Image Classification on CIFAR-10 (test) (Clean and Robust Accuracy)
94.78Clean AccuracyDefault
Evaluation results
| Method | Links | ||
|---|---|---|---|
| DefaultBackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 94.78 | 0 | |
| Score-Opt-NBackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 93.94 | 90.07 | |
| TARO-3-AABackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 93.59 | 93.04 | |
| Wang et al.Backbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 93.5 | 79.83 | |
| TARO-2-AABackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 92.88 | 92.49 | |
| AAOptBackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 92.1 | 91.36 | |
| ADBMBackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 91.93 | 70.51 | |
| TARO-2Backbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 90.62 | 88.9 | |
| Score-Opt-OBackbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 90.23 | 81.36 | |
| TARO-3Backbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 89.4 | 86.87 | |
| Nie et al.Backbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 89.02 | 81.4 | |
| Yoon et al.Backbone=WRN-28-10, Attack Type=BPDA+EOT, Perturbation Type=l_infinity, Perturbation Budget (epsilon)=8/2552026.05 | 86.14 | 70.01 |