Image Classification on CIFAR-10 (Robustness Evaluation)
88.1Accuracy (Natural)RoME+RANDOM
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| RoME+RANDOMEvaluation Attack=PGD2026.07 | 88.1 | 56.4 | 69.7 | 42.1 | 56.1 | 41.1 | |
| RoME+RANDOMEvaluation Attack=APGD2026.07 | 87.4 | 54.7 | 71.6 | 40 | 55.4 | 39.4 | |
| RANDOMEvaluation Attack=PGD2026.07 | 86.7 | 52.3 | 68.8 | 40.3 | 53.8 | 38.6 | |
| RANDOMEvaluation Attack=APGD2026.07 | 86.5 | 50.1 | 69.3 | 37.5 | 52.3 | 37.2 | |
| AVGEvaluation Attack=PGD2026.07 | 86.3 | 52.2 | 67.5 | 38.9 | 52.9 | 37.9 | |
| RoME+MAXEvaluation Attack=PGD2026.07 | 85.4 | 48.2 | 68.2 | 43.1 | 53.2 | 42.3 | |
| MAXEvaluation Attack=PGD2026.07 | 85.1 | 46.6 | 66.8 | 40.1 | 51.2 | 38.5 | |
| MSDEvaluation Attack=PGD2026.07 | 84.7 | 43.9 | 67.3 | 40.5 | 50.6 | 38.3 | |
| E-ATEvaluation Attack=APGD2026.07 | 83.2 | 50.3 | 68.9 | 40.6 | 53.3 | 39.7 | |
| MOREEvaluation Attack=PGD2026.07 | 82.6 | 44.3 | 42.4 | 33.7 | 40.1 | 31.1 | |
| RoME+MAXEvaluation Attack=APGD2026.07 | 82.5 | 48.9 | 67.3 | 44.2 | 53.5 | 43.7 | |
| RAMPEvaluation Attack=APGD2026.07 | 82.2 | 47.1 | 63.5 | 43.4 | 51.3 | 42.5 | |
| MAXEvaluation Attack=APGD2026.07 | 81.7 | 45.5 | 65.3 | 42.6 | 51.1 | 41.4 |