Text Classification on SST-2 (CACC, ASR)
95CACCUnpatched
Evaluation results
| Method | Links | ||
|---|---|---|---|
| UnpatchedAttack=AD+BadNets2026.06 | 95 | 96 | |
| FTAttack=AD+BadNets2026.06 | 95 | 94 | |
| UnpatchedAttack=AD+CBA2026.06 | 95 | 97 | |
| UnpatchedAttack=AD+POLISHED2026.06 | 95 | 97 | |
| UnpatchedAttack=AD+Sleeper2026.06 | 95 | 96 | |
| MENDAttack=AD+Sleeper2026.06 | 95 | 93 | |
| UnpatchedAttack=AD+UJB2026.06 | 94 | 97 | |
| FTℓ2Attack=AD+BadNets2026.06 | 94 | 93 | |
| FTAttack=AD+CBA2026.06 | 94 | 96 | |
| MENDAttack=AD+CBA2026.06 | 94 | 94 | |
| PatcherAttack=AD+CBA2026.06 | 94 | 1 | |
| FTAttack=AD+POLISHED2026.06 | 94 | 95 | |
| MENDAttack=AD+POLISHED2026.06 | 94 | 93 | |
| FTAttack=AD+Sleeper2026.06 | 94 | 95 | |
| FTℓ2Attack=AD+Sleeper2026.06 | 94 | 92 | |
| FTℓ∞Attack=AD+Sleeper2026.06 | 94 | 90 | |
| SPPAttack=AD+Sleeper2026.06 | 94 | 91 | |
| PatcherAttack=AD+Sleeper2026.06 | 94 | 1 | |
| FTℓ∞Attack=AD+UJB2026.06 | 93 | 92 | |
| FinePruningAttack=AD+UJB2026.06 | 93 | 92 | |
| BAERASERAttack=AD+UJB2026.06 | 93 | 94 | |
| MudjackingAttack=AD+UJB2026.06 | 93 | 49 | |
| SPPAttack=AD+UJB2026.06 | 93 | 95 | |
| OneShotAttack=AD+UJB2026.06 | 93 | 92 | |
| MENDAttack=AD+UJB2026.06 | 93 | 95 | |
| MudjackingAttack=AD+BadNets2026.06 | 93 | 62 | |
| PatcherAttack=AD+BadNets2026.06 | 93 | 1 | |
| FTℓ2Attack=AD+CBA2026.06 | 93 | 94 | |
| FinePruningAttack=AD+CBA2026.06 | 93 | 94 | |
| OneShotAttack=AD+CBA2026.06 | 93 | 95 | |
| ROMEAttack=AD+CBA2026.06 | 93 | 92 | |
| FTℓ2Attack=AD+POLISHED2026.06 | 93 | 96 | |
| FTℓ∞Attack=AD+POLISHED2026.06 | 93 | 95 | |
| FinePruningAttack=AD+POLISHED2026.06 | 93 | 97 | |
| PatcherAttack=AD+POLISHED2026.06 | 93 | 2 | |
| BAERASERAttack=AD+Sleeper2026.06 | 93 | 89 | |
| OneShotAttack=AD+Sleeper2026.06 | 93 | 96 | |
| ROMEAttack=AD+Sleeper2026.06 | 93 | 96 | |
| PatcherAttack=AD+UJB2026.06 | 92 | 1 | |
| FTℓ∞Attack=AD+BadNets2026.06 | 92 | 92 | |
| SPPAttack=AD+BadNets2026.06 | 92 | 94 | |
| MudjackingAttack=AD+CBA2026.06 | 92 | 68 | |
| SPPAttack=AD+CBA2026.06 | 92 | 94 | |
| SPPAttack=AD+POLISHED2026.06 | 92 | 95 | |
| ROMEAttack=AD+POLISHED2026.06 | 92 | 96 | |
| MudjackingAttack=AD+Sleeper2026.06 | 92 | 45 | |
| STRIPAttack Scenario=None2022.06 | 91.49 | — | |
| w/o DefenseAttack Scenario=BadNet2022.06 | 91.21 | 100 | |
| w/o DefenseAttack Scenario=AddSent2022.06 | 91.16 | 100 | |
| w/o DefenseAttack Scenario=None2022.06 | 91.1 | — | |
| FTAttack=AD+UJB2026.06 | 91 | 95 | |
| FTℓ2Attack=AD+UJB2026.06 | 91 | 94 | |
| ROMEAttack=AD+UJB2026.06 | 91 | 87 | |
| FinePruningAttack=AD+BadNets2026.06 | 91 | 95 | |
| BAERASERAttack=AD+BadNets2026.06 | 91 | 92 | |
| OneShotAttack=AD+BadNets2026.06 | 91 | 93 | |
| MENDAttack=AD+BadNets2026.06 | 91 | 93 | |
| ROMEAttack=AD+BadNets2026.06 | 91 | 90 | |
| FTℓ∞Attack=AD+CBA2026.06 | 91 | 94 | |
| BAERASERAttack=AD+CBA2026.06 | 91 | 95 | |
| BAERASERAttack=AD+POLISHED2026.06 | 91 | 94 | |
| MudjackingAttack=AD+POLISHED2026.06 | 91 | 80 | |
| OneShotAttack=AD+POLISHED2026.06 | 91 | 94 | |
| FinePruningAttack=AD+Sleeper2026.06 | 91 | 97 | |
| w/o DefenseAttack Scenario=SynBkd2022.06 | 90.77 | 92.65 | |
| w/o DefenseAttack Scenario=StyleBkd2022.06 | 90.34 | 77.3 | |
| STRIPAttack Scenario=StyleBkd2022.06 | 90.28 | 78.35 | |
| STRIPAttack Scenario=AddSent2022.06 | 88.96 | 97.48 | |
| STRIPAttack Scenario=SynBkd2022.06 | 88.96 | 86.4 | |
| RAPAttack Scenario=SynBkd2022.06 | 88.74 | 31.58 | |
| RAPAttack Scenario=BadNet2022.06 | 88.69 | 91.01 | |
| STRIPAttack Scenario=BadNet2022.06 | 87.37 | 94.08 | |
| ONIONAttack Scenario=AddSent2022.06 | 87.31 | 95.5 | |
| ONIONAttack Scenario=None2022.06 | 86.77 | — | |
| ONIONAttack Scenario=BadNet2022.06 | 86.71 | 20.5 | |
| ONIONAttack Scenario=StyleBkd2022.06 | 84.24 | 82.55 | |
| ONIONAttack Scenario=SynBkd2022.06 | 83.96 | 86.08 | |
| RAPAttack Scenario=AddSent2022.06 | 65.79 | 45.94 | |
| RAPAttack Scenario=StyleBkd2022.06 | 51.95 | 52.12 | |
| RAPAttack Scenario=None2022.06 | 45.74 | — |