Image Classification on STL10 (Accuracy and Robust Accuracy)
98.01Robust AccuracyATAC
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 98.01 | 95.72 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 96.39 | 95.72 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 96.26 | 95.72 | |
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 90.42 | 95.72 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 11.86 | 96.42 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 0.01 | 96.42 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 0 | 96.42 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 0 | 96.42 |