# Image Classification on CIFAR-10 (Adversarial Robustness FGSM, PGD, SparseFool, PAP)

Source: [Image Classification on CIFAR-10 (Adversarial Robustness FGSM, PGD, SparseFool, PAP)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:37:43.635Z

Evaluation of Image Classification performance on CIFAR-10 measuring robustness against a specific set of adversarial attacks, including FGSM, PGD, SparseFool, and PAP, alongside benign accuracy.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | CIFAR-10 |
| Metric | Benign Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 11 of 11 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Benign Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap.md?metric=Benign%20Accuracy>): Higher is better; unit: PERCENT.

- [Robustness (FGSM)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap.md?metric=Robustness%20(FGSM)>): Higher is better; unit: PERCENT.

- [Robustness (PGD)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap.md?metric=Robustness%20(PGD)>): Higher is better; unit: PERCENT.

- [Robustness (SparseFool)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap.md?metric=Robustness%20(SparseFool)>): Higher is better; unit: PERCENT.

- [Robustness (PAP)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-fgsm-pgd-sparsefool-pap.md?metric=Robustness%20(PAP)>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Benign Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| Lorica | 57.46 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Sylva | 55.92 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-Gen-AF | 51.73 | Not recorded | 68fa792a1e209131cea7c5d5 |
| DBFAT | 51.45 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Per-LoRA | 50.89 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-Gen-AF | 50.12 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-TRADES | 49.58 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-TRADES | 48.24 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Per-Adv | 39.96 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-PGD-AT | 39.91 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-PGD-AT | 37.54 | Not recorded | 68fa792a1e209131cea7c5d5 |

### Lorica

Benign Accuracy: 57.46. Result ID: 699a8b725698665ec415a0d5.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Sylva

Benign Accuracy: 55.92. Result ID: 699a8b725698665ec415a0d4.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-Gen-AF

Benign Accuracy: 51.73. Result ID: 699a8b725698665ec415a0d0.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa728e1e209131cea570cd.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"Gen-AF","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### DBFAT

Benign Accuracy: 51.45. Result ID: 699a8b725698665ec415a0d1.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6e961e209131cea40e66.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Per-LoRA

Benign Accuracy: 50.89. Result ID: 699a8b725698665ec415a0d3.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa74601e209131cea6146b.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-Gen-AF

Benign Accuracy: 50.12. Result ID: 699a8b725698665ec415a0cd.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa728e1e209131cea570cd.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"Gen-AF","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-TRADES

Benign Accuracy: 49.58. Result ID: 699a8b725698665ec415a0cf.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"TRADES","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-TRADES

Benign Accuracy: 48.24. Result ID: 699a8b725698665ec415a0cc.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"TRADES","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Per-Adv

Benign Accuracy: 39.96. Result ID: 699a8b725698665ec415a0d2.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75051e209131cea654c5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-PGD-AT

Benign Accuracy: 39.91. Result ID: 699a8b725698665ec415a0ce.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa665a1e209131cea0fbae.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"PGD-AT","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-PGD-AT

Benign Accuracy: 37.54. Result ID: 699a8b725698665ec415a0cb.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa665a1e209131cea0fbae.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"PGD-AT","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
