table
Browse files- index.html +140 -6
index.html
CHANGED
@@ -25,6 +25,17 @@
|
|
25 |
<script src="./static/js/bulma-carousel.min.js"></script>
|
26 |
<script src="./static/js/bulma-slider.min.js"></script>
|
27 |
<script src="./static/js/index.js"></script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
28 |
</head>
|
29 |
<body>
|
30 |
|
@@ -214,12 +225,11 @@
|
|
214 |
<div class="container is-max-desktop">
|
215 |
<h2 class="title is-3">Neighborhood Relations of Benign Examples and AEs</h2>
|
216 |
<div class="columns is-centered">
|
217 |
-
<div class="column container-centered">
|
218 |
-
<img src="./static/images/relations.
|
219 |
-
|
220 |
-
|
221 |
-
|
222 |
-
the input image and its neighbors. Finally, The input image with poor label consistency or representation similarity is flagged as AE.</p>
|
223 |
</div>
|
224 |
</div>
|
225 |
</div>
|
@@ -240,6 +250,130 @@
|
|
240 |
</div>
|
241 |
</section>
|
242 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
243 |
|
244 |
<section class="section" id="BibTeX">
|
245 |
<div class="container is-max-desktop content">
|
|
|
25 |
<script src="./static/js/bulma-carousel.min.js"></script>
|
26 |
<script src="./static/js/bulma-slider.min.js"></script>
|
27 |
<script src="./static/js/index.js"></script>
|
28 |
+
|
29 |
+
<style type="text/css">
|
30 |
+
.tg {border-collapse:collapse;border-spacing:0;}
|
31 |
+
.tg td{border-color:black;border-style:solid;border-width:1px;font-family:Arial, sans-serif;font-size:14px;
|
32 |
+
overflow:hidden;padding:10px 5px;word-break:normal;}
|
33 |
+
.tg th{border-color:black;border-style:solid;border-width:1px;font-family:Arial, sans-serif;font-size:14px;
|
34 |
+
font-weight:normal;overflow:hidden;padding:10px 5px;word-break:normal;}
|
35 |
+
.tg .tg-baqh{text-align:center;vertical-align:top}
|
36 |
+
.tg .tg-amwm{font-weight:bold;text-align:center;vertical-align:top}
|
37 |
+
.tg .tg-2imo{font-style:italic;text-align:center;text-decoration:underline;vertical-align:top}
|
38 |
+
</style>
|
39 |
</head>
|
40 |
<body>
|
41 |
|
|
|
225 |
<div class="container is-max-desktop">
|
226 |
<h2 class="title is-3">Neighborhood Relations of Benign Examples and AEs</h2>
|
227 |
<div class="columns is-centered">
|
228 |
+
<div class="column container-centered is-four-fifths">
|
229 |
+
<img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
|
230 |
+
</div>
|
231 |
+
<div class="column has-text-centered">
|
232 |
+
<p><strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>. .</p>
|
|
|
233 |
</div>
|
234 |
</div>
|
235 |
</div>
|
|
|
250 |
</div>
|
251 |
</section>
|
252 |
|
253 |
+
<section class="section">
|
254 |
+
<div class="container is-max-desktop">
|
255 |
+
<h2 class="title is-3">Detection Performance</h2>
|
256 |
+
<div class="columns is-centered">
|
257 |
+
<div class="column container-centered">
|
258 |
+
<table class="tg"><thead>
|
259 |
+
<tr>
|
260 |
+
<th class="tg-amwm" rowspan="2">AUC(%)</th>
|
261 |
+
<th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
|
262 |
+
<th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
|
263 |
+
</tr>
|
264 |
+
<tr>
|
265 |
+
<th class="tg-baqh">FGSM</th>
|
266 |
+
<th class="tg-baqh">PGD</th>
|
267 |
+
<th class="tg-baqh">AutoAttack</th>
|
268 |
+
<th class="tg-baqh">Square</th>
|
269 |
+
<th class="tg-baqh">FGSM</th>
|
270 |
+
<th class="tg-baqh">PGD</th>
|
271 |
+
<th class="tg-baqh">CW</th>
|
272 |
+
<th class="tg-baqh">AutoAttack</th>
|
273 |
+
<th class="tg-baqh">Square</th>
|
274 |
+
</tr></thead>
|
275 |
+
<tbody>
|
276 |
+
<tr>
|
277 |
+
<td class="tg-baqh">DkNN</td>
|
278 |
+
<td class="tg-baqh">61.55</td>
|
279 |
+
<td class="tg-baqh">51.22</td>
|
280 |
+
<td class="tg-baqh">52.12</td>
|
281 |
+
<td class="tg-baqh">59.46</td>
|
282 |
+
<td class="tg-baqh">61.55</td>
|
283 |
+
<td class="tg-baqh">51.22</td>
|
284 |
+
<td class="tg-baqh">61.52</td>
|
285 |
+
<td class="tg-baqh">52.12</td>
|
286 |
+
<td class="tg-baqh">59.46</td>
|
287 |
+
</tr>
|
288 |
+
<tr>
|
289 |
+
<td class="tg-baqh">kNN</td>
|
290 |
+
<td class="tg-baqh">61.83</td>
|
291 |
+
<td class="tg-baqh">54.52</td>
|
292 |
+
<td class="tg-baqh">52.67</td>
|
293 |
+
<td class="tg-baqh">73.39</td>
|
294 |
+
<td class="tg-baqh">61.83</td>
|
295 |
+
<td class="tg-baqh">54.52</td>
|
296 |
+
<td class="tg-baqh">62.23</td>
|
297 |
+
<td class="tg-baqh">52.67</td>
|
298 |
+
<td class="tg-baqh">73.39</td>
|
299 |
+
</tr>
|
300 |
+
<tr>
|
301 |
+
<td class="tg-baqh">LID</td>
|
302 |
+
<td class="tg-baqh">71.08</td>
|
303 |
+
<td class="tg-baqh">61.33</td>
|
304 |
+
<td class="tg-baqh">55.56</td>
|
305 |
+
<td class="tg-baqh">66.18</td>
|
306 |
+
<td class="tg-baqh">73.61</td>
|
307 |
+
<td class="tg-baqh">67.98</td>
|
308 |
+
<td class="tg-baqh">55.68</td>
|
309 |
+
<td class="tg-baqh">56.33</td>
|
310 |
+
<td class="tg-baqh">85.94</td>
|
311 |
+
</tr>
|
312 |
+
<tr>
|
313 |
+
<td class="tg-baqh">Hu</td>
|
314 |
+
<td class="tg-baqh">84.51</td>
|
315 |
+
<td class="tg-baqh">58.59</td>
|
316 |
+
<td class="tg-baqh">53.55</td>
|
317 |
+
<td class="tg-baqh">95.82</td>
|
318 |
+
<td class="tg-baqh">84.51</td>
|
319 |
+
<td class="tg-baqh">58.59</td>
|
320 |
+
<td class="tg-2imo">91.02</td>
|
321 |
+
<td class="tg-baqh">53.55</td>
|
322 |
+
<td class="tg-baqh">95.82</td>
|
323 |
+
</tr>
|
324 |
+
<tr>
|
325 |
+
<td class="tg-baqh">Mao</td>
|
326 |
+
<td class="tg-baqh">95.33</td>
|
327 |
+
<td class="tg-2imo">82.61</td>
|
328 |
+
<td class="tg-2imo">81.95</td>
|
329 |
+
<td class="tg-baqh">85.76</td>
|
330 |
+
<td class="tg-baqh">95.33</td>
|
331 |
+
<td class="tg-baqh">82.61</td>
|
332 |
+
<td class="tg-baqh">83.10</td>
|
333 |
+
<td class="tg-baqh">81.95</td>
|
334 |
+
<td class="tg-baqh">85.76</td>
|
335 |
+
</tr>
|
336 |
+
<tr>
|
337 |
+
<td class="tg-baqh">LNG</td>
|
338 |
+
<td class="tg-2imo">98.51 </td>
|
339 |
+
<td class="tg-baqh">63.14 </td>
|
340 |
+
<td class="tg-baqh">58.47 </td>
|
341 |
+
<td class="tg-2imo">94.71 </td>
|
342 |
+
<td class="tg-amwm">99.88 </td>
|
343 |
+
<td class="tg-2imo">91.39 </td>
|
344 |
+
<td class="tg-baqh">89.74 </td>
|
345 |
+
<td class="tg-2imo">84.03 </td>
|
346 |
+
<td class="tg-2imo">98.82 </td>
|
347 |
+
</tr>
|
348 |
+
<tr>
|
349 |
+
<td class="tg-baqh">BEYOND</td>
|
350 |
+
<td class="tg-amwm">98.89</td>
|
351 |
+
<td class="tg-amwm">99.28</td>
|
352 |
+
<td class="tg-amwm">99.16</td>
|
353 |
+
<td class="tg-amwm">99.27</td>
|
354 |
+
<td class="tg-2imo">98.89</td>
|
355 |
+
<td class="tg-amwm">99.28</td>
|
356 |
+
<td class="tg-amwm">99.20</td>
|
357 |
+
<td class="tg-amwm">99.16</td>
|
358 |
+
<td class="tg-amwm">99.27</td>
|
359 |
+
</tr>
|
360 |
+
</tbody></table>
|
361 |
+
</div>
|
362 |
+
</div>
|
363 |
+
</div>
|
364 |
+
</section>
|
365 |
+
|
366 |
+
<section class="section">
|
367 |
+
<div class="container is-max-desktop">
|
368 |
+
<h2 class="title is-3">Adaptive Attack</h2>
|
369 |
+
<div class="columns is-centered">
|
370 |
+
<div class="column container-centered">
|
371 |
+
|
372 |
+
</div>
|
373 |
+
</div>
|
374 |
+
</div>
|
375 |
+
</section>
|
376 |
+
|
377 |
|
378 |
<section class="section" id="BibTeX">
|
379 |
<div class="container is-max-desktop content">
|