Image Classification on CIFAR-10 standard (test) (Accuracy and Resource Usage Metrics)
2.34GFLOPSRandom
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RandomMechanism=AdaViT, Perturbation=Random Noise2024.02 | 2.34 | 66.7 | 54 | |
| CleanMechanism=AdaViT, Perturbation=None2024.02 | 2.35 | — | 55 | |
| Standard PGDMechanism=AdaViT, Perturbation=PGD2024.02 | 2.41 | 0 | 57 | |
| Sponge ExamplesMechanism=AdaViT, Perturbation=Sponge2024.02 | 2.57 | 25.7 | 60 | |
| Sponge ExamplesMechanism=ATS, Perturbation=Sponge2024.02 | 2.95 | 32.1 | 50 | |
| Standard PGDMechanism=ATS, Perturbation=PGD2024.02 | 3 | 0 | 52 | |
| UniversalMechanism=AdaViT, Mode=Universal perturbation2024.02 | 3.1 | 7.1 | 72 | |
| RandomMechanism=ATS, Perturbation=Random Noise2024.02 | 3.14 | 72.5 | 56 | |
| CleanMechanism=ATS, Perturbation=None2024.02 | 3.16 | — | 57 | |
| Universal PatchMechanism=AdaViT, Mode=Universal patch perturbation2024.02 | 3.22 | 18.6 | 75 | |
| SingleMechanism=AdaViT, Mode=Single image perturbation2024.02 | 3.31 | 89.2 | 75 | |
| RandomMechanism=A-ViT, Perturbation=Random Noise2024.02 | 3.48 | 62.4 | 69 | |
| CleanMechanism=A-ViT, Perturbation=None2024.02 | 3.51 | — | 70 | |
| Standard PGDMechanism=A-ViT, Perturbation=PGD2024.02 | 3.55 | 0 | 76 | |
| Sponge ExamplesMechanism=A-ViT, Perturbation=Sponge2024.02 | 3.56 | 5.5 | 72 | |
| UniversalMechanism=ATS, Mode=Universal perturbation2024.02 | 3.64 | 5.5 | 71 | |
| Universal PatchMechanism=ATS, Mode=Universal patch perturbation2024.02 | 3.67 | 11.6 | 74 | |
| SingleMechanism=ATS, Mode=Single image perturbation2024.02 | 4.41 | 100 | 94 | |
| UniversalMechanism=A-ViT, Mode=Universal perturbation2024.02 | 4.46 | 1 | 97 | |
| Clean w/oMechanism=None (Non-sparsified), Context=ATS evaluation2024.02 | 4.6 | — | 100 | |
| Clean w/oMechanism=None (Non-sparsified), Context=AdaViT evaluation2024.02 | 4.6 | — | 100 | |
| Clean w/oMechanism=None (Non-sparsified), Context=A-ViT evaluation2024.02 | 4.6 | — | 100 | |
| SingleMechanism=A-ViT, Mode=Single image perturbation2024.02 | 4.6 | 99.8 | 100 | |
| Universal PatchMechanism=A-ViT, Mode=Universal patch perturbation2024.02 | 4.6 | 55.2 | 99 |