Image Classification on CIFAR-100 (test) (TER/ASR Reporting)
21Test Error Rate (TER)Zeno++
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Zeno++Attack Type=Scaling2026.04 | 21 | 68 | |
| AsyncSGDAttack Type=No attack2026.04 | 43 | — | |
| AFLGuardAttack Type=No attack2026.04 | 43 | — | |
| SecureAFLAttack Type=No attack2026.04 | 43 | — | |
| SecureAFLAttack Type=Gaussian2026.04 | 44 | — | |
| SecureAFLAttack Type=Labelflip2026.04 | 46 | — | |
| KardamAttack Type=No attack2026.04 | 47 | — | |
| AFLGuardAttack Type=Gaussian2026.04 | 47 | — | |
| KardamAttack Type=Labelflip2026.04 | 48 | — | |
| Zeno++Attack Type=No attack2026.04 | 48 | — | |
| SecureAFLAttack Type=Signflip2026.04 | 49 | — | |
| SecureAFLAttack Type=PGD2026.04 | 49 | 2 | |
| AFLGuardAttack Type=Signflip2026.04 | 50 | — | |
| Zeno++Attack Type=Labelflip2026.04 | 51 | — | |
| Zeno++Attack Type=Signflip2026.04 | 51 | — | |
| SecureAFLAttack Type=3DFed2026.04 | 51 | 5 | |
| BASGDAttack Type=No attack2026.04 | 52 | — | |
| SecureAFLAttack Type=DBA2026.04 | 52 | 7 | |
| AsyncSGDAttack Type=Labelflip2026.04 | 53 | — | |
| BASGDAttack Type=Labelflip2026.04 | 53 | — | |
| SecureAFLAttack Type=Scaling2026.04 | 53 | 3 | |
| SecureAFLAttack Type=Neurotoxin2026.04 | 53 | 9 | |
| SecureAFLAttack Type=Min-Max2026.04 | 53 | — | |
| KardamAttack Type=Signflip2026.04 | 54 | — | |
| AFLGuardAttack Type=Labelflip2026.04 | 54 | — | |
| SageflowAttack Type=No attack2026.04 | 56 | — | |
| SecureAFLAttack Type=Adaptive2026.04 | 56 | — | |
| SageflowAttack Type=Labelflip2026.04 | 59 | — | |
| Zeno++Attack Type=Gaussian2026.04 | 60 | — | |
| AsyncSGDAttack Type=Neurotoxin2026.04 | 61 | 61 | |
| KardamAttack Type=Gaussian2026.04 | 61 | — | |
| SageflowAttack Type=Neurotoxin2026.04 | 61 | 13 | |
| KardamAttack Type=3DFed2026.04 | 63 | 37 | |
| Zeno++Attack Type=DBA2026.04 | 63 | 15 | |
| Zeno++Attack Type=Min-Max2026.04 | 63 | — | |
| BASGDAttack Type=Signflip2026.04 | 64 | — | |
| AFLGuardAttack Type=Scaling2026.04 | 65 | 18 | |
| AsyncSGDAttack Type=Signflip2026.04 | 66 | — | |
| AsyncSGDAttack Type=PGD2026.04 | 67 | 52 | |
| Zeno++Attack Type=3DFed2026.04 | 67 | 17 | |
| AFLGuardAttack Type=DBA2026.04 | 67 | 48 | |
| AFLGuardAttack Type=PGD2026.04 | 67 | 74 | |
| KardamAttack Type=Neurotoxin2026.04 | 68 | 38 | |
| SageflowAttack Type=PGD2026.04 | 68 | 13 | |
| AFLGuardAttack Type=3DFed2026.04 | 68 | 53 | |
| AFLGuardAttack Type=Neurotoxin2026.04 | 70 | 38 | |
| KardamAttack Type=PGD2026.04 | 71 | 54 | |
| Zeno++Attack Type=PGD2026.04 | 72 | 19 | |
| Zeno++Attack Type=Neurotoxin2026.04 | 74 | 26 | |
| SageflowAttack Type=Signflip2026.04 | 75 | — | |
| BASGDAttack Type=Neurotoxin2026.04 | 76 | 15 | |
| BASGDAttack Type=PGD2026.04 | 79 | 26 | |
| Zeno++Attack Type=Adaptive2026.04 | 83 | — | |
| AFLGuardAttack Type=Adaptive2026.04 | 85 | — | |
| SageflowAttack Type=Scaling2026.04 | 87 | 97 | |
| BASGDAttack Type=Scaling2026.04 | 89 | 95 | |
| SageflowAttack Type=DBA2026.04 | 89 | 99 | |
| AsyncSGDAttack Type=Gaussian2026.04 | 90 | — | |
| BASGDAttack Type=Gaussian2026.04 | 90 | — | |
| KardamAttack Type=Adaptive2026.04 | 91 | — | |
| BASGDAttack Type=DBA2026.04 | 91 | 94 | |
| SageflowAttack Type=Gaussian2026.04 | 91 | — | |
| AFLGuardAttack Type=Min-Max2026.04 | 92 | — | |
| KardamAttack Type=Scaling2026.04 | 93 | 100 | |
| KardamAttack Type=DBA2026.04 | 93 | 100 | |
| SageflowAttack Type=Adaptive2026.04 | 93 | — | |
| AsyncSGDAttack Type=Adaptive2026.04 | 94 | — | |
| SageflowAttack Type=Min-Max2026.04 | 94 | — | |
| AsyncSGDAttack Type=Scaling2026.04 | 95 | 100 | |
| AsyncSGDAttack Type=DBA2026.04 | 95 | 100 | |
| AsyncSGDAttack Type=3DFed2026.04 | 95 | 100 | |
| AsyncSGDAttack Type=Min-Max2026.04 | 95 | — | |
| KardamAttack Type=Min-Max2026.04 | 95 | — | |
| BASGDAttack Type=3DFed2026.04 | 95 | 100 | |
| BASGDAttack Type=Min-Max2026.04 | 95 | — | |
| BASGDAttack Type=Adaptive2026.04 | 95 | — | |
| SageflowAttack Type=3DFed2026.04 | 95 | 100 |