SlowGuess/NeurIPS_2023_OCR huggingface dataset:
Table 5: Complete list of  $\mathcal{R}$  and its bounds under  $(\mathcal{W}_{\infty}, l_{2})$  threat model based on CE loss.
δ=1/8	δ=1/4
Network	R	ΔRu	Δrl	R	ΔRu	Δrl
Augustin2020Adversarial	0.9649	0.0026	-0.0153	0.9275	0.0083	-0.0324
Augustin2020Adversarial_34_10	0.9669	0.0035	-0.0097	0.9303	0.0115	-0.0201
Augustin2020Adversarial_34_10extra	0.9752	0.0031	-0.0150	0.9400	0.0084	-0.0239
Ding2020MMA	0.9496	0.0016	-0.0176	0.8912	0.0081	-0.0434
Engstrom2019Robustness	0.9557	0.0019	-0.0087	0.9069	0.0057	-0.0256
Gowal2020Uncovering	0.9640	0.0022	-0.0063	0.9271	0.0045	-0.0191
Gowal2020Uncoveringextra	0.9779	0.0013	-0.0121	0.9451	0.0050	-0.0209
Rade2021Helper_R18_ddpm	0.9720	0.0017	-0.0124	0.9339	0.0061	-0.0209
Rebuffi2021Fixing_28_10cutmix_ddpm	0.9724	0.0034	-0.0107	0.9416	0.0060	-0.0232
Rebuffi2021Fixing_70_16cutmix_ddpm	0.9778	0.0021	-0.0137	0.9489	0.0052	-0.0259
Rebuffi2021Fixing_70_16cutmixextra	0.9795	0.0018	-0.0091	0.9524	0.0040	-0.0184
Rebuffi2021Fixing_R18_cutmix_ddpm	0.9686	0.0032	-0.0150	0.9352	0.0061	-0.0339
Rice2020Overfitting	0.9593	0.0030	-0.0178	0.9061	0.0090	-0.0342
Rony2019Decoupling	0.9517	0.0015	-0.0144	0.8899	0.0077	-0.0316
Sehwag2021Proxy	0.9724	0.0027	-0.0099	0.9420	0.0065	-0.0235
Sehwag2021Proxy_R18	0.9703	0.0028	-0.0133	0.9344	0.0057	-0.0271
Wang2023Better_WRN-28-10	0.9819	0.0013	-0.0098	0.9541	0.0047	-0.0147
Wang2023Better_WRN-70-16	0.9814	0.0015	-0.0069	0.9609	0.0029	-0.0163
Wu2020Adversarial	0.9640	0.0024	-0.0088	0.9270	0.0051	-0.0221
Table 6: Complete list of  $\mathcal{R}$  and its bounds under  $(\mathcal{W}_2, l_2)$  threat model based on ReDLR loss.
δ=1/32	δ=1/16
Network	R	ΔRu	ΔRl	R	ΔRu	ΔRl
Augustin2020Adversarial	0.9844	0.0058	-0.0358	0.9723	0.0131	-0.0505
Augustin2020Adversarial_34_10	0.9868	0.0026	-0.0518	0.9738	0.0094	-0.0743
Augustin2020Adversarial_34_10extra	0.9879	0.0049	-0.0452	0.9756	0.0105	-0.0652
Ding2020MMA	0.9788	0.0087	-0.0694	0.9644	0.0148	-0.1079
Engstrom2019Robustness	0.9834	0.0036	-0.0798	0.9719	0.0085	-0.1250
Gowal2020Uncovering	0.9837	0.0048	-0.0581	0.9719	0.0110	-0.0918
Gowal2020Uncoveringextra	0.9915	0.0026	-0.0574	0.9855	0.0039	-0.0898
Rade2021Helper_R18_ddpm	0.9879	0.0055	-0.0530	0.9802	0.0075	-0.0871
Rebuffi2021Fixing_28_10cutmix_ddpm	0.9902	0.0034	-0.0572	0.9826	0.0069	-0.0912
Rebuffi2021Fixing_70_16cutmix_ddpm	0.9920	0.0023	-0.0610	0.9852	0.0055	-0.0966
Rebuffi2021Fixing_70_16cutmixextra	0.9922	0.0020	-0.0539	0.9851	0.0050	-0.0852
Rebuffi2021Fixing_R18_cutmix_dppm	0.9894	0.0034	-0.0711	0.9791	0.0081	-0.1104
Rice2020Overfitting	0.9859	0.0046	-0.0825	0.9738	0.0104	-0.1263
Rony2019Decoupling	0.9829	0.0045	-0.0855	0.9672	0.0116	-0.1267
Sehwag2021Proxy	0.9918	0.0018	-0.0767	0.9824	0.0047	-0.1165
Sehwag2021Proxy_R18	0.9890	0.0039	-0.0558	0.9789	0.0097	-0.0868
Wang2023Better_WRN-28-10	0.9902	0.0023	-0.0492	0.9832	0.0054	-0.0775
Wang2023Better_WRN-70-16	0.9919	0.0020	-0.0494	0.9850	0.0043	-0.0780
Wu2020Adversarial	0.9867	0.0037	-0.0704	0.9759	0.0092	-0.1114