List your company
ResearchFormerly WizWand

Image Classification on GTSRB (Accuracy, ∆CA, ASR)

98.9AccuracyTraditional MTL
71.02878.26485.592.736Jan 27, 2026Feb 22, 2026Mar 21, 2026Apr 17, 2026May 14, 2026Jun 10, 2026Jul 7, 2026
Updated 3mo ago

Evaluation results

MethodLinks
Traditional MTLBackbone=CLIP ViT-B/32, Merging Category=Non-merging2026.0598.9——
IndividualBackbone=CLIP ViT-B/32, Merging Category=Non-merging2026.0598.7——
No DefenseModel=ResNet18, Attack=BadNets2026.0798.01—100
RN50 BaselineIR=12.5, Backbone=ResNet-502026.0197.8——
No DefenseModel=ResNet18, Attack=IAB2026.0797.62—99.99
No DefenseModel=WRN16-1, Attack=CLB2026.0797.41—100
No DefenseModel=WRN16-1, Attack=Trojan2026.0797.32—100
HARVEYModel=WRN16-1, Attack=IAB2026.0797.32—0.02
No DefenseModel=ResNet18, Attack=Average2026.0797.25—99.84
No DefenseModel=ResNet18, Attack=CLB2026.0797.22—100
No DefenseModel=WRN16-1, Attack=IAB2026.0797.1—100
No DefenseModel=ResNet18, Attack=WaNet2026.0797.09—99.44
No DefenseModel=ResNet18, Attack=Trojan2026.0797.06—99.98
HARVEYModel=ResNet18, Attack=Trojan2026.0797.05—0
HARVEYModel=WRN16-1, Attack=BadNets2026.0796.96—0
HARVEYModel=ResNet18, Attack=BadNets2026.0796.9—0
HARVEYModel=WRN16-1, Attack=Trojan2026.0796.78—0.13
HARVEYModel=WRN16-1, Attack=CLB2026.0796.78—0.02
HARVEYModel=WRN16-1, Attack=Average2026.0796.77—0.18
HARVEYModel=WRN16-1, Attack=Blend2026.0796.66—0.04
No DefenseModel=WRN16-1, Attack=Average2026.0796.65—99.99
No DefenseModel=WRN16-1, Attack=BadNets2026.0796.58—100
HARVEYModel=ResNet18, Attack=Average2026.0796.57—0
HARVEYModel=ResNet18, Attack=IAB2026.0796.56—0.01
D-STModel=WRN16-1, Attack=IAB2026.0796.54—0
No DefenseModel=ResNet18, Attack=Blend2026.0796.52—99.61
No DefenseModel=ResNet18, Attack=Worst Case2026.0796.52—100
ABLModel=WRN16-1, Attack=IAB2026.0796.38—3.89
ABLModel=ResNet18, Attack=IAB2026.0796.33—11.32
HARVEYModel=ResNet18, Attack=WaNet2026.0796.32—0
HARVEYModel=ResNet18, Attack=CLB2026.0796.3—0
HARVEYModel=ResNet18, Attack=Blend2026.0796.29—0
HARVEYModel=ResNet18, Attack=Worst Case2026.0796.29—0.01
ABLModel=ResNet18, Attack=Trojan2026.0796.21—0.01
D-STModel=ResNet18, Attack=Trojan2026.0796.2—0
HARVEYModel=WRN16-1, Attack=WaNet2026.0796.14—0.87
HARVEYModel=WRN16-1, Attack=Worst Case2026.0796.14—0.87
D-STModel=ResNet18, Attack=IAB2026.0796.09—0
ABLModel=WRN16-1, Attack=BadNets2026.0796.01—0.05
ABLModel=ResNet18, Attack=BadNets2026.0795.99—0.02
No DefenseModel=WRN16-1, Attack=WaNet2026.0795.94—99.92
D-STModel=ResNet18, Attack=BadNets2026.0795.83—0
CBDModel=WRN16-1, Attack=Trojan2026.0795.65—0.08
CBDModel=ResNet18, Attack=BadNets2026.0795.59—0.14
No DefenseModel=WRN16-1, Attack=Blend2026.0795.57—100
No DefenseModel=WRN16-1, Attack=Worst Case2026.0795.57—100
D-STModel=WRN16-1, Attack=Trojan2026.0795.52—32.01
ABLModel=WRN16-1, Attack=CLB2026.0795.39—5.44
ABLModel=WRN16-1, Attack=Trojan2026.0795.29—0.24
D-STModel=WRN16-1, Attack=BadNets2026.0795.24—0
SA-MergingBackbone=CLIP ViT-B/32, Merging Category=Data-free model merging2026.0595——
WUDI-MergingBackbone=CLIP ViT-B/32, Merging Category=Data-free model merging2026.0594.7——
ABLModel=WRN16-1, Attack=Average2026.0794.11—7.81
D-STModel=WRN16-1, Attack=Blend2026.0794.03—98.77
D-STModel=ResNet18, Attack=Blend2026.0793.96—40.86
DBDModel=ResNet18, Attack=Trojan2026.0793.91—0
ABLModel=WRN16-1, Attack=WaNet2026.0793.83—5.56
D-STModel=WRN16-1, Attack=WaNet2026.0793.75—71.8
D-STModel=WRN16-1, Attack=Average2026.0793.49—33.91
D-STModel=ResNet18, Attack=WaNet2026.0793.41—67.26
ABLModel=ResNet18, Attack=Average2026.0793.3—34.83
DBDModel=ResNet18, Attack=Blend2026.0793.21—99.98
CBDModel=WRN16-1, Attack=IAB2026.0792.84—0
DBDModel=ResNet18, Attack=WaNet2026.0792.76—0
DBDModel=ResNet18, Attack=BadNets2026.0792.68—0.29
ABLModel=ResNet18, Attack=CLB2026.0792.56—0.01
D-STModel=ResNet18, Attack=Average2026.0792.26—18.38
DBDModel=ResNet18, Attack=Average2026.0792.02—33.26
DBDModel=ResNet18, Attack=CLB2026.0791.99—0
AdaMergingBackbone=CLIP ViT-B/32, Merging Category=Test-time / data-assisted2026.0591.9——
CBDModel=WRN16-1, Attack=Blend2026.0791.81—97.19
CBDModel=WRN16-1, Attack=Average2026.0790.77—22.96
ABLModel=ResNet18, Attack=Blend2026.0790.41—97.7
CBDModel=WRN16-1, Attack=BadNets2026.0790.21—1.26
AdaMerging++Backbone=CLIP ViT-B/32, Merging Category=Test-time / data-assisted2026.0589——
CBDModel=WRN16-1, Attack=CLB2026.0788.81—19.13
ABLModel=ResNet18, Attack=WaNet2026.0788.27—99.92
ABLModel=ResNet18, Attack=Worst Case2026.0788.27—99.92
CBDModel=ResNet18, Attack=WaNet2026.0787.96—19.36
ABLModel=WRN16-1, Attack=Blend2026.0787.76—31.67
ABLModel=WRN16-1, Attack=Worst Case2026.0787.76—31.67
DBDModel=ResNet18, Attack=IAB2026.0787.55—99.31
DBDModel=ResNet18, Attack=Worst Case2026.0787.55—99.98
Rep. SurgeryBackbone=CLIP ViT-B/32, Merging Category=Test-time / data-assisted2026.0587——
D-STModel=WRN16-1, Attack=CLB2026.0785.86—0.9
D-STModel=WRN16-1, Attack=Worst Case2026.0785.86—98.77
CBDModel=WRN16-1, Attack=WaNet2026.0785.27—20.07
CBDModel=WRN16-1, Attack=Worst Case2026.0785.27—97.19
CBDModel=ResNet18, Attack=IAB2026.0782.29—99.36
CBDModel=ResNet18, Attack=Blend2026.0779.92—65.37
DBDModel=WRN16-1, Attack=CLB2026.0779.46—2.41
CBDModel=ResNet18, Attack=Average2026.0779.26—31.63
DBDModel=WRN16-1, Attack=Trojan2026.0778.72—0
D-STModel=ResNet18, Attack=CLB2026.0778.06—2.15
D-STModel=ResNet18, Attack=Worst Case2026.0778.06—67.26
PCB MergingBackbone=CLIP ViT-B/32, Merging Category=Data-free model merging2026.0577.1——
DBDModel=WRN16-1, Attack=BadNets2026.0776.81—0
CBDModel=ResNet18, Attack=CLB2026.0775.58—0
DBDModel=WRN16-1, Attack=Average2026.0772.93—21.16
TIES-MergingBackbone=CLIP ViT-B/32, Merging Category=Data-free model merging2026.0572.1——