Image Classification under Transfer-based Black-box Attacks on CIFAR-10 (test)
84.82AccuracyABanditNAS-10
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ABanditNAS-10Source Model=WRN-R (500k data), Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 84.82 | 15.18 | |
| ABanditNAS-10Source Model=ARNAS, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 78.39 | 21.61 | |
| AdvRushSource Model=WRN-R (500k data), Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 77.62 | 22.38 | |
| ABanditNAS-10Source Model=AdvRush, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 77.58 | 22.42 | |
| ARNASSource Model=WRN-R (500k data), Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 77.09 | 22.91 | |
| WRN-RTraining Data=additional 500k samples, Source Model=ARNAS, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 70.03 | 29.97 | |
| WRN-RTraining Data=additional 500k samples, Source Model=ABanditNAS-10, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 69.59 | 30.41 | |
| WRN-RTraining Data=additional 500k samples, Source Model=AdvRush, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 68.99 | 31.01 | |
| AdvRushSource Model=ABanditNAS-10, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 68.83 | 31.17 | |
| ARNASSource Model=ABanditNAS-10, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 67.8 | 32.2 | |
| AdvRushSource Model=ARNAS, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 66.81 | 33.19 | |
| ARNASSource Model=AdvRush, Attack Method=PGD20, Perturbation Scale=8/2552024.05 | 64.65 | 35.35 |