Image Classification on CIFAR-100 (Accuracy, PSNR)
85.87AccuracyClean
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| CleanModel=ViT-L-162026.04 | 85.87 | 100 | |
| CleanModel=ResNet-502026.04 | 80.93 | 100 | |
| CleanModel=ResNet-182026.04 | 79.26 | 100 | |
| BSR (ε = 0.03)Model=ViT-L-162026.04 | 71.83 | 42.69 | |
| BSR (ε = 0.03)Model=ResNet-502026.04 | 70.32 | 42.68 | |
| BSR (ε = 0.03)Model=ResNet-182026.04 | 68.44 | 42.65 | |
| FGSM (ε = 0.06)Model=ViT-L-162026.04 | 24.57 | 25.12 | |
| FGSM (ε = 0.03)Model=ResNet-502026.04 | 17.47 | 30.22 | |
| PCA → FGSMModel=ResNet-502026.04 | 16.66 | 29.84 | |
| PatchSVD → FGSMModel=ResNet-502026.04 | 16.66 | 29.71 | |
| PGD (ε = 0.06)Model=ViT-L-162026.04 | 14.47 | 28.87 | |
| JPEG → FGSMModel=ResNet-502026.04 | 13.94 | 29.83 | |
| PatchSVD → FGSMModel=ViT-L-162026.04 | 12.16 | 27.55 | |
| PCA → FGSMModel=ViT-L-162026.04 | 11.88 | 27.52 | |
| Attention-FoolModel=ResNet-182026.04 | 11.84 | 30.82 | |
| JPEG → FGSMModel=ViT-L-162026.04 | 11.19 | 29.88 | |
| FGSM (ε = 0.03)Model=ResNet-182026.04 | 10.03 | 30.22 | |
| Attention-FoolModel=ResNet-502026.04 | 9.84 | 29.89 | |
| PCA → FGSMModel=ResNet-182026.04 | 9.77 | 29.84 | |
| PatchSVD → FGSMModel=ResNet-182026.04 | 9.42 | 29.71 | |
| JPEG → PGDModel=ResNet-50, Attack Sequence=Black text occurrence2026.04 | 8.91 | 28.71 | |
| JPEG → PGDModel=ResNet-50, Attack Sequence=Blue text occurrence2026.04 | 8.91 | 28.71 | |
| JPEG → FGSMModel=ResNet-182026.04 | 8.46 | 29.82 | |
| Attention-FoolModel=ViT-L-162026.04 | 7.85 | 31.34 | |
| AutoAttackModel=ViT-L-162026.04 | 6.79 | 32.65 | |
| AutoAttackModel=ResNet-502026.04 | 5.61 | 34.29 | |
| PatchSVD → PGDModel=ViT-L-162026.04 | 5.36 | 33.41 | |
| JPEG → PGDModel=ResNet-182026.04 | 4.73 | 28.71 | |
| PCA → PGDModel=ViT-L-162026.04 | 4.59 | 33.45 | |
| JPEG → PGDModel=ViT-L-162026.04 | 3.67 | 28.84 | |
| PGD (ε = 0.03)Model=ResNet-502026.04 | 0.12 | 34.56 | |
| PCA → PGDModel=ResNet-502026.04 | 0.07 | 33.48 | |
| PatchSVD → PGDModel=ResNet-502026.04 | 0.05 | 33.48 | |
| PGD (ε = 0.03)Model=ResNet-182026.04 | 0.01 | 34.15 | |
| PatchSVD → PGDModel=ResNet-182026.04 | 0.01 | 33.16 | |
| PCA → PGDModel=ResNet-182026.04 | 0 | 33.41 |