List your company
ResearchFormerly WizWand

Image Classification on CIFAR10 (test) (Natural & PGD Accuracy)

85.07Natural AccuracyPGD-2
22.836438.993255.1571.3068Dec 24, 2025
Updated 8mo ago

Evaluation results

MethodLinks
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1285.0745.27
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1283.9146.01
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1283.8346.14
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1282.980
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1282.147.77
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1281.6547.93
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1281.647.56
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1281.099.95
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1280.5648.31
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1280.5550.67
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1280.4847.91
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1279.656.37
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1278.9732.99
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1277.5227.34
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1276.243.74
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1274.432.17
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1274.1734.87
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1272.3738.6
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1272.3124.32
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1271.336.23
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1271.1536.52
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1270.840
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1268.0733.14
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1267.229.34
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1266.540
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1266.460
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1265.480
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1264.5623.87
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1262.9627.14
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1261.8428.2
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1261.110
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1260.3727.9
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1248.4511.24
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1245.840
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1236.430
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1234.716.1
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1231.5810.62
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1229.798.3
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1227.0812.97
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1225.2311.53