White-box Adversarial Robustness on MNIST (test)
99.5Robustness ScorePang et al.
Evaluation Results
| Method | Links | |
|---|---|---|
| Pang et al.Attack=No Attack2019.04 | 99.5 | |
| PCL (Ours)Attack=No Attack, Adversarial Training=None2019.04 | 99.5 | |
| PCL (Ours*)Attack=No Attack, Adversarial Training=FGSM2019.04 | 99.4 | |
| PCL (Ours**)Attack=No Attack, Adversarial Training=PGD2019.04 | 99.3 | |
| Ross et al.Attack=No Attack2019.04 | 99.2 | |
| AdvTrainAttack=No Attack, Adversarial Training=true2019.04 | 99.1 | |
| BaselineAttack=No Attack2019.04 | 98.7 | |
| Yu et al.Attack=No Attack2019.04 | 98.4 | |
| PCL (Ours)Attack=C&W, c=0.1, Adversarial Training=None2019.04 | 97.7 | |
| PCL (Ours**)Attack=C&W, c=0.1, Adversarial Training=PGD2019.04 | 97.6 | |
| PCL (Ours*)Attack=FGSM, epsilon=0.1, Adversarial Training=FGSM2019.04 | 97.2 | |
| PCL (Ours)Attack=FGSM, epsilon=0.1, Adversarial Training=None2019.04 | 97.1 | |
| PCL (Ours*)Attack=C&W, c=0.1, Adversarial Training=FGSM2019.04 | 97.1 | |
| PCL (Ours**)Attack=FGSM, epsilon=0.1, Adversarial Training=PGD2019.04 | 96.5 | |
| PCL (Ours**)Attack=PGD, epsilon=0.1, Adversarial Training=PGD2019.04 | 93.9 | |
| PCL (Ours*)Attack=PGD, epsilon=0.1, Adversarial Training=FGSM2019.04 | 93.7 | |
| PCL (Ours**)Attack=MIM, epsilon=0.1, Adversarial Training=PGD2019.04 | 93 | |
| PCL (Ours*)Attack=MIM, epsilon=0.1, Adversarial Training=FGSM2019.04 | 92.7 | |
| PCL (Ours**)Attack=BIM, epsilon=0.1, Adversarial Training=PGD2019.04 | 92.1 | |
| PCL (Ours)Attack=MIM, epsilon=0.1, Adversarial Training=None2019.04 | 92.1 | |
| PCL (Ours*)Attack=BIM, epsilon=0.1, Adversarial Training=FGSM2019.04 | 92 | |
| PCL (Ours)Attack=BIM, epsilon=0.1, Adversarial Training=None2019.04 | 90.2 | |
| PCL (Ours)Attack=PGD, epsilon=0.1, Adversarial Training=None2019.04 | 83.6 | |
| PCL (Ours**)Attack=MIM, epsilon=0.15, Adversarial Training=PGD2019.04 | 82 | |
| PCL (Ours*)Attack=MIM, epsilon=0.15, Adversarial Training=FGSM2019.04 | 80.2 | |
| PCL (Ours*)Attack=FGSM, epsilon=0.2, Adversarial Training=FGSM2019.04 | 80 | |
| PCL (Ours**)Attack=FGSM, epsilon=0.2, Adversarial Training=PGD2019.04 | 77.9 | |
| PCL (Ours)Attack=MIM, epsilon=0.15, Adversarial Training=None2019.04 | 77.7 | |
| PCL (Ours**)Attack=BIM, epsilon=0.15, Adversarial Training=PGD2019.04 | 77.3 | |
| PCL (Ours*)Attack=BIM, epsilon=0.15, Adversarial Training=FGSM2019.04 | 76.5 | |
| PCL (Ours)Attack=BIM, epsilon=0.15, Adversarial Training=None2019.04 | 76.3 | |
| PCL (Ours)Attack=FGSM, epsilon=0.2, Adversarial Training=None2019.04 | 70.6 |