Image Classification on CIFAR10 (test) (Natural & PGD Accuracy)
85.07Natural AccuracyPGD-2
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 85.07 | 45.27 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 83.91 | 46.01 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 83.83 | 46.14 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 82.98 | 0 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 82.1 | 47.77 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 81.65 | 47.93 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 81.6 | 47.56 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 81.09 | 9.95 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 80.56 | 48.31 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 80.55 | 50.67 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 80.48 | 47.91 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 79.65 | 6.37 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 78.97 | 32.99 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 77.52 | 27.34 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 76.2 | 43.74 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 74.4 | 32.17 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 74.17 | 34.87 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 72.37 | 38.6 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 72.31 | 24.32 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 71.3 | 36.23 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 71.15 | 36.52 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 70.84 | 0 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 68.07 | 33.14 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 67.2 | 29.34 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 66.54 | 0 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 66.46 | 0 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 65.48 | 0 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 64.56 | 23.87 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 62.96 | 27.14 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 61.84 | 28.2 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 61.11 | 0 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 60.37 | 27.9 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 48.45 | 11.24 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 45.84 | 0 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 36.43 | 0 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 34.7 | 16.1 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 31.58 | 10.62 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 29.79 | 8.3 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 27.08 | 12.97 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 25.23 | 11.53 |