Image Classification on CIFAR100 (Robust Accuracy)
23.78Robust AccuracyPGD-10 (20)
Evaluation Results
| Method | Links | |
|---|---|---|
| PGD-10 (20)Noise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 23.78 | |
| N-AAERNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 22.93 | |
| N-FGSMNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 22.68 | |
| PGD-2Noise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 22.52 | |
| Grad AlignNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 21.87 | |
| MultiGradNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 21.62 | |
| RS-AAERNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 21.41 | |
| ZeroGradNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 21.15 | |
| FreeATNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 18.28 | |
| PGD-10 (20)Noise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 15.61 | |
| N-AAERNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 14.73 | |
| N-FGSMNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 14.57 | |
| Grad AlignNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 13.78 | |
| PGD-2Noise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 13.69 | |
| FreeATNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 12.37 | |
| RS-AAERNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 12.31 | |
| PGD-10 (20)Noise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 10.93 | |
| N-AAERNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 10.35 | |
| N-FGSMNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 10.3 | |
| Grad AlignNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 9.64 | |
| PGD-2Noise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 9.56 | |
| RS-AAERNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 8.56 | |
| RS-FGSMNoise Magnitude=8/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 7.98 | |
| PGD-10 (20)Noise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 4.13 | |
| N-AAERNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 3.46 | |
| RS-AAERNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 2.93 | |
| Grad AlignNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 1.76 | |
| PGD-2Noise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 1.76 | |
| FreeATNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 | |
| FreeATNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 | |
| RS-FGSMNoise Magnitude=12/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 | |
| RS-FGSMNoise Magnitude=16/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 | |
| RS-FGSMNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 | |
| N-FGSMNoise Magnitude=32/255, Backbone=PreactResNet-18, Threat Model=L_inf, Evaluation Protocol=Auto Attack2024.04 | 0 |