Image Classification on TinyImageNet (C-Acc and ASR)
87.5C-AccBppAttack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| BppAttackPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 87.5 | 93.4 | |
| DSAPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 86.6 | 98.4 | |
| BppAttackPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 86 | 1.7 | |
| WaveAttackPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 85.9 | 93.6 | |
| BppAttackPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 85.7 | 8.7 | |
| DSAPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 84.8 | 99.9 | |
| WaveAttackPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 84.6 | 0 | |
| BadNetsPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 83.1 | 100 | |
| SSBAPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 83.1 | 50.2 | |
| DSAPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 83.1 | 100 | |
| BlendedPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 83 | 91.6 | |
| Adapt-BlendPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 83 | 95.5 | |
| BadNetsPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 82.9 | 100 | |
| BlendedPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 82.9 | 97.2 | |
| BadNetsPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 82.8 | 99.8 | |
| SSBAPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 82.7 | 86.3 | |
| WaveAttackPoisoning Rate (ρ)=0.5%, Defense=No defense2026.05 | 82.7 | 91.2 | |
| Adapt-BlendPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 82.6 | 100 | |
| BlendedPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 82.5 | 100 | |
| SSBAPoisoning Rate (ρ)=5%, Defense=No defense2026.05 | 82.4 | 99.9 | |
| Adapt-BlendPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 82.4 | 98.7 | |
| BppAttackPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 82.3 | 0 | |
| WaveAttackPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 82.2 | 0 | |
| WaveAttackPoisoning Rate (ρ)=1%, Defense=No defense2026.05 | 81.4 | 90.8 | |
| BppAttackPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 80.6 | 0.1 | |
| DSAPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 80.1 | 31.5 | |
| DSAPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 79.5 | 43.3 | |
| BadNetsPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 79.4 | 0.8 | |
| SSBAPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 79.3 | 0.4 | |
| BlendedPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 79.1 | 0.6 | |
| DSAPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 79.1 | 55.8 | |
| Adapt-BlendPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 79 | 3.1 | |
| BadNetsPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 78.9 | 2.2 | |
| BlendedPoisoning Rate (ρ)=1%, Defense=FST2026.05 | 78.9 | 1.7 | |
| SSBAPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 78.9 | 0.1 | |
| BadNetsPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 78.7 | 0.3 | |
| SSBAPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 78.6 | 1.4 | |
| Adapt-BlendPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 78.5 | 6.8 | |
| Adapt-BlendPoisoning Rate (ρ)=0.5%, Defense=FST2026.05 | 78.5 | 1.3 | |
| BlendedPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 78.2 | 4.5 | |
| BppAttackPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 78 | 0.1 | |
| WaveAttackPoisoning Rate (ρ)=5%, Defense=FST2026.05 | 77.5 | 0 |