Image Classification on CIFAR-10 (TER, ASR)
22TERAsyncSGD
Evaluation results
| Method | Links | ||
|---|---|---|---|
| AsyncSGDAttack Scenario=No attack2026.04 | 22 | — | |
| Zeno++Attack Scenario=No attack2026.04 | 23 | — | |
| SecureAFLAttack Scenario=No attack2026.04 | 23 | — | |
| KardamAttack Scenario=No attack2026.04 | 25 | — | |
| AFLGuardAttack Scenario=No attack2026.04 | 25 | — | |
| SecureAFLAttack Scenario=DBA2026.04 | 26 | 5 | |
| SecureAFLAttack Scenario=Neurotoxin2026.04 | 26 | 7 | |
| SageflowAttack Scenario=No attack2026.04 | 28 | — | |
| SecureAFLAttack Scenario=3DFed2026.04 | 28 | 1 | |
| BASGDAttack Scenario=No attack2026.04 | 29 | — | |
| SecureAFLAttack Scenario=Labelflip2026.04 | 29 | — | |
| SecureAFLAttack Scenario=Signflip2026.04 | 29 | — | |
| SecureAFLAttack Scenario=Scaling2026.04 | 29 | 3 | |
| SecureAFLAttack Scenario=Gaussian2026.04 | 30 | — | |
| SecureAFLAttack Scenario=PGD2026.04 | 30 | 10 | |
| Zeno++Attack Scenario=Labelflip2026.04 | 32 | — | |
| Zeno++Attack Scenario=Adaptive2026.04 | 32 | — | |
| SecureAFLAttack Scenario=Min-Max2026.04 | 32 | — | |
| KardamAttack Scenario=Labelflip2026.04 | 33 | — | |
| KardamAttack Scenario=Signflip2026.04 | 33 | — | |
| Zeno++Attack Scenario=Signflip2026.04 | 33 | — | |
| Zeno++Attack Scenario=Gaussian2026.04 | 33 | — | |
| Zeno++Attack Scenario=Min-Max2026.04 | 34 | — | |
| SecureAFLAttack Scenario=Adaptive2026.04 | 35 | — | |
| AFLGuardAttack Scenario=Labelflip2026.04 | 36 | — | |
| AsyncSGDAttack Scenario=Labelflip2026.04 | 37 | — | |
| AFLGuardAttack Scenario=Signflip2026.04 | 37 | — | |
| AFLGuardAttack Scenario=Gaussian2026.04 | 37 | — | |
| AFLGuardAttack Scenario=Adaptive2026.04 | 37 | — | |
| BASGDAttack Scenario=Labelflip2026.04 | 39 | — | |
| AFLGuardAttack Scenario=Min-Max2026.04 | 39 | — | |
| BASGDAttack Scenario=Signflip2026.04 | 42 | — | |
| AFLGuardAttack Scenario=DBA2026.04 | 42 | 30 | |
| Zeno++Attack Scenario=Neurotoxin2026.04 | 43 | 37 | |
| AFLGuardAttack Scenario=Scaling2026.04 | 44 | 26 | |
| KardamAttack Scenario=Gaussian2026.04 | 45 | — | |
| AFLGuardAttack Scenario=Neurotoxin2026.04 | 45 | 32 | |
| AFLGuardAttack Scenario=3DFed2026.04 | 46 | 17 | |
| AsyncSGDAttack Scenario=Signflip2026.04 | 48 | — | |
| KardamAttack Scenario=3DFed2026.04 | 48 | 29 | |
| SageflowAttack Scenario=Labelflip2026.04 | 48 | — | |
| AFLGuardAttack Scenario=PGD2026.04 | 48 | 32 | |
| KardamAttack Scenario=PGD2026.04 | 49 | 68 | |
| Zeno++Attack Scenario=PGD2026.04 | 52 | 49 | |
| Zeno++Attack Scenario=3DFed2026.04 | 53 | 39 | |
| AsyncSGDAttack Scenario=Neurotoxin2026.04 | 56 | 88 | |
| KardamAttack Scenario=Scaling2026.04 | 56 | 42 | |
| Zeno++Attack Scenario=DBA2026.04 | 56 | 51 | |
| SageflowAttack Scenario=Signflip2026.04 | 58 | — | |
| Zeno++Attack Scenario=Scaling2026.04 | 63 | 54 | |
| AsyncSGDAttack Scenario=PGD2026.04 | 70 | 97 | |
| BASGDAttack Scenario=Neurotoxin2026.04 | 70 | 56 | |
| KardamAttack Scenario=Neurotoxin2026.04 | 71 | 71 | |
| BASGDAttack Scenario=PGD2026.04 | 73 | 43 | |
| SageflowAttack Scenario=Neurotoxin2026.04 | 79 | 92 | |
| AsyncSGDAttack Scenario=Gaussian2026.04 | 80 | — | |
| BASGDAttack Scenario=Gaussian2026.04 | 81 | — | |
| SageflowAttack Scenario=Adaptive2026.04 | 81 | — | |
| KardamAttack Scenario=Min-Max2026.04 | 82 | — | |
| SageflowAttack Scenario=Gaussian2026.04 | 83 | — | |
| AsyncSGDAttack Scenario=Min-Max2026.04 | 84 | — | |
| AsyncSGDAttack Scenario=Scaling2026.04 | 85 | 100 | |
| BASGDAttack Scenario=DBA2026.04 | 85 | 97 | |
| SageflowAttack Scenario=PGD2026.04 | 85 | 99 | |
| SageflowAttack Scenario=Min-Max2026.04 | 85 | — | |
| AsyncSGDAttack Scenario=DBA2026.04 | 86 | 100 | |
| AsyncSGDAttack Scenario=Adaptive2026.04 | 86 | — | |
| KardamAttack Scenario=Adaptive2026.04 | 87 | — | |
| BASGDAttack Scenario=Scaling2026.04 | 87 | 97 | |
| SageflowAttack Scenario=DBA2026.04 | 87 | 100 | |
| BASGDAttack Scenario=Min-Max2026.04 | 88 | — | |
| BASGDAttack Scenario=Adaptive2026.04 | 89 | — | |
| SageflowAttack Scenario=Scaling2026.04 | 89 | 100 | |
| AsyncSGDAttack Scenario=3DFed2026.04 | 90 | 100 | |
| KardamAttack Scenario=DBA2026.04 | 90 | 100 | |
| BASGDAttack Scenario=3DFed2026.04 | 90 | 100 | |
| SageflowAttack Scenario=3DFed2026.04 | 90 | 100 |