Unauthorized Routing Defense on BCI Command-Control 10 seeds
0Unauthorized Target-Route RateCalibrated PGD pair
Evaluation results
| Method | Links | |
|---|---|---|
| Calibrated PGD pairAttack=Confirmation upper bound (exec.)2026.06 | 0 | |
| Calibrated PGD ensembleAttack=Confirmation upper bound (exec.)2026.06 | 0 | |
| Calibrated PGD pairAttack=Decision-only, Queries=2002026.06 | 3.7 | |
| Calibrated PGD ensembleAttack=Decision-only, Queries=2002026.06 | 3.7 | |
| PrimaryAttack=Decision-only, Queries=2002026.06 | 6.7 | |
| Calibrated PGD ensembleAttack=Score-query, Queries=1002026.06 | 6.7 | |
| Calibrated PGD ensembleAttack=Score-query, Queries=2002026.06 | 7.3 | |
| Calibrated PGD pairAttack=Score-query, Queries=1002026.06 | 8.7 | |
| Calibrated PGD pairAttack=Score-query, Queries=2002026.06 | 9.3 | |
| Calibrated PGD pairAttack=Band-limited ensemble PGD2026.06 | 13.5 | |
| Calibrated PGD ensembleAttack=Band-limited ensemble PGD2026.06 | 13.7 | |
| PrimaryAttack=Score-query, Queries=1002026.06 | 40.7 | |
| PrimaryAttack=Score-query, Queries=2002026.06 | 43.3 | |
| Calibrated PGD ensembleAttack=White-box pair PGD2026.06 | 59 | |
| Calibrated PGD pairAttack=White-box ensemble PGD2026.06 | 68.5 | |
| Calibrated PGD ensembleAttack=White-box ensemble PGD2026.06 | 69.2 | |
| Calibrated PGD pairAttack=White-box pair PGD2026.06 | 69.3 | |
| PrimaryAttack=Band-limited ensemble PGD2026.06 | 83.2 | |
| PrimaryAttack=White-box ensemble PGD2026.06 | 99.8 | |
| PrimaryAttack=White-box pair PGD2026.06 | 100 |