Runtime Backdoor Mitigation on CIFAR-10
29.44FIRE PA (Pos 1) (%)FIRE
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| FIREBackbone=PreActResNet18, Attack=BPP2026.02 | 29.44 | — | — | — | 78.22 | — | 213.6 | 11.8 | |
| FIREBackbone=PreActResNet18, Attack=FTROJAN2026.02 | 29.44 | — | — | — | 67.67 | — | 220.4 | 12 | |
| FIREBackbone=PreActResNet34, Attack=FTROJAN2026.02 | 29.11 | — | — | — | 82.89 | — | 210.8 | 21.1 | |
| FIREBackbone=PreActResNet34, Attack=Blended2026.02 | 26.89 | — | — | — | 61.78 | — | 205.5 | 20.4 | |
| FIREBackbone=PreActResNet34, Attack=BadNets2026.02 | 26.78 | — | — | — | 88.67 | — | 208.5 | 22.1 | |
| FIREBackbone=PreActResNet18, Attack=Blended2026.02 | 25.44 | — | — | — | 64 | — | 222 | 12.1 | |
| FIREBackbone=PreActResNet34, Attack=BPP2026.02 | 25.44 | — | — | — | 71.11 | — | 209.4 | 21.8 | |
| FIREBackbone=PreActResNet18, Attack=InputAware2026.02 | 24.56 | — | — | — | 72.11 | — | 214.4 | 12.1 | |
| FIREBackbone=PreActResNet18, Attack=BadNets2026.02 | 22.56 | — | — | — | 86.22 | — | 223.7 | 14 | |
| FIREBackbone=PreActResNet34, Attack=InputAware2026.02 | 21.11 | — | — | — | 71.33 | — | 221.1 | 23.2 | |
| FIREBackbone=PreActResNet34, Attack=Blind2026.02 | 19.78 | — | — | — | 78.44 | — | 212.1 | 24.2 | |
| FIREBackbone=PreActResNet18, Attack=WaNet2026.02 | 17.56 | — | — | — | 71.44 | — | 219.2 | 16.8 | |
| FIREBackbone=PreActResNet34, Attack=WaNet2026.02 | 13.33 | — | — | — | 50.78 | — | 209.5 | 26.2 | |
| FIREBackbone=PreActResNet18, Attack=Blind2026.02 | 3.78 | — | — | — | 69.78 | — | 228.5 | 15.2 | |
| No DefenseBackbone=PreActResNet18, Attack=BadNets2026.02 | — | 91.86 | 5.27 | — | — | — | — | — | |
| ZIPBackbone=PreActResNet18, Attack=BadNets2026.02 | — | — | — | 27.19 | — | 1,408 | — | — |