Image Classification on MNIST (test) (Accuracy and MIA Accuracy)
98.15AccuracyCCE
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CCEAttack Type (Training Paradigm)=CW2026.03 | 98.15 | — | |
| FCLAttack Type (Training Paradigm)=CW, mu=02026.03 | 98.1 | — | |
| SCEAttack Type (Training Paradigm)=CW, alpha=0.5, beta=12026.03 | 98.09 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=0.52026.03 | 98.09 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=0.52026.03 | 98.09 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=02026.03 | 98.08 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=02026.03 | 98.07 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=0.52026.03 | 98.05 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=-0.52026.03 | 97.97 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=-0.32026.03 | 97.97 | — | |
| GCEAttack Type (Training Paradigm)=CW, q=0.72026.03 | 97.96 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=-0.52026.03 | 97.96 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.9, lambda=-0.72026.03 | 97.95 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=-0.32026.03 | 97.94 | — | |
| FCLAttack Type (Training Paradigm)=CW, mu=0.252026.03 | 97.93 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=-12026.03 | 97.93 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=02026.03 | 97.93 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=-0.72026.03 | 97.92 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=-0.32026.03 | 97.92 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.9, lambda=-12026.03 | 97.91 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=-0.72026.03 | 97.9 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=-0.52026.03 | 97.89 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.9, lambda=-0.32026.03 | 97.89 | — | |
| GCEAttack Type (Training Paradigm)=CW, q=0.52026.03 | 97.88 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.5, lambda=-12026.03 | 97.88 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=-0.72026.03 | 97.88 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=1, lambda=02026.03 | 97.88 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=-0.52026.03 | 97.87 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=-0.32026.03 | 97.87 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=02026.03 | 97.87 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.9, lambda=-0.52026.03 | 97.85 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.9, lambda=0.52026.03 | 97.85 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.3, lambda=-0.72026.03 | 97.84 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.7, lambda=-12026.03 | 97.81 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=-12026.03 | 97.74 | — | |
| MAEAttack Type (Training Paradigm)=CW2026.03 | 97.7 | — | |
| FCLAttack Type (Training Paradigm)=Deepfool, mu=02026.03 | 97.35 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=0.52026.03 | 97.32 | — | |
| CCEAttack Type (Training Paradigm)=Deepfool2026.03 | 97.31 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=02026.03 | 97.3 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=0.52026.03 | 97.27 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=02026.03 | 97.26 | — | |
| SCEAttack Type (Training Paradigm)=Deepfool, alpha=0.5, beta=12026.03 | 97.2 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=-0.32026.03 | 97.2 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=02026.03 | 97.13 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=-0.32026.03 | 97.12 | — | |
| FCLAttack Type (Training Paradigm)=Deepfool, mu=0.252026.03 | 97.09 | — | |
| GCEAttack Type (Training Paradigm)=Deepfool, q=0.52026.03 | 97.08 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.9, lambda=-12026.03 | 97.08 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=0.52026.03 | 97.08 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=02026.03 | 97.07 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=-0.32026.03 | 97.06 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=-0.52026.03 | 97.03 | — | |
| rSDNetAttack Type (Training Paradigm)=CW, beta=0.1, lambda=0.52026.03 | 97.02 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.9, lambda=-0.32026.03 | 96.96 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=-12026.03 | 96.95 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=-0.72026.03 | 96.91 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.9, lambda=0.52026.03 | 96.9 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=-0.52026.03 | 96.88 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=-0.32026.03 | 96.88 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.5, lambda=-0.72026.03 | 96.86 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=-0.52026.03 | 96.85 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.9, lambda=-0.72026.03 | 96.83 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=-0.52026.03 | 96.83 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.9, lambda=-0.52026.03 | 96.83 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=1, lambda=02026.03 | 96.8 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=-12026.03 | 96.78 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=-0.72026.03 | 96.75 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.7, lambda=-12026.03 | 96.74 | — | |
| MAEAttack Type (Training Paradigm)=Deepfool2026.03 | 96.71 | — | |
| GCEAttack Type (Training Paradigm)=Deepfool, q=0.72026.03 | 96.66 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=-12026.03 | 96.64 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.3, lambda=-0.72026.03 | 96.61 | — | |
| rSDNetAttack Type (Training Paradigm)=Deepfool, beta=0.1, lambda=0.52026.03 | 96.43 | — | |
| TCCEAttack Type (Training Paradigm)=CW, alpha=0.12026.03 | 95.49 | — | |
| TCCEAttack Type (Training Paradigm)=Deepfool, alpha=0.12026.03 | 94.66 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.9, lambda=0.52026.03 | 92.35 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.5, lambda=-12026.03 | 92.21 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.9, lambda=-0.72026.03 | 92.14 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.7, lambda=-0.32026.03 | 92.09 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.7, lambda=-0.52026.03 | 92.05 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.7, lambda=-12026.03 | 91.94 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.9, lambda=-12026.03 | 91.92 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.5, lambda=02026.03 | 91.88 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.9, lambda=-0.52026.03 | 91.86 | — | |
| TCCEAttack Type (Training Paradigm)=CW, alpha=0.22026.03 | 91.84 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.7, lambda=-0.72026.03 | 91.84 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=1, lambda=02026.03 | 91.6 | — | |
| FCLAttack Type (Training Paradigm)=FGSM, mu=02026.03 | 91.56 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.9, lambda=-0.32026.03 | 91.43 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.5, lambda=-0.72026.03 | 91.41 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.5, lambda=-0.52026.03 | 91.38 | — | |
| GCEAttack Type (Training Paradigm)=FGSM, q=0.52026.03 | 91.33 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.1, lambda=02026.03 | 91.25 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.3, lambda=02026.03 | 91.24 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.7, lambda=0.52026.03 | 91.23 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.3, lambda=-0.52026.03 | 91.22 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.5, lambda=0.52026.03 | 91.16 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.3, lambda=-0.72026.03 | 91.12 | — | |
| rSDNetAttack Type (Training Paradigm)=FGSM, beta=0.3, lambda=-0.32026.03 | 91.1 | — |