Image Classification on STL10 (Accuracy and Robustness)
98.3RobustnessATAC
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| ATACDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 98.3 | 93.94 | |
| R-TPTDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 76.33 | 96.09 | |
| TTCDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 52.4 | 95.83 | |
| PMG-AFTDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 35.4 | 84.35 | |
| TTEDefense Category=Test-time Defense, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 32.56 | 96.26 | |
| TeCoADefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 31.83 | 81.69 | |
| FAREDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 17.59 | 89.11 | |
| CLIP-FTDefense Category=Adversarial Finetuning, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 3.75 | 94.49 | |
| CLIPDefense Category=None, Attack Type=10-step PGD, Epsilon=4/2552025.11 | 0.16 | 96.4 |