Robust Image Classification on CIFAR-10 (test)
92.19Classification AccuracyDiff-BPDA
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Diff-BPDAArchitecture=WideResNet-70-16, T=75, lp Attack=l_2, epsilon=0.52023.10 | 92.19 | 81.25 | — | |
| DiffAttackArchitecture=WideResNet-70-16, T=75, lp Attack=l_2, epsilon=0.52023.10 | 92.19 | 71.88 | -9.37 | |
| Diff-BPDAArchitecture=WideResNet-70-16, T=100, lp Attack=l_inf, epsilon=8/2552023.10 | 91.21 | 74.22 | — | |
| DiffAttackArchitecture=WideResNet-70-16, T=100, lp Attack=l_inf, epsilon=8/2552023.10 | 91.21 | 59.38 | -14.84 | |
| Diff-BPDAArchitecture=WideResNet-70-16, T=100, lp Attack=l_inf, epsilon=4/2552023.10 | 91.21 | 75.78 | — | |
| DiffAttackArchitecture=WideResNet-70-16, T=100, lp Attack=l_inf, epsilon=4/2552023.10 | 91.21 | 67.19 | -8.59 | |
| Diff-BPDAArchitecture=WideResNet-28-10, T=75, lp Attack=l_2, epsilon=0.52023.10 | 90.62 | 76.56 | — | |
| DiffAttackArchitecture=WideResNet-28-10, T=75, lp Attack=l_2, epsilon=0.52023.10 | 90.62 | 67.97 | -8.59 | |
| Diff-BPDAArchitecture=WideResNet-28-10, T=100, lp Attack=l_inf, epsilon=8/2552023.10 | 87.5 | 75 | — | |
| DiffAttackArchitecture=WideResNet-28-10, T=100, lp Attack=l_inf, epsilon=8/2552023.10 | 87.5 | 54.69 | -20.31 | |
| Diff-BPDAArchitecture=WideResNet-28-10, T=100, lp Attack=l_inf, epsilon=4/2552023.10 | 87.5 | 76.56 | — | |
| DiffAttackArchitecture=WideResNet-28-10, T=100, lp Attack=l_inf, epsilon=4/2552023.10 | 87.5 | 63.28 | -13.28 |