Image Classification on CIFAR-100 (Robustness Evaluation)
45.7Robust AccuracyTRS
Evaluation results
| Method | Links | |
|---|---|---|
| TRSAttack=CW, para.=c = 0.012021.04 | 45.7 | |
| DVERGEAttack=CW, para.=c = 0.012021.04 | 44.8 | |
| GALAttack=CW, para.=c = 0.012021.04 | 32 | |
| DVERGEAttack=FGSM, para.=epsilon = 0.022021.04 | 29.7 | |
| GALAttack=FGSM, para.=epsilon = 0.022021.04 | 28.7 | |
| TRSAttack=CW, para.=c = 0.12021.04 | 26.9 | |
| DVERGEAttack=FGSM, para.=epsilon = 0.042021.04 | 25.4 | |
| TRSAttack=MIM (50), para.=epsilon = 0.012021.04 | 23.4 | |
| TRSAttack=PGD (50), para.=epsilon = 0.012021.04 | 23 | |
| TRSAttack=BIM (50), para.=epsilon = 0.012021.04 | 22.9 | |
| TRSAttack=APGD-LR, para.=epsilon = 0.012021.04 | 22.2 | |
| TRSAttack=APGD-CE, para.=epsilon = 0.012021.04 | 20.7 | |
| DVERGEAttack=CW, para.=c = 0.12021.04 | 20.3 | |
| TRSAttack=FGSM, para.=epsilon = 0.022021.04 | 19.3 | |
| DVERGEAttack=MIM (50), para.=epsilon = 0.012021.04 | 13.1 | |
| DVERGEAttack=BIM (50), para.=epsilon = 0.012021.04 | 12.1 | |
| DVERGEAttack=APGD-LR, para.=epsilon = 0.012021.04 | 11.8 | |
| ADPAttack=FGSM, para.=epsilon = 0.022021.04 | 11.5 | |
| DVERGEAttack=PGD (50), para.=epsilon = 0.012021.04 | 11.3 | |
| ADPAttack=CW, para.=c = 0.012021.04 | 11.3 | |
| DVERGEAttack=APGD-CE, para.=epsilon = 0.012021.04 | 11.3 | |
| GALAttack=CW, para.=c = 0.12021.04 | 10.7 | |
| TRSAttack=FGSM, para.=epsilon = 0.042021.04 | 9.5 | |
| GALAttack=BIM (50), para.=epsilon = 0.012021.04 | 7.6 | |
| ADPAttack=FGSM, para.=epsilon = 0.042021.04 | 6.4 | |
| TRSAttack=MIM (50), para.=epsilon = 0.022021.04 | 6.2 | |
| GALAttack=MIM (50), para.=epsilon = 0.012021.04 | 5.7 | |
| TRSAttack=EAD, para.=c = 1.02021.04 | 5.7 | |
| TRSAttack=BIM (50), para.=epsilon = 0.022021.04 | 5.4 | |
| GALAttack=PGD (50), para.=epsilon = 0.012021.04 | 5.4 | |
| TRSAttack=PGD (50), para.=epsilon = 0.022021.04 | 5.3 | |
| TRSAttack=APGD-LR, para.=epsilon = 0.022021.04 | 5.3 | |
| TRSAttack=APGD-CE, para.=epsilon = 0.022021.04 | 4.8 | |
| GALAttack=APGD-LR, para.=epsilon = 0.012021.04 | 4.3 | |
| GALAttack=APGD-CE, para.=epsilon = 0.012021.04 | 4.2 | |
| DVERGEAttack=BIM (50), para.=epsilon = 0.022021.04 | 2.9 | |
| GALAttack=FGSM, para.=epsilon = 0.042021.04 | 2.7 | |
| DVERGEAttack=MIM (50), para.=epsilon = 0.022021.04 | 2.6 | |
| DVERGEAttack=APGD-LR, para.=epsilon = 0.022021.04 | 2.1 | |
| DVERGEAttack=PGD (50), para.=epsilon = 0.022021.04 | 2 | |
| DVERGEAttack=APGD-CE, para.=epsilon = 0.022021.04 | 1.7 | |
| GALAttack=BIM (50), para.=epsilon = 0.022021.04 | 1.5 | |
| GALAttack=PGD (50), para.=epsilon = 0.022021.04 | 1.1 | |
| DVERGEAttack=EAD, para.=c = 1.02021.04 | 1 | |
| GALAttack=APGD-LR, para.=epsilon = 0.022021.04 | 0.6 | |
| ADPAttack=BIM (50), para.=epsilon = 0.012021.04 | 0.5 | |
| ADPAttack=MIM (50), para.=epsilon = 0.012021.04 | 0.5 | |
| GALAttack=MIM (50), para.=epsilon = 0.022021.04 | 0.5 | |
| ADPAttack=CW, para.=c = 0.12021.04 | 0.5 | |
| ADPAttack=PGD (50), para.=epsilon = 0.012021.04 | 0.4 | |
| GALAttack=APGD-CE, para.=epsilon = 0.022021.04 | 0.4 | |
| TRSAttack=EAD, para.=c = 5.02021.04 | 0.3 | |
| ADPAttack=APGD-LR, para.=epsilon = 0.012021.04 | 0.2 | |
| ADPAttack=APGD-CE, para.=epsilon = 0.012021.04 | 0.2 | |
| ADPAttack=BIM (50), para.=epsilon = 0.022021.04 | 0 | |
| ADPAttack=PGD (50), para.=epsilon = 0.022021.04 | 0 | |
| ADPAttack=MIM (50), para.=epsilon = 0.022021.04 | 0 | |
| ADPAttack=EAD, para.=c = 1.02021.04 | 0 | |
| GALAttack=EAD, para.=c = 1.02021.04 | 0 | |
| ADPAttack=EAD, para.=c = 5.02021.04 | 0 | |
| GALAttack=EAD, para.=c = 5.02021.04 | 0 | |
| DVERGEAttack=EAD, para.=c = 5.02021.04 | 0 | |
| ADPAttack=APGD-LR, para.=epsilon = 0.022021.04 | 0 | |
| ADPAttack=APGD-CE, para.=epsilon = 0.022021.04 | 0 |