Image Classification on CIFAR-10 (epsilon=8/255, test)
95Clean AccuracySong et al.
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Song et al.Technique=Gibbs Update, Backbone=WideResNet 28-10, Attack Protocol=BPDA+EOT, Perturbation budget=8/2552026.01 | 95 | — | — | — | 9 | — | — | — | |
| Yang et al.Technique=Mask+Recon, Backbone=WideResNet 28-10, Attack Protocol=BPDA+EOT, Perturbation budget=8/2552026.01 | 94 | — | — | — | 15 | — | — | — | |
| Rebuffi et al.Backbone=WRN-70-16, Defense Type=Adversarial Training (AT), Extra data used=true2026.01 | 92.22 | — | — | — | — | 69.97 | 66.56 | — | |
| Gowal et al.Backbone=WRN-70-16, Defense Type=Adversarial Training (AT), Extra data used=true2026.01 | 91.1 | — | — | — | — | 68.66 | 65.87 | — | |
| Gowal et al.Backbone=WRN-70-16, Defense Type=Adversarial Training (AT)2026.01 | 88.75 | — | — | — | — | 69.03 | 66.1 | — | |
| Pang et al.Backbone=WRN-28-10, Defense Type=Adversarial Training (AT)2026.01 | 88.62 | — | — | — | — | 64.95 | 61.04 | — | |
| Gowal et al.Backbone=WRN-28-10, Defense Type=Adversarial Training (AT), Extra data used=true2026.01 | 88.54 | — | — | — | — | 65.93 | 62.76 | — | |
| Gowal et al.Backbone=WRN-28-10, Defense Type=Adversarial Training (AT)2026.01 | 87.51 | — | — | — | — | 66.01 | 63.38 | — | |
| Hill et al.Technique=EBM+LD, Backbone=WideResNet 28-10, Attack Protocol=BPDA+EOT, Perturbation budget=8/2552026.01 | 84.12 | — | — | — | 54.9 | — | — | — | |
| SABRSource=Mao et al. (2025), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 56.06 | — | — | — | — | — | — | 34.26 | |
| MTL-IBPSource=De Palma et al. (2024b), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 55.29 | — | — | — | — | — | — | 34.49 | |
| CROWN-IBPSource=Zhang et al. (2020), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 55.11 | — | — | — | — | — | — | 33.77 | |
| SABRSource=Müller et al. (2023), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 54.93 | — | — | — | — | — | — | 34.96 | |
| MTL-IBPSource=Mao et al. (2025), Optimisation=Literature, epsilon=8/2552026.06 | 54.28 | — | — | — | — | — | — | 35.41 | |
| MTL-IBPSource=Mao et al. (2025), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 54.18 | — | — | — | — | — | — | 35.27 | |
| MTL-IBPSource=De Palma et al. (2024b), Optimisation=Literature, epsilon=8/2552026.06 | 53.35 | — | — | — | — | — | — | 35.44 | |
| SABRSource=Mao et al. (2025), Optimisation=Literature, epsilon=8/2552026.06 | 52.71 | — | — | — | — | — | — | 35.34 | |
| IBPSource=Shi et al. (2021), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 52.59 | — | — | — | — | — | — | 35.09 | |
| CROWN-IBPSource=Mao et al. (2025), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 52.47 | — | — | — | — | — | — | 34.41 | |
| SABRSource=Müller et al. (2023), Optimisation=Literature, epsilon=8/2552026.06 | 52.38 | — | — | — | — | — | — | 35.13 | |
| IBPSource=Mao et al. (2025), Optimisation=Ours (Novel Optimisation Procedure), epsilon=8/2552026.06 | 50.98 | — | — | — | — | — | — | 35.35 | |
| IBPSource=Shi et al. (2021), Optimisation=Literature, epsilon=8/2552026.06 | 48.94 | — | — | — | — | — | — | 34.97 | |
| IBPSource=Mao et al. (2025), Optimisation=Literature, epsilon=8/2552026.06 | 48.51 | — | — | — | — | — | — | 35.28 | |
| CROWN-IBPSource=Mao et al. (2025), Optimisation=Literature, epsilon=8/2552026.06 | 48.25 | — | — | — | — | — | — | 32.59 | |
| CROWN-IBPSource=Zhang et al. (2020), Optimisation=Literature, epsilon=8/2552026.06 | 46.29 | — | — | — | — | — | — | 33.38 | |
| A5/RCepsilon_CA=8/255, epsilon_D=0/255, epsilon_A_tr=8/2552023.05 | — | 58.63 | 69.25 | 70.63 | — | — | — | — | |
| A5/RCepsilon_CA=8/255, epsilon_D=4/255, epsilon_A_tr=8/2552023.05 | — | 54.05 | 62.8 | 64.44 | — | — | — | — | |
| A5/RCepsilon_CA=8/255, epsilon_D=8/255, epsilon_A_tr=8/2552023.05 | — | 50.74 | 56.63 | 59.49 | — | — | — | — | |
| A5/RCepsilon_CA=8/255, epsilon_D=16/255, epsilon_A_tr=8/2552023.05 | — | 39.15 | 41.33 | 44.22 | — | — | — | — | |
| A5/RCepsilon_CA=8/255, epsilon_D=32/255, epsilon_A_tr=8/2552023.05 | — | 41.59 | 43.01 | 45.55 | — | — | — | — |