Image Classification on CIFAR-100 (Clean and Robust Accuracy)
81.55Clean AccuracyDefault
Evaluation results
| Method | Links | ||
|---|---|---|---|
| DefaultBackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 81.55 | 0 | |
| TARO-3-AABackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 74.72 | 72.41 | |
| Score-Opt-NBackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 74.18 | 60.21 | |
| TARO-2Backbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 73.78 | 66.71 | |
| TARO-2-AABackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 72.76 | 70.65 | |
| TARO-3Backbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 72.61 | 68.66 | |
| Score-Opt-OBackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 70.53 | 66.11 | |
| AAOptBackbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 69.68 | 66.2 | |
| Yoon et al. [2021]Backbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 60.66 | 39.72 | |
| Hill et al. [2021]Backbone=WRN-28-10, Attack type=BPDA+EOT, Perturbation type (l_infinity)=l_infinity, Perturbation budget (epsilon)=8/2552026.05 | 51.66 | 26.1 |