Image Classification on CIFAR-10 AutoAttack v1 (AA)
76.04AccuracyTRADES-AWP
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| TRADES-AWPData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 76.04 | 4.3 | 3.7 | 95.43 | |
| TRADES-AWPData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 75.44 | 4.43 | 3.82 | 95.67 | |
| EV-ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l22026.07 | 75.22 | 4.16 | 3.63 | 96.99 | |
| EV-ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l22026.07 | 75.14 | 4.31 | 3.73 | 96.55 | |
| IKL-ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 74.85 | 5.98 | 4.85 | 91.07 | |
| EV-ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l22026.07 | 74.59 | 4.37 | 3.79 | 97.02 | |
| EV-ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l22026.07 | 74.01 | 4.32 | 3.78 | 97.91 | |
| TRADES-AWPData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 73.98 | 4.97 | 4.25 | 95.5 | |
| IKL-ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 73.87 | 6.24 | 5.04 | 91.58 | |
| IKL-ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 73.86 | 5.34 | 4.46 | 94.61 | |
| IKL-ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 73.85 | 6.47 | 5.16 | 90.97 | |
| TRADES-AWPData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 73.75 | 5.08 | 4.33 | 95.42 | |
| AT-AWPData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 73.12 | 5.03 | 4.35 | 96.23 | |
| AT-AWPData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 72.91 | 5.04 | 4.37 | 96.47 | |
| AT-AWPData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 72.72 | 4.73 | 4.16 | 97.81 | |
| TRADESData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 72.56 | 5.01 | 4.33 | 97.15 | |
| TRADESData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 71.93 | 5.46 | 4.65 | 96.51 | |
| TRADES-EMFFData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 71.65 | 5.7 | 4.8 | 96.11 | |
| ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 71.57 | 5.11 | 4.47 | 97.88 | |
| AT-AWPData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 71.33 | 5.73 | 4.91 | 96.08 | |
| TRADESData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 71.11 | 5.94 | 5.03 | 95.82 | |
| TRADESData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 70.99 | 6.44 | 5.36 | 94.39 | |
| TRADES-EMFFData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 70.93 | 5.89 | 5 | 96.25 | |
| ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 70.72 | 5.28 | 4.63 | 98.33 | |
| ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 70.22 | 5.48 | 4.78 | 98.32 | |
| ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 70.16 | 5.37 | 4.71 | 98.77 | |
| TRADES-EMFFData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 69.75 | 6.77 | 5.59 | 95.19 | |
| TRADES-EMFFData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 69.24 | 6.89 | 5.73 | 95.32 | |
| EV-ATBackbone=PreActResNet18, Data Augmentation=Basic, Threat Model=l_inf2026.07 | 50.9 | — | — | — | |
| AT-AWPVenue=NeurIPS'20, Backbone=PreActResNet18, Data Augmentation=Basic, Threat Model=l_inf2026.07 | 49.69 | — | — | — | |
| ATVenue=ICML'18, Backbone=PreActResNet18, Data Augmentation=Basic, Threat Model=l_inf2026.07 | 48.12 | — | — | — |