List your company
ResearchFormerly WizWand

Image Classification on CIFAR100 (test) (Natural and PGD-50-10 Robustness)

60.29Natural AccuracyR-FGSM
1.041216.423131.80547.1869Dec 24, 2025
Updated 8mo ago

Evaluation results

MethodLinks
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1260.2910.58
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1260.0924.58
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1257.7125.31
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1255.0527.87
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1254.9226.29
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1254.4726.81
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.125425.27
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1253.8325.02
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1253.4617.16
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1253.1125.68
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1250.765.23
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1249.380
ZeroGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1249.0714.76
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1247.512.69
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1247.4220.29
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=8/2552025.1247.4122.27
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1246.8116.56
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1246.1618.75
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1246.050
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1245.9819.03
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1245.8318.13
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1244.0616.41
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1242.3915.01
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1239.8416.57
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1237.9314.05
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1236.813.77
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1236.814.31
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1233.111.8
PGD-2Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1231.894.51
MultiGradBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1228.330
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1226.20
PGD-10 (20)Backbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1221.687.39
R-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1218.54.9
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=12/2552025.1218.190
N-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1218.180
N-AAERBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1216.955.45
Grad AlignBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1215.052.85
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=32/2552025.1211.40
R-FGSMBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.1211.030
FreeATBackbone=PreActResNet-18, Threat Model=L_inf, Noise Magnitude=16/2552025.123.320