# Robust Image Classification on CIFAR-10 (test) Source: [Robust Image Classification on CIFAR-10 (test)]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:39:10.833Z Evaluation of robust image classification performance on the CIFAR-10 test set, reporting robust accuracy (Rob-Acc) and the difference margin (Diff.). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Robust Image Classification | | Dataset (including any stated split) | CIFAR-10 (test) | | Metric | Classification Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 12 of 12 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Classification Accuracy](): Higher is better; unit: PERCENT. - [Robust Accuracy](): Higher is better; unit: PERCENT. - [Difference Margin](): Lower is better; unit: SCALAR. ## Recorded results | Method | Classification Accuracy | Result date | Report paper | | --- | --- | --- | --- | | Diff-BPDA | 92.19 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 92.19 | Not recorded | 68fa71ba1e209131cea52cf8 | | Diff-BPDA | 91.21 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 91.21 | Not recorded | 68fa71ba1e209131cea52cf8 | | Diff-BPDA | 91.21 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 91.21 | Not recorded | 68fa71ba1e209131cea52cf8 | | Diff-BPDA | 90.62 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 90.62 | Not recorded | 68fa71ba1e209131cea52cf8 | | Diff-BPDA | 87.5 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 87.5 | Not recorded | 68fa71ba1e209131cea52cf8 | | Diff-BPDA | 87.5 | Not recorded | 68fa71ba1e209131cea52cf8 | | DiffAttack | 87.5 | Not recorded | 68fa71ba1e209131cea52cf8 | ### Diff-BPDA Classification Accuracy: 92.19. Result ID: 6991f8833a6c3148490bca43. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"75","lp Attack":"l\_2","epsilon":"0.5"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 92.19. Result ID: 6991f8833a6c3148490bca44. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"75","lp Attack":"l\_2","epsilon":"0.5"}. This record does not assert independent reproduction. ### Diff-BPDA Classification Accuracy: 91.21. Result ID: 6991f8833a6c3148490bca3f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"100","lp Attack":"l\_inf","epsilon":"8/255"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 91.21. Result ID: 6991f8833a6c3148490bca40. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"100","lp Attack":"l\_inf","epsilon":"8/255"}. This record does not assert independent reproduction. ### Diff-BPDA Classification Accuracy: 91.21. Result ID: 6991f8833a6c3148490bca41. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"100","lp Attack":"l\_inf","epsilon":"4/255"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 91.21. Result ID: 6991f8833a6c3148490bca42. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-70-16","T":"100","lp Attack":"l\_inf","epsilon":"4/255"}. This record does not assert independent reproduction. ### Diff-BPDA Classification Accuracy: 90.62. Result ID: 6991f8833a6c3148490bca3d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"75","lp Attack":"l\_2","epsilon":"0.5"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 90.62. Result ID: 6991f8833a6c3148490bca3e. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"75","lp Attack":"l\_2","epsilon":"0.5"}. This record does not assert independent reproduction. ### Diff-BPDA Classification Accuracy: 87.5. Result ID: 6991f8833a6c3148490bca39. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"100","lp Attack":"l\_inf","epsilon":"8/255"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 87.5. Result ID: 6991f8833a6c3148490bca3a. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"100","lp Attack":"l\_inf","epsilon":"8/255"}. This record does not assert independent reproduction. ### Diff-BPDA Classification Accuracy: 87.5. Result ID: 6991f8833a6c3148490bca3b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"100","lp Attack":"l\_inf","epsilon":"4/255"}. This record does not assert independent reproduction. ### DiffAttack Classification Accuracy: 87.5. Result ID: 6991f8833a6c3148490bca3c. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Architecture":"WideResNet-28-10","T":"100","lp Attack":"l\_inf","epsilon":"4/255"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.