allenhzy commited on
Commit
48c978d
1 Parent(s): cf6eea8
Files changed (1) hide show
  1. index.html +115 -105
index.html CHANGED
@@ -227,7 +227,13 @@
227
  <div class="columns is-centered">
228
  <div class="column container-centered is-four-fifths">
229
  <img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
230
- <p><strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>. .</p>
 
 
 
 
 
 
231
  </div>
232
  </div>
233
  </div>
@@ -254,110 +260,114 @@
254
  <div class="columns is-centered">
255
  <div class="column container-centered">
256
  <table class="tg" border="1" style="width:100%; text-align:center;">
257
- <thead>
258
- <tr>
259
- <th class="tg-amwm" rowspan="2">AUC(%)</th>
260
- <th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
261
- <th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
262
- </tr>
263
- <tr>
264
- <th class="tg-baqh">FGSM</th>
265
- <th class="tg-baqh">PGD</th>
266
- <th class="tg-baqh">AutoAttack</th>
267
- <th class="tg-baqh">Square</th>
268
- <th class="tg-baqh">FGSM</th>
269
- <th class="tg-baqh">PGD</th>
270
- <th class="tg-baqh">CW</th>
271
- <th class="tg-baqh">AutoAttack</th>
272
- <th class="tg-baqh">Square</th>
273
- </tr>
274
- </thead>
275
- <tbody>
276
- <tr>
277
- <td class="tg-baqh">DkNN</td>
278
- <td class="tg-baqh">61.55</td>
279
- <td class="tg-baqh">51.22</td>
280
- <td class="tg-baqh">52.12</td>
281
- <td class="tg-baqh">59.46</td>
282
- <td class="tg-baqh">61.55</td>
283
- <td class="tg-baqh">51.22</td>
284
- <td class="tg-baqh">61.52</td>
285
- <td class="tg-baqh">52.12</td>
286
- <td class="tg-baqh">59.46</td>
287
- </tr>
288
- <tr>
289
- <td class="tg-baqh">kNN</td>
290
- <td class="tg-baqh">61.83</td>
291
- <td class="tg-baqh">54.52</td>
292
- <td class="tg-baqh">52.67</td>
293
- <td class="tg-baqh">73.39</td>
294
- <td class="tg-baqh">61.83</td>
295
- <td class="tg-baqh">54.52</td>
296
- <td class="tg-baqh">62.23</td>
297
- <td class="tg-baqh">52.67</td>
298
- <td class="tg-baqh">73.39</td>
299
- </tr>
300
- <tr>
301
- <td class="tg-baqh">LID</td>
302
- <td class="tg-baqh">71.08</td>
303
- <td class="tg-baqh">61.33</td>
304
- <td class="tg-baqh">55.56</td>
305
- <td class="tg-baqh">66.18</td>
306
- <td class="tg-baqh">73.61</td>
307
- <td class="tg-baqh">67.98</td>
308
- <td class="tg-baqh">55.68</td>
309
- <td class="tg-baqh">56.33</td>
310
- <td class="tg-baqh">85.94</td>
311
- </tr>
312
- <tr>
313
- <td class="tg-baqh">Hu</td>
314
- <td class="tg-baqh">84.51</td>
315
- <td class="tg-baqh">58.59</td>
316
- <td class="tg-baqh">53.55</td>
317
- <td class="tg-baqh">95.82</td>
318
- <td class="tg-baqh">84.51</td>
319
- <td class="tg-baqh">58.59</td>
320
- <td class="tg-2imo">91.02</td>
321
- <td class="tg-baqh">53.55</td>
322
- <td class="tg-baqh">95.82</td>
323
- </tr>
324
- <tr>
325
- <td class="tg-baqh">Mao</td>
326
- <td class="tg-baqh">95.33</td>
327
- <td class="tg-2imo">82.61</td>
328
- <td class="tg-2imo">81.95</td>
329
- <td class="tg-baqh">85.76</td>
330
- <td class="tg-baqh">95.33</td>
331
- <td class="tg-baqh">82.61</td>
332
- <td class="tg-baqh">83.10</td>
333
- <td class="tg-baqh">81.95</td>
334
- <td class="tg-baqh">85.76</td>
335
- </tr>
336
- <tr>
337
- <td class="tg-baqh">LNG</td>
338
- <td class="tg-2imo">98.51 </td>
339
- <td class="tg-baqh">63.14 </td>
340
- <td class="tg-baqh">58.47 </td>
341
- <td class="tg-2imo">94.71 </td>
342
- <td class="tg-amwm">99.88 </td>
343
- <td class="tg-2imo">91.39 </td>
344
- <td class="tg-baqh">89.74 </td>
345
- <td class="tg-2imo">84.03 </td>
346
- <td class="tg-2imo">98.82 </td>
347
- </tr>
348
- <tr>
349
- <td class="tg-baqh">BEYOND</td>
350
- <td class="tg-amwm">98.89</td>
351
- <td class="tg-amwm">99.28</td>
352
- <td class="tg-amwm">99.16</td>
353
- <td class="tg-amwm">99.27</td>
354
- <td class="tg-2imo">98.89</td>
355
- <td class="tg-amwm">99.28</td>
356
- <td class="tg-amwm">99.20</td>
357
- <td class="tg-amwm">99.16</td>
358
- <td class="tg-amwm">99.27</td>
359
- </tr>
360
- </tbody>
 
 
 
 
361
  </table>
362
  </div>
363
  </div>
 
227
  <div class="columns is-centered">
228
  <div class="column container-centered is-four-fifths">
229
  <img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
230
+ </div>
231
+ </div>
232
+ <div class="columns is-centered">
233
+ <div class="column has-text-justified">
234
+ <p>
235
+ <strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>
236
+ </p>
237
  </div>
238
  </div>
239
  </div>
 
260
  <div class="columns is-centered">
261
  <div class="column container-centered">
262
  <table class="tg" border="1" style="width:100%; text-align:center;">
263
+ <caption><strong>Table 1.</strong>The Area Under the ROC Curve (AUC) of Different Adversarial Detection Approaches on CIFAR-10. LNG
264
+ is not open-sourced and the data comes from its report. To align with baselines, classifier: ResNet110, FGSM: ε = 0.05, PGD:
265
+ ε = 0.02. Note that BEYOND needs no AE for training, leading to the same value on both seen and unseen settings. The <strong>bold</strong> values
266
+ are the best performance, and the <u><i>underlined italicized</i></u> values are the second-best performanc</caption>
267
+ <thead>
268
+ <tr>
269
+ <th class="tg-amwm" rowspan="2">AUC(%)</th>
270
+ <th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
271
+ <th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
272
+ </tr>
273
+ <tr>
274
+ <th class="tg-baqh">FGSM</th>
275
+ <th class="tg-baqh">PGD</th>
276
+ <th class="tg-baqh">AutoAttack</th>
277
+ <th class="tg-baqh">Square</th>
278
+ <th class="tg-baqh">FGSM</th>
279
+ <th class="tg-baqh">PGD</th>
280
+ <th class="tg-baqh">CW</th>
281
+ <th class="tg-baqh">AutoAttack</th>
282
+ <th class="tg-baqh">Square</th>
283
+ </tr>
284
+ </thead>
285
+ <tbody>
286
+ <tr>
287
+ <td class="tg-baqh">DkNN</td>
288
+ <td class="tg-baqh">61.55</td>
289
+ <td class="tg-baqh">51.22</td>
290
+ <td class="tg-baqh">52.12</td>
291
+ <td class="tg-baqh">59.46</td>
292
+ <td class="tg-baqh">61.55</td>
293
+ <td class="tg-baqh">51.22</td>
294
+ <td class="tg-baqh">61.52</td>
295
+ <td class="tg-baqh">52.12</td>
296
+ <td class="tg-baqh">59.46</td>
297
+ </tr>
298
+ <tr>
299
+ <td class="tg-baqh">kNN</td>
300
+ <td class="tg-baqh">61.83</td>
301
+ <td class="tg-baqh">54.52</td>
302
+ <td class="tg-baqh">52.67</td>
303
+ <td class="tg-baqh">73.39</td>
304
+ <td class="tg-baqh">61.83</td>
305
+ <td class="tg-baqh">54.52</td>
306
+ <td class="tg-baqh">62.23</td>
307
+ <td class="tg-baqh">52.67</td>
308
+ <td class="tg-baqh">73.39</td>
309
+ </tr>
310
+ <tr>
311
+ <td class="tg-baqh">LID</td>
312
+ <td class="tg-baqh">71.08</td>
313
+ <td class="tg-baqh">61.33</td>
314
+ <td class="tg-baqh">55.56</td>
315
+ <td class="tg-baqh">66.18</td>
316
+ <td class="tg-baqh">73.61</td>
317
+ <td class="tg-baqh">67.98</td>
318
+ <td class="tg-baqh">55.68</td>
319
+ <td class="tg-baqh">56.33</td>
320
+ <td class="tg-baqh">85.94</td>
321
+ </tr>
322
+ <tr>
323
+ <td class="tg-baqh">Hu</td>
324
+ <td class="tg-baqh">84.51</td>
325
+ <td class="tg-baqh">58.59</td>
326
+ <td class="tg-baqh">53.55</td>
327
+ <td class="tg-baqh">95.82</td>
328
+ <td class="tg-baqh">84.51</td>
329
+ <td class="tg-baqh">58.59</td>
330
+ <td class="tg-2imo">91.02</td>
331
+ <td class="tg-baqh">53.55</td>
332
+ <td class="tg-baqh">95.82</td>
333
+ </tr>
334
+ <tr>
335
+ <td class="tg-baqh">Mao</td>
336
+ <td class="tg-baqh">95.33</td>
337
+ <td class="tg-2imo">82.61</td>
338
+ <td class="tg-2imo">81.95</td>
339
+ <td class="tg-baqh">85.76</td>
340
+ <td class="tg-baqh">95.33</td>
341
+ <td class="tg-baqh">82.61</td>
342
+ <td class="tg-baqh">83.10</td>
343
+ <td class="tg-baqh">81.95</td>
344
+ <td class="tg-baqh">85.76</td>
345
+ </tr>
346
+ <tr>
347
+ <td class="tg-baqh">LNG</td>
348
+ <td class="tg-2imo">98.51 </td>
349
+ <td class="tg-baqh">63.14 </td>
350
+ <td class="tg-baqh">58.47 </td>
351
+ <td class="tg-2imo">94.71 </td>
352
+ <td class="tg-amwm">99.88 </td>
353
+ <td class="tg-2imo">91.39 </td>
354
+ <td class="tg-baqh">89.74 </td>
355
+ <td class="tg-2imo">84.03 </td>
356
+ <td class="tg-2imo">98.82 </td>
357
+ </tr>
358
+ <tr>
359
+ <td class="tg-baqh">BEYOND</td>
360
+ <td class="tg-amwm">98.89</td>
361
+ <td class="tg-amwm">99.28</td>
362
+ <td class="tg-amwm">99.16</td>
363
+ <td class="tg-amwm">99.27</td>
364
+ <td class="tg-2imo">98.89</td>
365
+ <td class="tg-amwm">99.28</td>
366
+ <td class="tg-amwm">99.20</td>
367
+ <td class="tg-amwm">99.16</td>
368
+ <td class="tg-amwm">99.27</td>
369
+ </tr>
370
+ </tbody>
371
  </table>
372
  </div>
373
  </div>