Regression on California (RMSE, NLL)
0.2RMSEBL
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| BLAttack Type=Clean, epsilon=22025.10 | 0.2 | -0.15 | |
| MIXAttack Type=Clean, epsilon=22025.10 | 0.23 | 0 | |
| ATAttack Type=Clean, epsilon=22025.10 | 0.31 | 0.44 | |
| NN50Attack Type=Clean, epsilon=22025.10 | 0.33 | 0.33 | |
| NN50Attack Type=PGD, epsilon=22025.10 | 0.41 | 0.56 | |
| NN50Attack Type=PGD1, epsilon=22025.10 | 0.42 | 0.58 | |
| NN50Attack Type=ENT, epsilon=22025.10 | 0.42 | 0.62 | |
| onPureAttack Type=PGD1, epsilon=22025.10 | 0.42 | 2.23 | |
| BLAttack Type=PGD, epsilon=22025.10 | 0.43 | 1.96 | |
| onPureAttack Type=ENT, epsilon=22025.10 | 0.43 | 2.41 | |
| offPureAttack Type=Clean, epsilon=22025.10 | 0.43 | 9.73 | |
| offPureAttack Type=PGD1, epsilon=22025.10 | 0.43 | 10.24 | |
| BLAttack Type=PGD1, epsilon=22025.10 | 0.44 | 2.03 | |
| onPureAttack Type=Clean, epsilon=22025.10 | 0.44 | 2.11 | |
| onPureAttack Type=PGD, epsilon=22025.10 | 0.44 | 2.34 | |
| BLAttack Type=ENT, epsilon=22025.10 | 0.45 | 1.84 | |
| onPureAttack Type=PGD+, epsilon=22025.10 | 0.45 | 2.75 | |
| offPureAttack Type=PGD, epsilon=22025.10 | 0.45 | 10.2 | |
| offPureAttack Type=PGD+, epsilon=22025.10 | 0.45 | 11.9 | |
| offPureAttack Type=ENT, epsilon=22025.10 | 0.45 | 10.39 | |
| NN50Attack Type=PGD+, epsilon=22025.10 | 0.46 | 0.7 | |
| MIXAttack Type=PGD, epsilon=22025.10 | 0.52 | 1.73 | |
| MIXAttack Type=ENT, epsilon=22025.10 | 0.52 | 1.56 | |
| MIXAttack Type=PGD1, epsilon=22025.10 | 0.53 | 1.71 | |
| MIXAttack Type=PGD+, epsilon=22025.10 | 0.63 | 2.36 | |
| BLAttack Type=PGD+, epsilon=22025.10 | 0.76 | 4.96 | |
| ATAttack Type=PGD1, epsilon=22025.10 | 1.58 | 3.49 | |
| ATAttack Type=PGD, epsilon=22025.10 | 1.69 | 3.67 | |
| ATAttack Type=ENT, epsilon=22025.10 | 1.97 | 2.91 | |
| ATAttack Type=PGD+, epsilon=22025.10 | 3.82 | 14.01 |