# Image Classification on CIFAR-100 (Adversarial Robustness: BA, FGSM, PGD, SparseFool, PAP)

Source: [Image Classification on CIFAR-100 (Adversarial Robustness: BA, FGSM, PGD, SparseFool, PAP)](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:37:43.711Z

Evaluation of Image Classification performance on the CIFAR-100 dataset, specifically measuring robustness against a suite of adversarial attacks including FGSM, PGD, SparseFool, and PAP, alongside benign accuracy.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | CIFAR-100 |
| Metric | Benign Accuracy (BA) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 11 of 11 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Benign Accuracy (BA)](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap.md?metric=Benign%20Accuracy%20(BA)>): Higher is better; unit: PERCENT.

- [FGSM Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap.md?metric=FGSM%20Accuracy>): Higher is better; unit: PERCENT.

- [PGD Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap.md?metric=PGD%20Accuracy>): Higher is better; unit: PERCENT.

- [SparseFool Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap.md?metric=SparseFool%20Accuracy>): Higher is better; unit: PERCENT.

- [PAP Accuracy](<https://www.sota2.com/research/sota/image-classification-on-cifar-100-adversarial-robustness-ba-fgsm-pgd-sparsefool-pap.md?metric=PAP%20Accuracy>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Benign Accuracy (BA) | Result date | Report paper |
| --- | --- | --- | --- |
| Lorica | 25.86 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Sylva | 24.92 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-TRADES | 23.41 | Not recorded | 68fa792a1e209131cea7c5d5 |
| DBFAT | 23.28 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Per-LoRA | 23.27 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-Gen-AF | 23.18 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-TRADES | 22.6 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-Gen-AF | 22.39 | Not recorded | 68fa792a1e209131cea7c5d5 |
| Per-Adv | 14.65 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FP-PGD-AT | 14.02 | Not recorded | 68fa792a1e209131cea7c5d5 |
| FA-PGD-AT | 11.89 | Not recorded | 68fa792a1e209131cea7c5d5 |

### Lorica

Benign Accuracy (BA): 25.86. Result ID: 699a8b725698665ec415a0f6.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Sylva

Benign Accuracy (BA): 24.92. Result ID: 699a8b725698665ec415a0f5.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-TRADES

Benign Accuracy (BA): 23.41. Result ID: 699a8b725698665ec415a0f0.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"TRADES","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### DBFAT

Benign Accuracy (BA): 23.28. Result ID: 699a8b725698665ec415a0f2.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6e961e209131cea40e66.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Per-LoRA

Benign Accuracy (BA): 23.27. Result ID: 699a8b725698665ec415a0f4.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa74601e209131cea6146b.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-Gen-AF

Benign Accuracy (BA): 23.18. Result ID: 699a8b725698665ec415a0f1.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa728e1e209131cea570cd.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"Gen-AF","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-TRADES

Benign Accuracy (BA): 22.6. Result ID: 699a8b725698665ec415a0ed.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa65f71e209131cea0d897.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"TRADES","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-Gen-AF

Benign Accuracy (BA): 22.39. Result ID: 699a8b725698665ec415a0ee.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa728e1e209131cea570cd.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"Gen-AF","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### Per-Adv

Benign Accuracy (BA): 14.65. Result ID: 699a8b725698665ec415a0f3.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa75051e209131cea654c5.md>)

Recorded evaluation configuration: {"Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FP-PGD-AT

Benign Accuracy (BA): 14.02. Result ID: 699a8b725698665ec415a0ef.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa665a1e209131cea0fbae.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedProx","Local Defense":"PGD-AT","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

### FA-PGD-AT

Benign Accuracy (BA): 11.89. Result ID: 699a8b725698665ec415a0ec.

[Reporting paper](<https://www.sota2.com/research/paper/68fa792a1e209131cea7c5d5.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa665a1e209131cea0fbae.md>)

Recorded evaluation configuration: {"Federated Strategy":"FedAvg","Local Defense":"PGD-AT","Backbone":"ViT-T/16"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
