Image Classification on CIFAR10 (Robustness and Accuracy)
95.7AccuracySeTa
Evaluation results
| Method | Links | ||
|---|---|---|---|
| SeTaBackbone=ResNet18, Pruning Rate=30%2026.04 | 95.7 | — | |
| ResNet18 (Full)Backbone=ResNet18, Pruning Rate=0%2026.04 | 95.6 | — | |
| InfoBatch (adjusted epochs)Backbone=ResNet18, Pruning Rate=30%2026.04 | 95.6 | — | |
| InfoBatch (same epochs)Backbone=ResNet18, Pruning Rate=30%2026.04 | 95.6 | — | |
| BLS-InfoBatchBackbone=ResNet18, Pruning Rate=30%2026.04 | 95.6 | — | |
| BLS-SeTaBackbone=ResNet18, Pruning Rate=30%2026.04 | 95.6 | — | |
| GraNd-4Backbone=ResNet18, Pruning Rate=30%2026.04 | 95.3 | — | |
| EL2N-20Backbone=ResNet18, Pruning Rate=30%2026.04 | 95.3 | — | |
| UCBBackbone=ResNet18, Pruning Rate=30%2026.04 | 95.3 | — | |
| SeTaBackbone=ResNet18, Pruning Rate=50%2026.04 | 95.3 | — | |
| BLS-SeTaBackbone=ResNet18, Pruning Rate=50%2026.04 | 95.3 | — | |
| epsilon-greedyBackbone=ResNet18, Pruning Rate=30%2026.04 | 95.2 | — | |
| EL2N-20Backbone=ResNet18, Pruning Rate=50%2026.04 | 95.1 | — | |
| InfoBatch (adjusted epochs)Backbone=ResNet18, Pruning Rate=50%2026.04 | 95.1 | — | |
| BLS-InfoBatchBackbone=ResNet18, Pruning Rate=50%2026.04 | 95.1 | — | |
| InfoBatch (same epochs)Backbone=ResNet18, Pruning Rate=50%2026.04 | 95 | — | |
| SeTaBackbone=ResNet18, Pruning Rate=70%2026.04 | 95 | — | |
| BLS-SeTaBackbone=ResNet18, Pruning Rate=70%2026.04 | 95 | — | |
| DPBackbone=ResNet18, Pruning Rate=30%2026.04 | 94.9 | — | |
| epsilon-greedyBackbone=ResNet18, Pruning Rate=50%2026.04 | 94.9 | — | |
| Random*Backbone=ResNet18, Pruning Rate=30%2026.04 | 94.8 | — | |
| UCBBackbone=ResNet18, Pruning Rate=50%2026.04 | 94.7 | — | |
| InfoBatch (adjusted epochs)Backbone=ResNet18, Pruning Rate=70%2026.04 | 94.7 | — | |
| RandomBackbone=ResNet18, Pruning Rate=30%2026.04 | 94.6 | — | |
| GraNd-4Backbone=ResNet18, Pruning Rate=50%2026.04 | 94.6 | — | |
| Random*Backbone=ResNet18, Pruning Rate=50%2026.04 | 94.5 | — | |
| BLS-InfoBatchBackbone=ResNet18, Pruning Rate=70%2026.04 | 94.5 | — | |
| InfoBatch (same epochs)Backbone=ResNet18, Pruning Rate=70%2026.04 | 94.4 | — | |
| epsilon-greedyBackbone=ResNet18, Pruning Rate=70%2026.04 | 94.1 | — | |
| UCBBackbone=ResNet18, Pruning Rate=70%2026.04 | 93.9 | — | |
| DPBackbone=ResNet18, Pruning Rate=50%2026.04 | 93.8 | — | |
| RandomBackbone=ResNet18, Pruning Rate=50%2026.04 | 93.3 | — | |
| Random*Backbone=ResNet18, Pruning Rate=70%2026.04 | 93 | — | |
| EL2N-20Backbone=ResNet18, Pruning Rate=70%2026.04 | 91.9 | — | |
| GraNd-4Backbone=ResNet18, Pruning Rate=70%2026.04 | 91.2 | — | |
| DPBackbone=ResNet18, Pruning Rate=70%2026.04 | 90.8 | — | |
| RandomBackbone=ResNet18, Pruning Rate=70%2026.04 | 90.2 | — | |
| CLIPDefense Category=None, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 85.12 | 0.43 | |
| CLIPattack=10-step PGD, epsilon=1/2552025.11 | 85.12 | 0.74 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 85.08 | 0.01 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 85.08 | 0.01 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 85.08 | 0.79 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 85.08 | 0 | |
| CLIP-FTDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 84.9 | 2.75 | |
| CLIP-FTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 84.9 | 3.34 | |
| TTEDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 84.74 | 3.47 | |
| TTEmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 84.74 | 41.35 | |
| R-TPTDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 82.19 | 33.84 | |
| R-TPTmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 82.19 | 70.8 | |
| EnCAggMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 81.86 | — | |
| EnCAggMalicious Client Ratio=60%, Attack Type=UA-FedRec2026.05 | 81.54 | — | |
| COSMOSdata heterogeneity=Dirichlet, alpha=100, performance type=Final-round2026.05 | 81.4 | — | |
| DPFLAMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 81.4 | — | |
| TTCDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 81.18 | 28.51 | |
| TTCmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 81.18 | 28.75 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 81.04 | 84.72 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 81.04 | 85.18 | |
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 81.04 | 79.24 | |
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 81.04 | 91.58 | |
| ATACmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 81.03 | 81.03 | |
| EnCAggMalicious Client Ratio=10%, Attack Type=LIE2026.05 | 81.01 | — | |
| EnCAggMalicious Client Ratio=60%, Attack Type=LIE2026.05 | 80.69 | — | |
| EnCAggMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 80.58 | — | |
| EnCAggMalicious Client Ratio=60%, Attack Type=Min-Max2026.05 | 80.39 | — | |
| FLGuardianMalicious Client Ratio=10%, Attack Type=LIE2026.05 | 80.38 | — | |
| FLGuardianMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 80.12 | — | |
| FLTrustMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 80.09 | — | |
| FLGuardianMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 80.02 | — | |
| COMETdata heterogeneity=Dirichlet, alpha=100, performance type=Final-round2026.05 | 79.8 | — | |
| FLTrustMalicious Client Ratio=60%, Attack Type=UA-FedRec2026.05 | 79.44 | — | |
| ATACDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 79.39 | 91.8 | |
| FAREDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 78.46 | 5.42 | |
| FedCTdata heterogeneity=Dirichlet, alpha=100, performance type=Final-round2026.05 | 77.2 | — | |
| FAREmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 74.44 | 19.65 | |
| KrumMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 73.78 | — | |
| KrumMalicious Client Ratio=10%, Attack Type=LIE2026.05 | 73.25 | — | |
| PMG-AFTDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 71.45 | 15.59 | |
| KrumMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 71.36 | — | |
| PMG-AFTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 70.69 | 40.66 | |
| FedMDdata heterogeneity=Dirichlet, alpha=100, performance type=Final-round2026.05 | 70 | — | |
| TeCoADefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 65.15 | 11.7 | |
| TeCoAmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 64.61 | 33.61 | |
| FLTrustMalicious Client Ratio=10%, Attack Type=LIE2026.05 | 56.48 | — | |
| FLTrustMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 53.44 | — | |
| AdvFLYP_fullAttack Algorithm=PGD, Zero-shot evaluation=true2026.04 | 52.24 | — | |
| TMeanMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 51.76 | — | |
| AdvFLYP_fullAttack Algorithm=AVG, Zero-shot evaluation=true2026.04 | 50.97 | — | |
| AdvFLYP_fullAttack Algorithm=CW, Zero-shot evaluation=true2026.04 | 50.51 | — | |
| AdvFLYP_fullAttack Algorithm=AutoAttack, Zero-shot evaluation=true2026.04 | 50.15 | — | |
| MedianMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 46.7 | — | |
| AdvFLYPAttack Algorithm=PGD, Zero-shot evaluation=true2026.04 | 45.55 | — | |
| AdvFLYPAttack Algorithm=CW, Zero-shot evaluation=true2026.04 | 45.13 | — | |
| AdvFLYPAttack Algorithm=AVG, Zero-shot evaluation=true2026.04 | 45.02 | — | |
| AdvFLYPAttack Algorithm=AutoAttack, Zero-shot evaluation=true2026.04 | 44.37 | — | |
| FedSGDMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 43.29 | — | |
| PMG-AFTAttack Algorithm=PGD, Zero-shot evaluation=true2026.04 | 42.06 | — | |
| DPFLAMalicious Client Ratio=10%, Attack Type=Min-Max2026.05 | 41.38 | — | |
| PMG-AFTAttack Algorithm=AVG, Zero-shot evaluation=true2026.04 | 40.61 | — | |
| PMG-AFTAttack Algorithm=CW, Zero-shot evaluation=true2026.04 | 40.53 | — | |
| FedSGDMalicious Client Ratio=10%, Attack Type=UA-FedRec2026.05 | 40.12 | — |