table
Browse files- index.html +115 -105
index.html
CHANGED
@@ -227,7 +227,13 @@
|
|
227 |
<div class="columns is-centered">
|
228 |
<div class="column container-centered is-four-fifths">
|
229 |
<img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
|
230 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
231 |
</div>
|
232 |
</div>
|
233 |
</div>
|
@@ -254,110 +260,114 @@
|
|
254 |
<div class="columns is-centered">
|
255 |
<div class="column container-centered">
|
256 |
<table class="tg" border="1" style="width:100%; text-align:center;">
|
257 |
-
|
258 |
-
|
259 |
-
|
260 |
-
|
261 |
-
|
262 |
-
|
263 |
-
|
264 |
-
|
265 |
-
|
266 |
-
|
267 |
-
<
|
268 |
-
|
269 |
-
|
270 |
-
|
271 |
-
|
272 |
-
|
273 |
-
|
274 |
-
|
275 |
-
|
276 |
-
|
277 |
-
|
278 |
-
|
279 |
-
|
280 |
-
<
|
281 |
-
|
282 |
-
|
283 |
-
|
284 |
-
|
285 |
-
|
286 |
-
|
287 |
-
|
288 |
-
|
289 |
-
|
290 |
-
|
291 |
-
|
292 |
-
<
|
293 |
-
|
294 |
-
|
295 |
-
|
296 |
-
|
297 |
-
|
298 |
-
|
299 |
-
|
300 |
-
|
301 |
-
|
302 |
-
|
303 |
-
|
304 |
-
<
|
305 |
-
|
306 |
-
|
307 |
-
|
308 |
-
|
309 |
-
|
310 |
-
|
311 |
-
|
312 |
-
|
313 |
-
|
314 |
-
|
315 |
-
|
316 |
-
<
|
317 |
-
|
318 |
-
|
319 |
-
|
320 |
-
|
321 |
-
|
322 |
-
|
323 |
-
|
324 |
-
|
325 |
-
|
326 |
-
|
327 |
-
|
328 |
-
<
|
329 |
-
|
330 |
-
|
331 |
-
|
332 |
-
|
333 |
-
|
334 |
-
|
335 |
-
|
336 |
-
|
337 |
-
|
338 |
-
|
339 |
-
|
340 |
-
<
|
341 |
-
|
342 |
-
|
343 |
-
|
344 |
-
|
345 |
-
|
346 |
-
|
347 |
-
|
348 |
-
|
349 |
-
|
350 |
-
|
351 |
-
|
352 |
-
<
|
353 |
-
|
354 |
-
|
355 |
-
|
356 |
-
|
357 |
-
|
358 |
-
|
359 |
-
|
360 |
-
|
|
|
|
|
|
|
|
|
361 |
</table>
|
362 |
</div>
|
363 |
</div>
|
|
|
227 |
<div class="columns is-centered">
|
228 |
<div class="column container-centered is-four-fifths">
|
229 |
<img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
|
230 |
+
</div>
|
231 |
+
</div>
|
232 |
+
<div class="columns is-centered">
|
233 |
+
<div class="column has-text-justified">
|
234 |
+
<p>
|
235 |
+
<strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>
|
236 |
+
</p>
|
237 |
</div>
|
238 |
</div>
|
239 |
</div>
|
|
|
260 |
<div class="columns is-centered">
|
261 |
<div class="column container-centered">
|
262 |
<table class="tg" border="1" style="width:100%; text-align:center;">
|
263 |
+
<caption><strong>Table 1.</strong>The Area Under the ROC Curve (AUC) of Different Adversarial Detection Approaches on CIFAR-10. LNG
|
264 |
+
is not open-sourced and the data comes from its report. To align with baselines, classifier: ResNet110, FGSM: ε = 0.05, PGD:
|
265 |
+
ε = 0.02. Note that BEYOND needs no AE for training, leading to the same value on both seen and unseen settings. The <strong>bold</strong> values
|
266 |
+
are the best performance, and the <u><i>underlined italicized</i></u> values are the second-best performanc</caption>
|
267 |
+
<thead>
|
268 |
+
<tr>
|
269 |
+
<th class="tg-amwm" rowspan="2">AUC(%)</th>
|
270 |
+
<th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
|
271 |
+
<th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
|
272 |
+
</tr>
|
273 |
+
<tr>
|
274 |
+
<th class="tg-baqh">FGSM</th>
|
275 |
+
<th class="tg-baqh">PGD</th>
|
276 |
+
<th class="tg-baqh">AutoAttack</th>
|
277 |
+
<th class="tg-baqh">Square</th>
|
278 |
+
<th class="tg-baqh">FGSM</th>
|
279 |
+
<th class="tg-baqh">PGD</th>
|
280 |
+
<th class="tg-baqh">CW</th>
|
281 |
+
<th class="tg-baqh">AutoAttack</th>
|
282 |
+
<th class="tg-baqh">Square</th>
|
283 |
+
</tr>
|
284 |
+
</thead>
|
285 |
+
<tbody>
|
286 |
+
<tr>
|
287 |
+
<td class="tg-baqh">DkNN</td>
|
288 |
+
<td class="tg-baqh">61.55</td>
|
289 |
+
<td class="tg-baqh">51.22</td>
|
290 |
+
<td class="tg-baqh">52.12</td>
|
291 |
+
<td class="tg-baqh">59.46</td>
|
292 |
+
<td class="tg-baqh">61.55</td>
|
293 |
+
<td class="tg-baqh">51.22</td>
|
294 |
+
<td class="tg-baqh">61.52</td>
|
295 |
+
<td class="tg-baqh">52.12</td>
|
296 |
+
<td class="tg-baqh">59.46</td>
|
297 |
+
</tr>
|
298 |
+
<tr>
|
299 |
+
<td class="tg-baqh">kNN</td>
|
300 |
+
<td class="tg-baqh">61.83</td>
|
301 |
+
<td class="tg-baqh">54.52</td>
|
302 |
+
<td class="tg-baqh">52.67</td>
|
303 |
+
<td class="tg-baqh">73.39</td>
|
304 |
+
<td class="tg-baqh">61.83</td>
|
305 |
+
<td class="tg-baqh">54.52</td>
|
306 |
+
<td class="tg-baqh">62.23</td>
|
307 |
+
<td class="tg-baqh">52.67</td>
|
308 |
+
<td class="tg-baqh">73.39</td>
|
309 |
+
</tr>
|
310 |
+
<tr>
|
311 |
+
<td class="tg-baqh">LID</td>
|
312 |
+
<td class="tg-baqh">71.08</td>
|
313 |
+
<td class="tg-baqh">61.33</td>
|
314 |
+
<td class="tg-baqh">55.56</td>
|
315 |
+
<td class="tg-baqh">66.18</td>
|
316 |
+
<td class="tg-baqh">73.61</td>
|
317 |
+
<td class="tg-baqh">67.98</td>
|
318 |
+
<td class="tg-baqh">55.68</td>
|
319 |
+
<td class="tg-baqh">56.33</td>
|
320 |
+
<td class="tg-baqh">85.94</td>
|
321 |
+
</tr>
|
322 |
+
<tr>
|
323 |
+
<td class="tg-baqh">Hu</td>
|
324 |
+
<td class="tg-baqh">84.51</td>
|
325 |
+
<td class="tg-baqh">58.59</td>
|
326 |
+
<td class="tg-baqh">53.55</td>
|
327 |
+
<td class="tg-baqh">95.82</td>
|
328 |
+
<td class="tg-baqh">84.51</td>
|
329 |
+
<td class="tg-baqh">58.59</td>
|
330 |
+
<td class="tg-2imo">91.02</td>
|
331 |
+
<td class="tg-baqh">53.55</td>
|
332 |
+
<td class="tg-baqh">95.82</td>
|
333 |
+
</tr>
|
334 |
+
<tr>
|
335 |
+
<td class="tg-baqh">Mao</td>
|
336 |
+
<td class="tg-baqh">95.33</td>
|
337 |
+
<td class="tg-2imo">82.61</td>
|
338 |
+
<td class="tg-2imo">81.95</td>
|
339 |
+
<td class="tg-baqh">85.76</td>
|
340 |
+
<td class="tg-baqh">95.33</td>
|
341 |
+
<td class="tg-baqh">82.61</td>
|
342 |
+
<td class="tg-baqh">83.10</td>
|
343 |
+
<td class="tg-baqh">81.95</td>
|
344 |
+
<td class="tg-baqh">85.76</td>
|
345 |
+
</tr>
|
346 |
+
<tr>
|
347 |
+
<td class="tg-baqh">LNG</td>
|
348 |
+
<td class="tg-2imo">98.51 </td>
|
349 |
+
<td class="tg-baqh">63.14 </td>
|
350 |
+
<td class="tg-baqh">58.47 </td>
|
351 |
+
<td class="tg-2imo">94.71 </td>
|
352 |
+
<td class="tg-amwm">99.88 </td>
|
353 |
+
<td class="tg-2imo">91.39 </td>
|
354 |
+
<td class="tg-baqh">89.74 </td>
|
355 |
+
<td class="tg-2imo">84.03 </td>
|
356 |
+
<td class="tg-2imo">98.82 </td>
|
357 |
+
</tr>
|
358 |
+
<tr>
|
359 |
+
<td class="tg-baqh">BEYOND</td>
|
360 |
+
<td class="tg-amwm">98.89</td>
|
361 |
+
<td class="tg-amwm">99.28</td>
|
362 |
+
<td class="tg-amwm">99.16</td>
|
363 |
+
<td class="tg-amwm">99.27</td>
|
364 |
+
<td class="tg-2imo">98.89</td>
|
365 |
+
<td class="tg-amwm">99.28</td>
|
366 |
+
<td class="tg-amwm">99.20</td>
|
367 |
+
<td class="tg-amwm">99.16</td>
|
368 |
+
<td class="tg-amwm">99.27</td>
|
369 |
+
</tr>
|
370 |
+
</tbody>
|
371 |
</table>
|
372 |
</div>
|
373 |
</div>
|