Text Classification on Yelp (ACC, ASR)
65.36AccuracyPatronus
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| PatronusAttack=POR-1, Defense=Adv-Finetune2025.12 | 65.36 | 6.03 | |
| PatronusAttack=POR-2, Defense=Adv-Finetune2025.12 | 65.17 | 5.71 | |
| No DefenseAttack=Clean, Defense=w/o Defense2025.12 | 64.88 | 6.26 | |
| No DefenseAttack=POR-1, Defense=w/o Defense2025.12 | 64.12 | 99.72 | |
| No DefenseAttack=POR-2, Defense=w/o Defense2025.12 | 64.02 | 99.97 | |
| PatronusAttack=POR-1, Defense=Adv-Pretrain2025.12 | 63.29 | 5.46 | |
| PatronusAttack=POR-2, Defense=Adv-Pretrain2025.12 | 63.28 | 5.05 | |
| Patronus (Adv-Finetune)Attacks=POR-22025.12 | 0.6559 | 0.0449 | |
| Patronus (Adv-Finetune)Attacks=NeuBA2025.12 | 0.6539 | 0.0478 | |
| Patronus (Adv-Pretrain)Attacks=POR-22025.12 | 0.651 | 0.0445 | |
| Baseline (w/o Defense)Attacks=Clean2025.12 | 0.6488 | 0.0626 | |
| Baseline (w/o Defense)Attacks=NeuBA2025.12 | 0.6476 | 0.9584 | |
| Patronus (Adv-Pretrain)Attacks=NeuBA2025.12 | 0.6452 | 0.0604 | |
| Baseline (w/o Defense)Attacks=POR-22025.12 | 0.642 | 0.933 | |
| Patronus (Adv-Finetune)Attacks=POR-12025.12 | 0.6417 | 0.0546 | |
| Patronus (Adv-Pretrain)Attacks=POR-12025.12 | 0.6398 | 0.0537 | |
| Baseline (w/o Defense)Attacks=POR-12025.12 | 0.6371 | 0.9769 |