Text Adversarial Example Detection on Ag-News
100TPR@10RTD-Guard
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RTD-GuardAttack Method=TF-adj2026.03 | 100 | 95.9 | 97.5 | |
| GradMaskAttack Method=TF-adj2026.03 | 99 | 94 | 93.7 | |
| RTD-GuardAttack Method=PWWS2026.03 | 98.1 | 94.6 | 98.3 | |
| RTD-GuardAttack Method=BAE2026.03 | 98.1 | 94.8 | 97.8 | |
| RTD-GuardAttack Method=TextFooler2026.03 | 97.5 | 94.9 | 98.4 | |
| WDRAttack Method=TextFooler2026.03 | 96.5 | 93.8 | 97.2 | |
| RDEAttack Method=TextFooler2026.03 | 95.8 | 93.3 | 97.1 | |
| GradMaskAttack Method=TextFooler2026.03 | 95.4 | 93.1 | 96.4 | |
| WDRAttack Method=PWWS2026.03 | 94.2 | 92.6 | 96.9 | |
| WDRAttack Method=TF-adj2026.03 | 94.1 | 94.1 | 96.3 | |
| RDEAttack Method=TF-adj2026.03 | 92.2 | 91.3 | 95.4 | |
| WDRAttack Method=BAE2026.03 | 91.4 | 91.1 | 95.8 | |
| FGWSAttack Method=PWWS2026.03 | 91 | 90.7 | 91 | |
| GradMaskAttack Method=PWWS2026.03 | 90.9 | 91.5 | 95.6 | |
| GradMaskAttack Method=BAE2026.03 | 90.6 | 91.1 | 94.5 | |
| RDEAttack Method=PWWS2026.03 | 89.7 | 89.8 | 95.6 | |
| RDEAttack Method=BAE2026.03 | 89.6 | 89.9 | 95.3 | |
| FGWSAttack Method=TextFooler2026.03 | 82.4 | 85.7 | 84.2 | |
| MLEAttack Method=TextFooler2026.03 | 78.3 | 83.2 | 93.5 | |
| MLEAttack Method=TF-adj2026.03 | 73.5 | 80.2 | 90.8 | |
| MLEAttack Method=PWWS2026.03 | 71.6 | 78.9 | 91.8 | |
| PPLAttack Method=TextFooler2026.03 | 69.5 | 77.5 | 88.6 | |
| MLEAttack Method=BAE2026.03 | 68.3 | 76.8 | 91.2 | |
| PPLAttack Method=PWWS2026.03 | 66.2 | 75.1 | 86.9 | |
| FGWSAttack Method=BAE2026.03 | 65 | 73.8 | 71.6 | |
| FGWSAttack Method=TF-adj2026.03 | 64.1 | 74.5 | 72.9 | |
| PPLAttack Method=TF-adj2026.03 | 31.4 | 44.4 | 65.9 | |
| PPLAttack Method=BAE2026.03 | 23 | 34.7 | 66.3 |