Image Classification on CIFAR100 (test) (Natural and PGD-50-10 Robustness)
60.29Natural AccuracyR-FGSM
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 60.29 | 10.58 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 60.09 | 24.58 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 57.71 | 25.31 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 55.05 | 27.87 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 54.92 | 26.29 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 54.47 | 26.81 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 54 | 25.27 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 53.83 | 25.02 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 53.46 | 17.16 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 53.11 | 25.68 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 50.76 | 5.23 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 49.38 | 0 | |
| ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 49.07 | 14.76 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 47.5 | 12.69 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 47.42 | 20.29 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.12 | 47.41 | 22.27 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 46.81 | 16.56 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 46.16 | 18.75 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 46.05 | 0 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 45.98 | 19.03 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 45.83 | 18.13 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 44.06 | 16.41 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 42.39 | 15.01 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 39.84 | 16.57 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 37.93 | 14.05 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 36.8 | 13.77 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 36.8 | 14.31 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 33.1 | 11.8 | |
| PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 31.89 | 4.51 | |
| MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 28.33 | 0 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 26.2 | 0 | |
| PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 21.68 | 7.39 | |
| R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 18.5 | 4.9 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.12 | 18.19 | 0 | |
| N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 18.18 | 0 | |
| N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 16.95 | 5.45 | |
| Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 15.05 | 2.85 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.12 | 11.4 | 0 | |
| R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 11.03 | 0 | |
| FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.12 | 3.32 | 0 |