Image Classification on CIFAR-100 (Clean, AA, Mean, NRR)
60.6Clean AccuracyMMA
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| MMABackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 60.6 | 18.4 | 39.5 | 28.229 | |
| WABackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 57.26 | 25.83 | 41.545 | 35.601 | |
| KD+SWABackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 57.17 | 25.66 | 41.415 | 35.422 | |
| RAAT#Backbone=PreActResNet-18, Threat Model=L_inf2026.04 | 56.92 | 28.08 | 42.5 | 37.607 | |
| RPATBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 56.43 | 27.63 | 42.03 | 37.096 | |
| TEBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 56.41 | 25.84 | 41.125 | 35.444 | |
| ReBATBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 56.13 | 27.6 | 41.865 | 37.004 | |
| EWATBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 54.2 | 23.52 | 38.86 | 32.805 | |
| AWPBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 54.1 | 25.16 | 39.63 | 34.347 | |
| SOVRBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 52.1 | 24.3 | 38.2 | 33.142 | |
| GAIRATBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 52 | 19.8 | 35.9 | 28.68 | |
| MAILBackbone=PreActResNet-18, Threat Model=L_inf2026.04 | 46.5 | 16.7 | 31.6 | 24.574 |