# Image Classification on CIFAR-10 (test) (Adversarial Robustness - PGD 100 & Auto Attack)

Source: [Image Classification on CIFAR-10 (test) (Adversarial Robustness - PGD 100 & Auto Attack)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-test-adversarial-robustness-pgd-100-and-auto-attack>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:39:15.405Z

Evaluation of Image Classification performance on the CIFAR-10 test set focusing on adversarial robustness, specifically reporting clean accuracy, PGD accuracy at 100 iterations, and Auto Attack results.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | CIFAR-10 (test) |
| Metric | Clean Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 16 of 16 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Clean Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-test-adversarial-robustness-pgd-100-and-auto-attack.md?metric=Clean%20Accuracy>): Higher is better; unit: PERCENT.

- [PGD Accuracy (100 Iterations)](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-test-adversarial-robustness-pgd-100-and-auto-attack.md?metric=PGD%20Accuracy%20(100%20Iterations)>): Higher is better; unit: PERCENT.

- [Auto Attack Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-10-test-adversarial-robustness-pgd-100-and-auto-attack.md?metric=Auto%20Attack%20Accuracy>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Clean Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| MixACM (w/o Mixup) | 91.17 | Not recorded | 68fa6b361e209131cea2cf0b |
| MixACM (w/ Mixup) | 90.76 | Not recorded | 68fa6b361e209131cea2cf0b |
| RKD | 89.38 | Not recorded | 68fa6b361e209131cea2cf0b |
| IGAM | 88.7 | Not recorded | 68fa6b361e209131cea2cf0b |
| LAT | 87.8 | Not recorded | 68fa6b361e209131cea2cf0b |
| YOPO | 87.2 | Not recorded | 68fa6b361e209131cea2cf0b |
| AT | 87.14 | Not recorded | 68fa6b361e209131cea2cf0b |
| Adv. Pretraining | 87.1 | Not recorded | 68fa6b361e209131cea2cf0b |
| BOT TRADES | 86.43 | Not recorded | 68fa6b361e209131cea2cf0b |
| TLA | 86.21 | Not recorded | 68fa6b361e209131cea2cf0b |
| Free AT | 86.11 | Not recorded | 68fa6b361e209131cea2cf0b |
| AWP | 85.36 | Not recorded | 68fa6b361e209131cea2cf0b |
| Overfitting | 85.34 | Not recorded | 68fa6b361e209131cea2cf0b |
| TRADES | 84.92 | Not recorded | 68fa6b361e209131cea2cf0b |
| FAT | 84.52 | Not recorded | 68fa6b361e209131cea2cf0b |
| MART | 83.07 | Not recorded | 68fa6b361e209131cea2cf0b |

### MixACM (w/o Mixup)

Clean Accuracy: 91.17. Result ID: 698e7150ffc3901de09da2a9.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Implementation](<https://www.sota2.com/awaisrauf.github.io/MixACM>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":false}. This record does not assert independent reproduction.

### MixACM (w/ Mixup)

Clean Accuracy: 90.76. Result ID: 698e7150ffc3901de09da2aa.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Implementation](<https://www.sota2.com/awaisrauf.github.io/MixACM>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":false}. This record does not assert independent reproduction.

### RKD

Clean Accuracy: 89.38. Result ID: 698e7150ffc3901de09da2a8.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa67d71e209131cea18dc3.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":false}. This record does not assert independent reproduction.

### IGAM

Clean Accuracy: 88.7. Result ID: 698e7150ffc3901de09da2a7.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa689e1e209131cea1d204.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":false}. This record does not assert independent reproduction.

### LAT

Clean Accuracy: 87.8. Result ID: 698e7150ffc3901de09da29c.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f11e209131cea0d431.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### YOPO

Clean Accuracy: 87.2. Result ID: 698e7150ffc3901de09da29e.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa56591e209131ce99c1b0.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### AT

Clean Accuracy: 87.14. Result ID: 698e7150ffc3901de09da29b.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa665a1e209131cea0fbae.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### Adv. Pretraining

Clean Accuracy: 87.1. Result ID: 698e7150ffc3901de09da2a6.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa66911e209131cea10e94.md>)

Recorded evaluation configuration: {"Model":"WRN-28-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### BOT TRADES

Clean Accuracy: 86.43. Result ID: 698e7150ffc3901de09da2a5.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa69b11e209131cea237bb.md>)

Recorded evaluation configuration: {"Model":"WRN-34-20","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### TLA

Clean Accuracy: 86.21. Result ID: 698e7150ffc3901de09da29d.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa66901e209131cea10e27.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### Free AT

Clean Accuracy: 86.11. Result ID: 698e7150ffc3901de09da29f.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa66ad1e209131cea11a3f.md>)

[Implementation](<https://github.com/ashafahi/free_adv_train>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### AWP

Clean Accuracy: 85.36. Result ID: 698e7150ffc3901de09da2a2.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa687e1e209131cea1c519.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### Overfitting

Clean Accuracy: 85.34. Result ID: 698e7150ffc3901de09da2a4.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa67251e209131cea14aa2.md>)

Recorded evaluation configuration: {"Model":"WRN-34-20","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### TRADES

Clean Accuracy: 84.92. Result ID: 698e7150ffc3901de09da2a0.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### FAT

Clean Accuracy: 84.52. Result ID: 698e7150ffc3901de09da2a3.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa68461e209131cea1af64.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

### MART

Clean Accuracy: 83.07. Result ID: 698e7150ffc3901de09da2a1.

[Reporting paper](<https://www.sota2.com/research/paper/68fa6b361e209131cea2cf0b.md>)

Recorded evaluation configuration: {"Model":"WRN-34-10","Extra B.P. Steps":true}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.