Augmentation Strategy=Cutout, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 71.93 | 8.3 | 6.53 | 89.7 | |
| EV-ATData Augmentation Strategy=Basic, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 71.77 | 8.08 | 6.45 | 91.33 | |
| EV-ATData Augmentation Strategy=AugMix, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 71.52 | 8.65 | 6.75 | 89.26 | |
| TRADES-AWPData Augmentation Strategy=Cutout, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=NeurIPS'202026.07 | 70.9 | 9.77 | 7.37 | 86.57 | |
| IKL-ATData Augmentation Strategy=AugMix, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=NeurIPS'242026.07 | 69.11 | 11.95 | 8.46 | 84.1 | |
| EV-ATData Augmentation Strategy=Cutout, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 56.49 | 13.16 | 10.42 | 96.12 | |
| EV-ATData Augmentation Strategy=AugMix, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 55.93 | 13.64 | 10.73 | 95.87 | |
| IKL-ATData Augmentation Strategy=AutoAug, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=NeurIPS'242026.07 | 55.91 | 15.51 | 11.64 | 92.2 | |
| EV-ATData Augmentation Strategy=AutoAug, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 55.86 | 12.96 | 10.43 | 97.2 | |
| EV-ATData Augmentation Strategy=Basic, Backbone=WRN-34-10, Threat Model=l_infinity2026.07 | 55.38 | 13.39 | 10.7 | 96.98 | |
| AT-AWPData Augmentation Strategy=AugMix, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=NeurIPS'202026.07 | 52.76 | 16.05 | 12.45 | 94.83 | |
| TRADES-EMFFData Augmentation Strategy=Cutout, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=TPAMI'252026.07 | 51.81 | 17.34 | 13.1 | 94.05 | |
| ATData Augmentation Strategy=Basic, Backbone=WRN-34-10, Threat Model=l_infinity, Venue=ICML'182026.07 | 51.63 | 15.44 | 12.32 | 97.49 |