Image Classification on OfficeHome (Pairwise Domain Transfer with PGD-20 Robustness)
70.4Accuracy (Re -> Ar, Clean)SFT+RL
Evaluation results
| Method | Links | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SFT+RLAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 70.4 | 50 | 56.5 | 49.1 | 78.6 | 67.1 | 63.3 | 53.9 | 73.5 | 64.5 | 79.5 | 63.4 | 69.4 | 54.5 | |
| DANNAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 66 | 0.4 | 55.5 | 3.6 | 74.3 | 1.8 | 49.1 | 2.6 | 55.5 | 0.9 | 66.8 | 1 | 57.8 | 1.4 | |
| DARTAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 53.7 | 29.1 | 58.6 | 49.8 | 74 | 60.2 | 50.4 | 42.2 | 60.1 | 47.7 | 62.7 | 40.7 | 56.5 | 40.7 | |
| ARTUDAAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 49.5 | 28.4 | 58.3 | 48.5 | 73 | 58.3 | 50.9 | 41.7 | 55 | 41.2 | 61.7 | 42.5 | 54.6 | 38.2 | |
| UDA+TradesAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 47.9 | 27.4 | 55.6 | 49.7 | 70 | 61.9 | 48.6 | 43.6 | 55.9 | 47.6 | 57.1 | 41.8 | 53 | 41.2 | |
| UDA+MartAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 46.8 | 28.7 | 56.1 | 50.6 | 71.2 | 62.5 | 48.3 | 43.9 | 54.8 | 47.9 | 58.3 | 42.6 | 52.8 | 42.1 | |
| UDA+ATAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 46.4 | 29.4 | 55 | 49.4 | 72.3 | 60.4 | 48 | 41.7 | 55.9 | 46.2 | 57.6 | 40.5 | 52.9 | 40.3 | |
| SRoUDAAttack Type=PGD-20, Perturbation size (epsilon)=2/2552026.07 | 42.1 | 27.5 | 55.4 | 47.3 | 70.7 | 60.6 | 48.2 | 38.9 | 52.9 | 45.8 | 57.4 | 44.2 | 51.3 | 40.5 |