# Unimodal Backdoor Defense on ImageNet-1K 1.0 (test)

Source: [Unimodal Backdoor Defense on ImageNet-1K 1.0 (test)](<https://www.sota2.com/research/sota/unimodal-backdoor-defense-on-imagenet-1k-1-0-test>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-06-30T07:36:41.333Z

Evaluation of unimodal backdoor defense mechanisms on the ImageNet-1K 1.0 test set, reporting Clean Accuracy (CA), Perturbation Accuracy (PA), AUC, and Attack Success Rate (ASR).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Backdoor Defense (Unimodal) |
| Dataset (including any stated split) | ImageNet-1K 1.0 (test) |
| Metric | Clean Accuracy (CA) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 7 of 7 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Clean Accuracy (CA)](<https://www.sota2.com/research/sota/unimodal-backdoor-defense-on-imagenet-1k-1-0-test.md?metric=Clean%20Accuracy%20(CA)>): Higher is better; unit: PERCENT.

- [Perturbation Accuracy (PA)](<https://www.sota2.com/research/sota/unimodal-backdoor-defense-on-imagenet-1k-1-0-test.md?metric=Perturbation%20Accuracy%20(PA)>): Higher is better; unit: PERCENT.

- [AUC](<https://www.sota2.com/research/sota/unimodal-backdoor-defense-on-imagenet-1k-1-0-test.md?metric=AUC>): Higher is better; unit: PERCENT.

- [Attack Success Rate (ASR)](<https://www.sota2.com/research/sota/unimodal-backdoor-defense-on-imagenet-1k-1-0-test.md?metric=Attack%20Success%20Rate%20(ASR)>): Lower is better; unit: PERCENT.

## Recorded results

| Method | Clean Accuracy (CA) | Result date | Report paper |
| --- | --- | --- | --- |
| Platonic Defense | 77.47 | Not recorded | 6a434d7dba73165dbb74395b |
| Decomp | 75.83 | Not recorded | 6a434d7dba73165dbb74395b |
| No Defense | 75.63 | Not recorded | 6a434d7dba73165dbb74395b |
| ZIP | 65.68 | Not recorded | 6a434d7dba73165dbb74395b |
| DeDe | 29.56 | Not recorded | 6a434d7dba73165dbb74395b |

### Platonic Defense

Clean Accuracy (CA): 77.47. Result ID: 6a4371eefbc373592c93ad33.

[Reporting paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

Recorded evaluation configuration: {"Evaluation protocol":"linear probing","Attack":"Average (Backdoor attacks on unimodal encoders)"}. This record does not assert independent reproduction.

### Decomp

Clean Accuracy (CA): 75.83. Result ID: 6a4371eefbc373592c93ad2e.

[Reporting paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

Recorded evaluation configuration: {"Evaluation protocol":"linear probing","Attack":"Average (Backdoor attacks on unimodal encoders)"}. This record does not assert independent reproduction.

### No Defense

Clean Accuracy (CA): 75.63. Result ID: 6a4371eefbc373592c93ad2d.

[Reporting paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

Recorded evaluation configuration: {"Evaluation protocol":"linear probing","Attack":"Average (Backdoor attacks on unimodal encoders)"}. This record does not assert independent reproduction.

### ZIP

Clean Accuracy (CA): 65.68. Result ID: 6a4371eefbc373592c93ad30.

[Reporting paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71021e209131cea4e7cd.md>)

[Implementation](<https://github.com/sycny/ZIP>)

Recorded evaluation configuration: {"Evaluation protocol":"linear probing","Attack":"Average (Backdoor attacks on unimodal encoders)"}. This record does not assert independent reproduction.

### DeDe

Clean Accuracy (CA): 29.56. Result ID: 6a4371eefbc373592c93ad2f.

[Reporting paper](<https://www.sota2.com/research/paper/6a434d7dba73165dbb74395b.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa777e1e209131cea738c3.md>)

[Implementation](<https://github.com/tardisblue9/DeDe>)

Recorded evaluation configuration: {"Evaluation protocol":"linear probing","Attack":"Average (Backdoor attacks on unimodal encoders)"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.