Trojan Detection on CIFAR-10
20True Positives (TP)DeepInspect
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| DeepInspectNetwork=ResNet18, Attack=BadNets2022.10 | 20 | 2 | 0 | 18 | 0.95 | |
| TABORNetwork=ResNet18, Attack=BadNets2022.10 | 20 | 3 | 0 | 17 | 0.93 | |
| K-armNetwork=ResNet18, Attack=BadNets2022.10 | 20 | 0 | 0 | 20 | 1 | |
| FeatureRENetwork=ResNet18, Attack=BadNets2022.10 | 20 | 1 | 0 | 19 | 0.98 | |
| FeatureRENetwork=ResNet18, Attack=IA2022.10 | 19 | 1 | 1 | 19 | 0.95 | |
| ABSNetwork=ResNet18, Attack=BadNets2022.10 | 18 | 0 | 2 | 20 | 0.95 | |
| FeatureRENetwork=ResNet18, Attack=Filter2022.10 | 18 | 1 | 2 | 19 | 0.93 | |
| FeatureRENetwork=ResNet18, Attack=WaNet2022.10 | 18 | 1 | 2 | 19 | 0.93 | |
| FeatureRENetwork=VGG, Attack=WaNet2022.10 | 17 | 0 | 3 | 20 | 0.93 | |
| ABSNetwork=ResNet18, Attack=Filter2022.10 | 13 | 0 | 7 | 20 | 0.83 | |
| ABSNetwork=ResNet18, Attack=WaNet2022.10 | 11 | 0 | 9 | 20 | 0.78 | |
| DeepInspectNetwork=ResNet18, Attack=WaNet2022.10 | 11 | 2 | 9 | 18 | 0.73 | |
| NCAttack=BadNet2026.05 | 10 | 3 | 0 | 7 | 0.85 | |
| FeatuREAttack=BadNet2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=BadNet2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=Blended2026.05 | 10 | 0 | 0 | 10 | 1 | |
| NCAttack=Input-Aware2026.05 | 10 | 3 | 0 | 7 | 0.85 | |
| FeatuREAttack=Input-Aware2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=Input-Aware2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=Refool2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=SSBA2026.05 | 10 | 0 | 0 | 10 | 1 | |
| FeatuREAttack=TrojanNN2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=TrojanNN2026.05 | 10 | 0 | 0 | 10 | 1 | |
| FeatuREAttack=Wanet2026.05 | 10 | 0 | 0 | 10 | 1 | |
| MISTAttack=Wanet2026.05 | 10 | 0 | 0 | 10 | 1 | |
| K-armNetwork=ResNet18, Attack=WaNet2022.10 | 9 | 0 | 11 | 20 | 0.73 | |
| NCAttack=SSBA2026.05 | 9 | 3 | 1 | 7 | 0.8 | |
| ABSAttack=BadNet2026.05 | 7 | 2 | 3 | 8 | 0.75 | |
| ABSAttack=Refool2026.05 | 7 | 2 | 3 | 8 | 0.75 | |
| MISTAttack=SIG2026.05 | 7 | 0 | 3 | 10 | 0.85 | |
| NCAttack=TrojanNN2026.05 | 7 | 3 | 2 | 7 | 0.74 | |
| DeepInspectNetwork=ResNet18, Attack=Filter2022.10 | 6 | 2 | 14 | 18 | 0.6 | |
| FeatuREAttack=Blended2026.05 | 6 | 0 | 4 | 10 | 0.8 | |
| ABSAttack=Input-Aware2026.05 | 6 | 2 | 4 | 8 | 0.7 | |
| ABSAttack=TrojanNN2026.05 | 6 | 2 | 4 | 8 | 0.7 | |
| TABORNetwork=ResNet18, Attack=Filter2022.10 | 5 | 3 | 15 | 17 | 0.55 | |
| NCAttack=Blended2026.05 | 5 | 3 | 5 | 7 | 0.6 | |
| ABSAttack=Blended2026.05 | 5 | 2 | 5 | 8 | 0.65 | |
| FeatuREAttack=Refool2026.05 | 5 | 0 | 5 | 10 | 0.75 | |
| ABSAttack=SIG2026.05 | 5 | 2 | 5 | 8 | 0.65 | |
| ABSAttack=SSBA2026.05 | 5 | 2 | 5 | 8 | 0.65 | |
| ABSAttack=Wanet2026.05 | 5 | 2 | 5 | 8 | 0.65 | |
| DeepInspectNetwork=ResNet18, Attack=IA2022.10 | 4 | 2 | 16 | 18 | 0.55 | |
| NCAttack=Wanet2026.05 | 4 | 3 | 6 | 7 | 0.55 | |
| TABORNetwork=ResNet18, Attack=WaNet2022.10 | 3 | 3 | 17 | 17 | 0.5 | |
| ABSNetwork=ResNet18, Attack=IA2022.10 | 3 | 0 | 17 | 20 | 0.58 | |
| TABORNetwork=ResNet18, Attack=IA2022.10 | 3 | 3 | 17 | 17 | 0.5 | |
| NCAttack=Refool2026.05 | 3 | 3 | 7 | 7 | 0.5 | |
| NCAttack=SIG2026.05 | 3 | 3 | 7 | 7 | 0.5 | |
| K-armNetwork=ResNet18, Attack=IA2022.10 | 2 | 0 | 18 | 20 | 0.55 | |
| ULPNetwork=VGG, Attack=WaNet2022.10 | 1 | 0 | 19 | 20 | 0.0053 | |
| FeatuREAttack=SSBA2026.05 | 1 | 0 | 9 | 10 | 0.55 | |
| K-armNetwork=ResNet18, Attack=Filter2022.10 | 0 | 0 | 20 | 20 | 0.5 | |
| FeatuREAttack=SIG2026.05 | 0 | 0 | 10 | 10 | 0.5 |