Image Classification on SVHN (test) (Clean and Robust Accuracy)
96.16Clean AccuracyRS-FGSM
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RS-FGSMϵ · 255=2, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 96.16 | 86.17 | |
| ZeroGradϵ · 255=2, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 96.08 | 86.47 | |
| N-FGSMϵ · 255=2, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 96.04 | 86.46 | |
| GradAlignϵ · 255=2, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 96.01 | 86.44 | |
| RS-FGSMϵ · 255=6, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 95.16 | 0 | |
| RS-FGSMϵ · 255=4, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 95.07 | 71.25 | |
| ZeroGradϵ · 255=4, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.83 | 71.64 | |
| GradAlignϵ · 255=4, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.57 | 72.18 | |
| N-FGSMϵ · 255=4, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.56 | 72.54 | |
| RS-FGSMϵ · 255=8, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.48 | 0 | |
| lp-FGSMϵ · 255=2, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.2 | 86.22 | |
| lp-FGSMϵ · 255=4, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 94.16 | 77.86 | |
| RS-FGSMϵ · 255=10, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 93.82 | 0 | |
| ZeroGradϵ · 255=6, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 93.52 | 51.77 | |
| RS-FGSMϵ · 255=12, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 92.72 | 0 | |
| GradAlignϵ · 255=6, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 92.55 | 57.36 | |
| ZeroGradϵ · 255=8, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 92.43 | 35.96 | |
| N-FGSMϵ · 255=6, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 92.27 | 58.44 | |
| lp-FGSMϵ · 255=6, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 92.26 | 64.12 | |
| lp-FGSMϵ · 255=8, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 91.06 | 56.72 | |
| lp-FGSMϵ · 255=10, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 90.76 | 45.46 | |
| ZeroGradϵ · 255=10, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 90.36 | 21.36 | |
| GradAlignϵ · 255=8, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 90.16 | 43.88 | |
| lp-FGSMϵ · 255=12, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 90.02 | 36.88 | |
| N-FGSMϵ · 255=8, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 89.59 | 45.64 | |
| ZeroGradϵ · 255=12, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 88.11 | 14.16 | |
| GradAlignϵ · 255=10, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 87.26 | 32.88 | |
| N-FGSMϵ · 255=10, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 86.78 | 33.98 | |
| GradAlignϵ · 255=12, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 84.12 | 23.64 | |
| N-FGSMϵ · 255=12, Backbone=PreAct-18, Evaluation Attack=PGD-50-102025.05 | 81.49 | 26.17 |