# Image Classification on CIFAR-10 (Adversarial Robustness PGD/APGD)

Source: [Image Classification on CIFAR-10 (Adversarial Robustness PGD/APGD)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-pgd-apgd>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-03-23T11:14:19.275Z

Evaluation of Image Classification performance on the CIFAR-10 dataset focusing specifically on robustness against common adversarial attacks, reporting clean accuracy alongside metrics derived from Projected Gradient Descent (PGD) and Adaptive Projected Gradient Descent (APGD) perturbations.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | CIFAR-10 |
| Metric | Clean Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 12 of 12 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Clean Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-pgd-apgd.md?metric=Clean%20Accuracy>): Higher is better; unit: PERCENT.

- [PGD-20 Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-pgd-apgd.md?metric=PGD-20%20Accuracy>): Higher is better; unit: PERCENT.

- [APGD-CE Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-pgd-apgd.md?metric=APGD-CE%20Accuracy>): Higher is better; unit: PERCENT.

- [APGD-DLR Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-adversarial-robustness-pgd-apgd.md?metric=APGD-DLR%20Accuracy>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Clean Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| Base | 91.21 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask (Exp. 3) | 89.5 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| Base | 88.86 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask (Exp. 3) | 86.67 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask+LogitReg (Exp. 4) | 84.91 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask+LogitReg (Exp. 4) | 83.62 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| Base | 83.37 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask (Exp. 3) | 83.01 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| ConjMask+LogitReg (Exp. 4) | 77.86 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| TRADES-PGD | 74.57 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| TRADES-PGD | 71.95 | Not recorded | 69c0c90e0636e5bf4afc3c63 |
| TRADES-PGD | 56.88 | Not recorded | 69c0c90e0636e5bf4afc3c63 |

### Base

Clean Accuracy: 91.21. Result ID: 69c11f5447f34ce924a97884.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ResNet-18"}. This record does not assert independent reproduction.

### ConjMask (Exp. 3)

Clean Accuracy: 89.5. Result ID: 69c11f5447f34ce924a97886.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ResNet-18","Timing (Sec. × 200)":"20"}. This record does not assert independent reproduction.

### Base

Clean Accuracy: 88.86. Result ID: 69c11f5447f34ce924a9788c.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"EfficientNet-B0"}. This record does not assert independent reproduction.

### ConjMask (Exp. 3)

Clean Accuracy: 86.67. Result ID: 69c11f5447f34ce924a9788e.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"EfficientNet-B0","Timing (Sec. × 200)":"70"}. This record does not assert independent reproduction.

### ConjMask+LogitReg (Exp. 4)

Clean Accuracy: 84.91. Result ID: 69c11f5447f34ce924a9788f.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"EfficientNet-B0","Timing (Sec. × 200)":"55"}. This record does not assert independent reproduction.

### ConjMask+LogitReg (Exp. 4)

Clean Accuracy: 83.62. Result ID: 69c11f5447f34ce924a97887.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ResNet-18","Timing (Sec. × 200)":"30"}. This record does not assert independent reproduction.

### Base

Clean Accuracy: 83.37. Result ID: 69c11f5447f34ce924a97888.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ViT"}. This record does not assert independent reproduction.

### ConjMask (Exp. 3)

Clean Accuracy: 83.01. Result ID: 69c11f5447f34ce924a9788a.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ViT","Timing (Sec. × 200)":"50"}. This record does not assert independent reproduction.

### ConjMask+LogitReg (Exp. 4)

Clean Accuracy: 77.86. Result ID: 69c11f5447f34ce924a9788b.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

Recorded evaluation configuration: {"Model":"ViT","Timing (Sec. × 200)":"70"}. This record does not assert independent reproduction.

### TRADES-PGD

Clean Accuracy: 74.57. Result ID: 69c11f5447f34ce924a97885.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Model":"ResNet-18","Timing (Sec. × 200)":"100"}. This record does not assert independent reproduction.

### TRADES-PGD

Clean Accuracy: 71.95. Result ID: 69c11f5447f34ce924a97889.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Model":"ViT","Timing (Sec. × 200)":"120"}. This record does not assert independent reproduction.

### TRADES-PGD

Clean Accuracy: 56.88. Result ID: 69c11f5447f34ce924a9788d.

[Reporting paper](<https://www.sota2.com/research/paper/69c0c90e0636e5bf4afc3c63.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Model":"EfficientNet-B0","Timing (Sec. × 200)":"260"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
