Image Classification on CIFAR-10 (Adversarial Robustness PGD/CW/AA)
85.9Accuracy (Natural)PCG
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| PCGα=20%2025.01 | 85.9 | 58.3 | — | — | 55.9 | |
| LCG-GMMα=10%2025.01 | 85.8 | 57.6 | — | — | 55 | |
| Std. DDPMα=100%2025.01 | 85.7 | 61.8 | — | — | 58.4 | |
| LCG-KMα=20%2025.01 | 85.7 | 60.3 | — | — | 57.4 | |
| iGAT_DVERGECombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 85.48 | 42.53 | 44.5 | 57.77 | 39.48 | |
| LCG-GMMα=1%2025.01 | 85.3 | 55.8 | — | — | 52.6 | |
| iGAT_DVERGECombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 85.27 | 42.04 | 40.7 | 54.79 | 35.71 | |
| LCG-KMα=1%2025.01 | 85.2 | 56.5 | — | — | 53.1 | |
| DVERGECombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 85.12 | 41.39 | 43.4 | 57.33 | 39.2 | |
| iGAT_CLDLCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 85.05 | 45.45 | 42 | 58.22 | 37.14 | |
| iGAT_ADPCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 84.96 | 46.27 | 44.9 | 58.9 | 40.36 | |
| No Gen.α=0%2025.01 | 84.9 | 55.4 | — | — | 49.2 | |
| DVERGECombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 84.89 | 41.13 | 39.7 | 54.9 | 35.15 | |
| PCGα=10%2025.01 | 84.7 | 56.7 | — | — | 54.2 | |
| LCG-GMMα=20%2025.01 | 84.7 | 58.3 | — | — | 56.1 | |
| PCGα=1%2025.01 | 84.4 | 55.4 | — | — | 52.8 | |
| LCG-KMα=10%2025.01 | 84.2 | 57.9 | — | — | 55.6 | |
| CLDLCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 84.15 | 45.32 | 41.81 | 55.9 | 37.04 | |
| iGAT_CLDLCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 83.73 | 40.84 | 34.55 | 51.7 | 17.03 | |
| CLDLCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 83.69 | 39.34 | 32.8 | 51.63 | 15.3 | |
| TRSCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 83.15 | 12.32 | 10.32 | 39.21 | 9.1 | |
| TRSCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 82.67 | 11.89 | 10.78 | 37.12 | 7.66 | |
| SoECombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 82.36 | 32.51 | 23.88 | 41.04 | 18.37 | |
| SoECombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 82.19 | 38.54 | 37.59 | 59.69 | 32.68 | |
| ADPCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 82.14 | 39.63 | 38.9 | 52.93 | 35.53 | |
| iGAT_SoECombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 81.19 | 31.98 | 24.01 | 40.67 | 19.65 | |
| iGAT_SoECombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 81.05 | 40.58 | 39.65 | 57.91 | 34.5 | |
| GALCombiner Type=Average Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 80.85 | 41.72 | 41.2 | 54.94 | 36.76 | |
| iGAT_ADPCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 80.72 | 39.37 | 35 | 48.36 | 29.83 | |
| GALCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 80.65 | 31.95 | 27.8 | 50.68 | 9.26 | |
| ADPCombiner Type=Max Combiner, L∞-norm perturbation strength (ε)=8/2552023.10 | 80.08 | 36.62 | 34.6 | 47.69 | 27.72 |