Image Classification on CIFAR-10 Corruption v1
85.98AccuracyTRADES-EMFF
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| TRADES-EMFFData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 85.98 | 3.05 | 2.5 | 87.43 | |
| EV-ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l22026.07 | 85.7 | 3.08 | 2.53 | 87.73 | |
| EV-ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l22026.07 | 85.68 | 3.07 | 2.54 | 87.66 | |
| TRADES-AWPData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 85.05 | 3.56 | 2.9 | 86.03 | |
| TRADESData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 84.93 | 3.31 | 2.72 | 87.63 | |
| EV-ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l22026.07 | 84.75 | 3.01 | 2.5 | 89.65 | |
| ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 84.63 | 3.21 | 2.69 | 88.41 | |
| TRADES-EMFFData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 84.6 | 3.98 | 3.1 | 85.35 | |
| AT-AWPData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 84.57 | 3.56 | 2.93 | 86.69 | |
| TRADES-AWPData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 84.16 | 4.02 | 3.22 | 85.26 | |
| ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 83.91 | 3.41 | 2.86 | 88.42 | |
| EV-ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l22026.07 | 83.8 | 3.74 | 3.04 | 87.29 | |
| TRADES-EMFFData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 83.63 | 3.74 | 3 | 87.87 | |
| AT-AWPData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 83.58 | 3.41 | 2.86 | 89.01 | |
| ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 83.5 | 3.35 | 2.81 | 89.48 | |
| IKL-ATData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 82.95 | 5.05 | 3.9 | 82.73 | |
| TRADESData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 82.86 | 4.77 | 3.73 | 84.05 | |
| TRADES-AWPData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 82.69 | 4.22 | 3.42 | 86.59 | |
| AT-AWPData Augmentation=AutoAug, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 82.69 | 4.29 | 3.49 | 86.1 | |
| IKL-ATData Augmentation=AugMix, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 82.49 | 5.31 | 4.05 | 82.59 | |
| TRADES-EMFFData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=TPAMI’252026.07 | 82.34 | 4.55 | 3.59 | 86.04 | |
| ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’182026.07 | 82.3 | 3.95 | 3.28 | 88.26 | |
| TRADES-AWPData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 82.17 | 4.52 | 3.62 | 86.12 | |
| TRADESData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 82.13 | 4.5 | 3.6 | 86.35 | |
| IKL-ATData Augmentation=Basic, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 82.01 | 4.62 | 3.65 | 86.22 | |
| AT-AWPData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’202026.07 | 81.78 | 4.44 | 3.63 | 86.81 | |
| TRADESData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=ICML’192026.07 | 81.71 | 4.52 | 3.61 | 87.09 | |
| IKL-ATData Augmentation=Cutout, Backbone=WRN-34-10, Threat Model=l2, Venue=NeurIPS’242026.07 | 80.31 | 6.34 | 4.76 | 82.14 |