Robust Classification on ImageNet standard (test)
35.63Top-1 AccNEO-KD
Evaluation results
| Method | Links | ||
|---|---|---|---|
| NEO-KDExit=5, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 35.63 | 62.46 | |
| NEO-KDExit=5, Attack Type=Average attack, Anytime prediction=true2023.11 | 34.3 | 61.35 | |
| NEO-KDExit=3, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.99 | 59.79 | |
| ARDExit=3, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.93 | 59.24 | |
| NEO-KDExit=4, Attack Type=Average attack, Anytime prediction=true2023.11 | 32.78 | 60.07 | |
| NEO-KDExit=4, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.74 | 59.61 | |
| NEO-KDExit=2, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.61 | 59.64 | |
| NEO-KDExit=Avg., Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.37 | 59.39 | |
| Adv. w/o DistillExit=5, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32.3 | 59.9 | |
| ARDExit=2, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32 | 59.34 | |
| ARDExit=4, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 32 | 57.93 | |
| Adv. w/o DistillExit=3, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 31.94 | 59.23 | |
| NEO-KDExit=3, Attack Type=Average attack, Anytime prediction=true2023.11 | 31.77 | 58.76 | |
| ARDExit=5, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 31.72 | 58.29 | |
| Adv. w/o DistillExit=2, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 31.71 | 59.84 | |
| SKDExit=2, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 31.44 | 59.94 | |
| ARDExit=Avg., Attack Type=Max-average attack, Anytime prediction=true2023.11 | 30.89 | 57.85 | |
| Adv. w/o DistillExit=Avg., Attack Type=Max-average attack, Anytime prediction=true2023.11 | 30.45 | 58.31 | |
| Adv. w/o DistillExit=4, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 30.22 | 57.17 | |
| NEO-KDExit=Avg., Attack Type=Average attack, Anytime prediction=true2023.11 | 29.98 | 56.7 | |
| SKDExit=3, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 29.63 | 57.49 | |
| Adv. w/o DistillExit=4, Attack Type=Average attack, Anytime prediction=true2023.11 | 28.73 | 57.55 | |
| NEO-KDExit=2, Attack Type=Average attack, Anytime prediction=true2023.11 | 28.62 | 55.3 | |
| ARDExit=4, Attack Type=Average attack, Anytime prediction=true2023.11 | 28.52 | 57.3 | |
| Adv. w/o DistillExit=5, Attack Type=Average attack, Anytime prediction=true2023.11 | 28.5 | 57.14 | |
| SKDExit=Avg., Attack Type=Max-average attack, Anytime prediction=true2023.11 | 28.43 | 56.72 | |
| Adv. w/o DistillExit=3, Attack Type=Average attack, Anytime prediction=true2023.11 | 28.24 | 56.82 | |
| ARDExit=3, Attack Type=Average attack, Anytime prediction=true2023.11 | 27.98 | 56.42 | |
| NEO-KDExit=1, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 27.89 | 55.46 | |
| SKDExit=1, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 27.34 | 56.96 | |
| SKDExit=4, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 27.03 | 53.98 | |
| SKDExit=5, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 26.71 | 55.24 | |
| SKDExit=3, Attack Type=Average attack, Anytime prediction=true2023.11 | 26.45 | 55.33 | |
| Adv. w/o DistillExit=1, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 26.1 | 55.4 | |
| ARDExit=5, Attack Type=Average attack, Anytime prediction=true2023.11 | 25.83 | 53.48 | |
| ARDExit=1, Attack Type=Max-average attack, Anytime prediction=true2023.11 | 25.81 | 54.46 | |
| SKDExit=4, Attack Type=Average attack, Anytime prediction=true2023.11 | 25.72 | 54.71 | |
| Adv. w/o DistillExit=Avg., Attack Type=Average attack, Anytime prediction=true2023.11 | 25.58 | 53.77 | |
| ARDExit=Avg., Attack Type=Average attack, Anytime prediction=true2023.11 | 24.71 | 52.6 | |
| SKDExit=2, Attack Type=Average attack, Anytime prediction=true2023.11 | 24.45 | 52.92 | |
| Adv. w/o DistillExit=2, Attack Type=Average attack, Anytime prediction=true2023.11 | 24.21 | 52.57 | |
| ARDExit=2, Attack Type=Average attack, Anytime prediction=true2023.11 | 23.68 | 52.07 | |
| SKDExit=Avg., Attack Type=Average attack, Anytime prediction=true2023.11 | 23.57 | 51.89 | |
| NEO-KDExit=1, Attack Type=Average attack, Anytime prediction=true2023.11 | 22.42 | 48.02 | |
| SKDExit=5, Attack Type=Average attack, Anytime prediction=true2023.11 | 22.17 | 50.18 | |
| SKDExit=1, Attack Type=Average attack, Anytime prediction=true2023.11 | 19.04 | 46.31 | |
| Adv. w/o DistillExit=1, Attack Type=Average attack, Anytime prediction=true2023.11 | 18.2 | 44.74 | |
| ARDExit=1, Attack Type=Average attack, Anytime prediction=true2023.11 | 17.56 | 43.76 |