Image Classification on CIFAR-10 (CAA3 and Semantic Attack Robustness)
95.2Clean AccuracyNormal
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| NormalBackbone Marker=†2022.02 | 95.2 | 0 | 0 | 0 | 59.7 | 44.2 | 0 | 0 | |
| NormalBackbone Marker=∗2022.02 | 94 | 0 | 0 | 0 | 46 | 29.9 | 0 | 0 | |
| FATBackbone Marker=∗, Constraint=l∞2022.02 | 88.1 | 29.8 | 17.1 | 12.8 | 18.7 | 9.8 | 6.1 | 1.5 | |
| MadryBackbone Marker=†, Constraint=l∞2022.02 | 87 | 30.8 | 18.8 | 19.1 | 31.5 | 21.3 | 10.8 | 3.7 | |
| AWPBackbone Marker=∗, Constraint=l∞2022.02 | 85.4 | 34.2 | 23.2 | 11.1 | 15.6 | 7.9 | 5.9 | 1.7 | |
| TradesBackbone Marker=∗, Constraint=l∞2022.02 | 84.9 | 30 | 19.8 | 10.1 | 16.6 | 8.1 | 5.8 | 1.5 | |
| GAT-fBackbone Marker=∗2022.02 | 83.4 | 40.2 | 34 | 30.7 | 71.6 | 67.8 | 31.2 | 20.1 | |
| GAT-fsBackbone Marker=∗2022.02 | 83.2 | 43.5 | 36.3 | 32.9 | 70.5 | 66.7 | 32.2 | 21.9 | |
| PATBackbone Marker=†, Variant=self2022.02 | 82.4 | 20.9 | 11.9 | 17.9 | 28.9 | 17.5 | 9.1 | 2.5 | |
| GAT-fBackbone Marker=†2022.02 | 82.3 | 39.9 | 33.3 | 28.9 | 69.9 | 66 | 30 | 18.8 | |
| GAT-fsBackbone Marker=†2022.02 | 82.1 | 43.5 | 36.6 | 32.5 | 69.9 | 66.6 | 32.3 | 21.8 | |
| PATBackbone Marker=†, Variant=alex2022.02 | 71.6 | 20.7 | 12.5 | 16.5 | 23.4 | 12.2 | 10.3 | 2.5 |