Image Classification on MNIST (test) (Adversarial Robustness: PGD Norm Specific)
99.2Clean Accuracylinf training
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| linf trainingadversarial training=linf2023.06 | 99.2 | 54.6 | 61.8 | 88.9 | 52.1 | |
| l2 trainingadversarial training=l22023.06 | 99.1 | 67.8 | 66.8 | 0.1 | 0.1 | |
| AVGw. AdaptiveBudget=None2023.06 | 99.1 | 70.6 | 69.4 | 59.5 | 55.4 | |
| AVGw. AdaptiveBudget=l1 (ours)2023.06 | 99.1 | 68.2 | 68.3 | 67.7 | 59.2 | |
| AVGw. AdaptiveBudget=l2 (ours)2023.06 | 99.1 | 68.9 | 68.3 | 65.6 | 58.2 | |
| MAXw. AdaptiveBudget=l1 (ours)2023.06 | 98.9 | 71.4 | 69.4 | 67.2 | 61.3 | |
| MAXw. AdaptiveBudget=l2 (ours)2023.06 | 98.9 | 69.7 | 69.5 | 67.6 | 61.4 | |
| MSDw. AdaptiveBudget=l2 (ours)2023.06 | 98.9 | 65.9 | 65.3 | 69.7 | 61 | |
| MAXw. AdaptiveBudget=None2023.06 | 98.6 | 67.1 | 67.2 | 21.2 | 21.2 | |
| MSDw. AdaptiveBudget=l1 (ours)2023.06 | 98.3 | 66.8 | 67.9 | 69.7 | 62.1 | |
| MSDw. AdaptiveBudget=None2023.06 | 98.2 | 67.3 | 68 | 62.4 | 59.7 | |
| l1 trainingadversarial training=l12023.06 | 97.2 | 47.3 | 24.1 | 0 | 0 |