Image Classification on CIFAR-10 (Accuracy and ECE)
97.2AccuracyLiGO
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| LiGOBackbone=DeiT-B2026.03 | 97.2 | — | |
| MangoBackbone=DeiT-B2026.03 | 97.2 | — | |
| BoTBackbone=DeiT-B2026.03 | 97.2 | — | |
| bert2BERTBackbone=DeiT-B2026.03 | 96.4 | — | |
| BoTBackbone=DeiT-S2026.03 | 96 | — | |
| ScratchBackbone=DeiT-B2026.03 | 95.9 | — | |
| WSBackbone=DeiT-S2026.03 | 95.8 | — | |
| AAA-linearAttack=None, Perturbation ($l_\infty$)=8/2552022.05 | 94.84 | 2.46 | |
| DENTAttack=None, Perturbation ($l_\infty$)=8/2552022.05 | 94.8 | 5.2 | |
| UndefendedAttack=None, Perturbation ($l_\infty$)=8/2552022.05 | 94.78 | 3.52 | |
| ScratchBackbone=DeiT-S2026.03 | 94 | — | |
| TRSAttack=None, Perturbation ($l_\infty$)=8/2552022.05 | 88.64 | 3.64 | |
| PNIAttack=None, Perturbation ($l_\infty$)=8/2552022.05 | 81.91 | 3.09 | |
| AAA-linearAttack=Square [5], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 81.36 | — | |
| AAA-linearAttack=Square [5], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 80.59 | — | |
| DENTAttack=Square [5], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 62.01 | — | |
| PNIAttack=Square [5], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 57.69 | — | |
| TRSAttack=Square [5], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 56.26 | — | |
| AAA-linearAttack=QueryNet [41], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 50.01 | — | |
| AAA-linearAttack=QueryNet [41], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 49.63 | — | |
| PNIAttack=Square [5], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 45.47 | — | |
| PNIAttack=QueryNet [41], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 44.06 | — | |
| UndefendedAttack=Square [5], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 39.38 | — | |
| DENTAttack=QueryNet [41], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 39.35 | — | |
| DENTAttack=Square [5], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 35.07 | — | |
| PNIAttack=QueryNet [41], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 34.69 | — | |
| TRSAttack=Square [5], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 23.91 | — | |
| DENTAttack=QueryNet [41], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 20.75 | — | |
| TRSAttack=QueryNet [41], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 16.43 | — | |
| UndefendedAttack=QueryNet [41], #query=100, Perturbation ($l_\infty$)=8/2552022.05 | 13.5 | — | |
| TRSAttack=QueryNet [41], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 8.49 | — | |
| UndefendedAttack=Square [5], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 0.09 | — | |
| UndefendedAttack=QueryNet [41], #query=2500, Perturbation ($l_\infty$)=8/2552022.05 | 0.03 | — |