Image Classification on GTSRB (Perturbation Robustness Analysis)
95.11Accuracy (Conv)None
Evaluation results
| Method | Links | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| None2025.10 | 95.11 | 57.42 | 95.11 | 13.67 | 95.11 | 1.56 | 95.11 | 3.12 | 95.11 | 18.94 | |
| NAPPure2025.10 | 94.53 | 86.91 | 93.55 | 74.22 | 93.36 | 51.37 | 93.75 | 83.2 | 93.8 | 73.93 | |
| NAPPure-jointidentical implementation across attack types=true2025.10 | 93.75 | 76.17 | 93.75 | 57.23 | 93.75 | 37.37 | 93.75 | 66.4 | 93.75 | 59.29 | |
| LMidentical implementation across attack types=true2025.10 | 93.16 | 53.32 | 93.16 | 13.67 | 93.16 | 8.79 | 93.16 | 79.07 | 93.16 | 38.71 | |
| AT2025.10 | 89.45 | 61.72 | 92.57 | 19.92 | 91.6 | 19.72 | 88.28 | 47.85 | 90.48 | 37.3 | |
| DiffPureidentical implementation across attack types=true2025.10 | 89.26 | 61.52 | 89.26 | 46.29 | 89.26 | 21.88 | 89.26 | 60.74 | 89.26 | 47.61 |