Topic Classification on AGNews (Adversarial Robustness)
0ASRPatcher
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| PatcherAttack=UJB2026.06 | 0 | — | — | 85 | — | |
| PatcherAttack=No attack2026.06 | 0 | — | — | 90 | — | |
| BAERASERAttack=No attack2026.06 | 0.01 | — | — | 85 | — | |
| PatcherAttack=No attack2026.06 | 0.01 | — | — | 85 | — | |
| PatcherAttack=BadNets2026.06 | 0.01 | — | — | 85 | — | |
| PatcherAttack=CBA2026.06 | 0.01 | — | — | 81 | — | |
| PatcherAttack=Sleeper2026.06 | 0.01 | — | — | 85 | — | |
| UnpatchedAttack=No attack2026.06 | 0.01 | — | — | 90 | — | |
| PatcherAttack=Sleeper2026.06 | 0.01 | — | — | 85 | — | |
| MudjackingAttack=No attack2026.06 | 0.02 | — | — | 86 | — | |
| OneShotAttack=No attack2026.06 | 0.02 | — | — | 83 | — | |
| ROMEAttack=No attack2026.06 | 0.02 | — | — | 84 | — | |
| PatcherAttack=POLISHED2026.06 | 0.02 | — | — | 84 | — | |
| UnpatchedAttack=No attack2026.06 | 0.03 | — | — | 86 | — | |
| FTℓ2Attack=No attack2026.06 | 0.03 | — | — | 84 | — | |
| FTℓ∞Attack=No attack2026.06 | 0.03 | — | — | 85 | — | |
| MENDAttack=No attack2026.06 | 0.04 | — | — | 85 | — | |
| FTAttack=No attack2026.06 | 0.05 | — | — | 86 | — | |
| FinePruningAttack=No attack2026.06 | 0.05 | — | — | 85 | — | |
| SPPAttack=No attack2026.06 | 0.06 | — | — | 83 | — | |
| SPPAttack=Sleeper2026.06 | 0.45 | — | — | 73 | — | |
| MudjackingAttack=Sleeper2026.06 | 0.52 | — | — | 80 | — | |
| MudjackingAttack=Sleeper2026.06 | 0.74 | — | — | 86 | — | |
| MudjackingAttack=CBA2026.06 | 0.81 | — | — | 80 | — | |
| SPPAttack=Sleeper2026.06 | 0.86 | — | — | 87 | — | |
| FTAttack=POLISHED2026.06 | 0.94 | — | — | 86 | — | |
| MENDAttack=BadNets2026.06 | 0.94 | — | — | 81 | — | |
| UnpatchedAttack=POLISHED2026.06 | 0.95 | — | — | 88 | — | |
| FTℓ2Attack=POLISHED2026.06 | 0.95 | — | — | 83 | — | |
| FTℓ∞Attack=POLISHED2026.06 | 0.95 | — | — | 85 | — | |
| FinePruningAttack=CBA2026.06 | 0.95 | — | — | 79 | — | |
| FinePruningAttack=POLISHED2026.06 | 0.95 | — | — | 87 | — | |
| BAERASERAttack=POLISHED2026.06 | 0.95 | — | — | 87 | — | |
| MudjackingAttack=POLISHED2026.06 | 0.95 | — | — | 87 | — | |
| SPPAttack=POLISHED2026.06 | 0.95 | — | — | 79 | — | |
| OneShotAttack=POLISHED2026.06 | 0.95 | — | — | 79 | — | |
| MENDAttack=CBA2026.06 | 0.95 | — | — | 82 | — | |
| MENDAttack=POLISHED2026.06 | 0.95 | — | — | 77 | — | |
| ROMEAttack=POLISHED2026.06 | 0.95 | — | — | 79 | — | |
| UnpatchedAttack=CBA2026.06 | 0.96 | — | — | 83 | — | |
| FTAttack=CBA2026.06 | 0.96 | — | — | 79 | — | |
| FTℓ2Attack=CBA2026.06 | 0.96 | — | — | 81 | — | |
| FTℓ∞Attack=CBA2026.06 | 0.96 | — | — | 82 | — | |
| FinePruningAttack=BadNets2026.06 | 0.96 | — | — | 86 | — | |
| BAERASERAttack=CBA2026.06 | 0.96 | — | — | 82 | — | |
| SPPAttack=BadNets2026.06 | 0.96 | — | — | 82 | — | |
| SPPAttack=CBA2026.06 | 0.96 | — | — | 82 | — | |
| OneShotAttack=CBA2026.06 | 0.96 | — | — | 79 | — | |
| ROMEAttack=CBA2026.06 | 0.96 | — | — | 82 | — | |
| UnpatchedAttack=BadNets2026.06 | 0.97 | — | — | 90 | — | |
| FTAttack=UJB2026.06 | 0.97 | — | — | 90 | — | |
| FTAttack=BadNets2026.06 | 0.97 | — | — | 89 | — | |
| FTℓ2Attack=BadNets2026.06 | 0.97 | — | — | 89 | — | |
| FTℓ∞Attack=UJB2026.06 | 0.97 | — | — | 90 | — | |
| FTℓ∞Attack=BadNets2026.06 | 0.97 | — | — | 88 | — | |
| BAERASERAttack=BadNets2026.06 | 0.97 | — | — | 85 | — | |
| MudjackingAttack=UJB2026.06 | 0.97 | — | — | 88 | — | |
| MudjackingAttack=BadNets2026.06 | 0.97 | — | — | 85 | — | |
| SPPAttack=UJB2026.06 | 0.97 | — | — | 77 | — | |
| OneShotAttack=UJB2026.06 | 0.97 | — | — | 76 | — | |
| OneShotAttack=BadNets2026.06 | 0.97 | — | — | 84 | — | |
| ROMEAttack=BadNets2026.06 | 0.97 | — | — | 84 | — | |
| UnpatchedAttack=UJB2026.06 | 0.98 | — | — | 89 | — | |
| UnpatchedAttack=Sleeper2026.06 | 0.98 | — | — | 89 | — | |
| FTAttack=Sleeper2026.06 | 0.98 | — | — | 88 | — | |
| FTℓ2Attack=UJB2026.06 | 0.98 | — | — | 88 | — | |
| FTℓ2Attack=Sleeper2026.06 | 0.98 | — | — | 88 | — | |
| FTℓ∞Attack=Sleeper2026.06 | 0.98 | — | — | 88 | — | |
| FinePruningAttack=UJB2026.06 | 0.98 | — | — | 87 | — | |
| FinePruningAttack=Sleeper2026.06 | 0.98 | — | — | 85 | — | |
| BAERASERAttack=UJB2026.06 | 0.98 | — | — | 84 | — | |
| BAERASERAttack=Sleeper2026.06 | 0.98 | — | — | 84 | — | |
| OneShotAttack=Sleeper2026.06 | 0.98 | — | — | 87 | — | |
| MENDAttack=UJB2026.06 | 0.98 | — | — | 75 | — | |
| MENDAttack=Sleeper2026.06 | 0.98 | — | — | 86 | — | |
| ROMEAttack=UJB2026.06 | 0.98 | — | — | 76 | — | |
| ROMEAttack=Sleeper2026.06 | 0.98 | — | — | 87 | — | |
| UnpatchedAttack=Sleeper2026.06 | 0.99 | — | — | 87 | — | |
| ADFAR2023.05 | — | -2.7 | 10.2 | — | — | |
| AT2023.05 | — | -0.7 | -1 | — | — | |
| ATINTER2023.05 | — | -0.2 | 21.9 | — | — | |
| AttDefAttack=BadNLl2023.05 | — | 1.15 | — | — | 97.99 | |
| AttDefAttack=BadNLm2023.05 | — | 0.82 | — | — | 93.58 | |
| AttDefAttack=BadNLh2023.05 | — | 0.69 | — | — | 51.07 | |
| AttDefAttack=InSent2023.05 | — | 0.64 | — | — | 96.73 | |
| AttDefAttack=Avg2023.05 | — | 0.83 | — | — | 84.84 | |
| AttDef w/o ELECTRAAttack=BadNLl2023.05 | — | 0.63 | — | — | 80.95 | |
| AttDef w/o ELECTRAAttack=BadNLm2023.05 | — | 0.4 | — | — | 84.79 | |
| AttDef w/o ELECTRAAttack=BadNLh2023.05 | — | 0.28 | — | — | 49.5 | |
| AttDef w/o ELECTRAAttack=InSent2023.05 | — | 0.26 | — | — | 59.88 | |
| AttDef w/o ELECTRAAttack=Avg2023.05 | — | 0.39 | — | — | 68.78 | |
| SAFER2023.05 | — | -3.7 | -4.2 | — | — | |
| SampleShielder2023.05 | — | -4.1 | 9.4 | — | — | |
| SHIELD2023.05 | — | -2.5 | 1.2 | — | — |