Image Classification on CIFAR-10 (C-Acc, ASR)
92.2C-AccBadNets
Evaluation results
| Method | Links | ||
|---|---|---|---|
| BadNetsPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 92.2 | 0 | |
| BadNetsPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 92.1 | 100 | |
| BadNetsPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 92 | 100 | |
| BlendedPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 91.7 | 2.1 | |
| BppAttackPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 91.6 | 0.1 | |
| BppAttackPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 91.5 | 98.3 | |
| WaveAttackPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 91.5 | 99.8 | |
| BadNetsPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 91.3 | 100 | |
| Adapt-BlendPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 91.3 | 1.2 | |
| DSAPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 91.3 | 100 | |
| SSBAPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 91.2 | 98.1 | |
| SSBAPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 91.2 | 84.1 | |
| BlendedPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 91.1 | 100 | |
| SSBAPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 91.1 | — | |
| Adapt-BlendPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 91.1 | 3.6 | |
| DSAPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 91.1 | 97.8 | |
| SSBAPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 91 | 0.1 | |
| SSBAPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 91 | 0.2 | |
| BppAttackPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 91 | 5.1 | |
| BlendedPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 90.9 | 97.4 | |
| Adapt-BlendPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 90.8 | 0.2 | |
| BlendedPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 90.6 | 0.7 | |
| BlendedPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 90.6 | 92 | |
| BlendedPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 90.6 | 0 | |
| DSAPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 90.6 | 100 | |
| Adapt-BlendPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 90.3 | 93.6 | |
| SSBAPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 90.2 | 0 | |
| BppAttackPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 90.2 | 12.8 | |
| BppAttackPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 90.2 | 0 | |
| BadNetsPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 90.1 | 5.3 | |
| BadNetsPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 90 | 0.2 | |
| Adapt-BlendPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 89.8 | 92.7 | |
| DSAPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 89.2 | 60.2 | |
| WaveAttackPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 89.1 | 100 | |
| WaveAttackPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 88.7 | 100 | |
| BppAttackPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 88.4 | 0.2 | |
| DSAPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 88 | 87.8 | |
| Adapt-BlendPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 87.8 | 95.4 | |
| DSAPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 87.1 | 79.4 | |
| WaveAttackPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 80.1 | 8.6 | |
| WaveAttackPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 76.6 | 5.2 | |
| WaveAttackPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 74.1 | 13.8 |