Hugging Face's logo

Spaces:
TrustSafeAI
/
GREAT-Score
Running

App Files Community
allenhzy commited on
Commit
344407b
·
1 Parent(s): c00684e

table

Browse files
Files changed (1) hide show
  1. index.html +140 -6
index.html CHANGED
@@ -25,6 +25,17 @@
25
  <script src="./static/js/bulma-carousel.min.js"></script>
26
  <script src="./static/js/bulma-slider.min.js"></script>
27
  <script src="./static/js/index.js"></script>
 
 
 
 
 
 
 
 
 
 
 
28
  </head>
29
  <body>
30
 
@@ -214,12 +225,11 @@
214
  <div class="container is-max-desktop">
215
  <h2 class="title is-3">Neighborhood Relations of Benign Examples and AEs</h2>
216
  <div class="columns is-centered">
217
- <div class="column container-centered">
218
- <img src="./static/images/relations.png" alt="Neighborhood Relations of Benign Examples and AEs"/>
219
- <p><strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>. First, we augment the input image to obtain a bunch of its neighbors. Then, we
220
- perform the label consistency detection mechanism on the classifier’s prediction of the input image and that of neighbors predicted by
221
- SSL’s classification head. Meanwhile, the representation similarity mechanism employs cosine distance to measure the similarity among
222
- the input image and its neighbors. Finally, The input image with poor label consistency or representation similarity is flagged as AE.</p>
223
  </div>
224
  </div>
225
  </div>
@@ -240,6 +250,130 @@
240
  </div>
241
  </section>
242
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
243
 
244
  <section class="section" id="BibTeX">
245
  <div class="container is-max-desktop content">
 
25
  <script src="./static/js/bulma-carousel.min.js"></script>
26
  <script src="./static/js/bulma-slider.min.js"></script>
27
  <script src="./static/js/index.js"></script>
28
+
29
+ <style type="text/css">
30
+ .tg {border-collapse:collapse;border-spacing:0;}
31
+ .tg td{border-color:black;border-style:solid;border-width:1px;font-family:Arial, sans-serif;font-size:14px;
32
+ overflow:hidden;padding:10px 5px;word-break:normal;}
33
+ .tg th{border-color:black;border-style:solid;border-width:1px;font-family:Arial, sans-serif;font-size:14px;
34
+ font-weight:normal;overflow:hidden;padding:10px 5px;word-break:normal;}
35
+ .tg .tg-baqh{text-align:center;vertical-align:top}
36
+ .tg .tg-amwm{font-weight:bold;text-align:center;vertical-align:top}
37
+ .tg .tg-2imo{font-style:italic;text-align:center;text-decoration:underline;vertical-align:top}
38
+ </style>
39
  </head>
40
  <body>
41
 
 
225
  <div class="container is-max-desktop">
226
  <h2 class="title is-3">Neighborhood Relations of Benign Examples and AEs</h2>
227
  <div class="columns is-centered">
228
+ <div class="column container-centered is-four-fifths">
229
+ <img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
230
+ </div>
231
+ <div class="column has-text-centered">
232
+ <p><strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>. .</p>
 
233
  </div>
234
  </div>
235
  </div>
 
250
  </div>
251
  </section>
252
 
253
+ <section class="section">
254
+ <div class="container is-max-desktop">
255
+ <h2 class="title is-3">Detection Performance</h2>
256
+ <div class="columns is-centered">
257
+ <div class="column container-centered">
258
+ <table class="tg"><thead>
259
+ <tr>
260
+ <th class="tg-amwm" rowspan="2">AUC(%)</th>
261
+ <th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
262
+ <th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
263
+ </tr>
264
+ <tr>
265
+ <th class="tg-baqh">FGSM</th>
266
+ <th class="tg-baqh">PGD</th>
267
+ <th class="tg-baqh">AutoAttack</th>
268
+ <th class="tg-baqh">Square</th>
269
+ <th class="tg-baqh">FGSM</th>
270
+ <th class="tg-baqh">PGD</th>
271
+ <th class="tg-baqh">CW</th>
272
+ <th class="tg-baqh">AutoAttack</th>
273
+ <th class="tg-baqh">Square</th>
274
+ </tr></thead>
275
+ <tbody>
276
+ <tr>
277
+ <td class="tg-baqh">DkNN</td>
278
+ <td class="tg-baqh">61.55</td>
279
+ <td class="tg-baqh">51.22</td>
280
+ <td class="tg-baqh">52.12</td>
281
+ <td class="tg-baqh">59.46</td>
282
+ <td class="tg-baqh">61.55</td>
283
+ <td class="tg-baqh">51.22</td>
284
+ <td class="tg-baqh">61.52</td>
285
+ <td class="tg-baqh">52.12</td>
286
+ <td class="tg-baqh">59.46</td>
287
+ </tr>
288
+ <tr>
289
+ <td class="tg-baqh">kNN</td>
290
+ <td class="tg-baqh">61.83</td>
291
+ <td class="tg-baqh">54.52</td>
292
+ <td class="tg-baqh">52.67</td>
293
+ <td class="tg-baqh">73.39</td>
294
+ <td class="tg-baqh">61.83</td>
295
+ <td class="tg-baqh">54.52</td>
296
+ <td class="tg-baqh">62.23</td>
297
+ <td class="tg-baqh">52.67</td>
298
+ <td class="tg-baqh">73.39</td>
299
+ </tr>
300
+ <tr>
301
+ <td class="tg-baqh">LID</td>
302
+ <td class="tg-baqh">71.08</td>
303
+ <td class="tg-baqh">61.33</td>
304
+ <td class="tg-baqh">55.56</td>
305
+ <td class="tg-baqh">66.18</td>
306
+ <td class="tg-baqh">73.61</td>
307
+ <td class="tg-baqh">67.98</td>
308
+ <td class="tg-baqh">55.68</td>
309
+ <td class="tg-baqh">56.33</td>
310
+ <td class="tg-baqh">85.94</td>
311
+ </tr>
312
+ <tr>
313
+ <td class="tg-baqh">Hu</td>
314
+ <td class="tg-baqh">84.51</td>
315
+ <td class="tg-baqh">58.59</td>
316
+ <td class="tg-baqh">53.55</td>
317
+ <td class="tg-baqh">95.82</td>
318
+ <td class="tg-baqh">84.51</td>
319
+ <td class="tg-baqh">58.59</td>
320
+ <td class="tg-2imo">91.02</td>
321
+ <td class="tg-baqh">53.55</td>
322
+ <td class="tg-baqh">95.82</td>
323
+ </tr>
324
+ <tr>
325
+ <td class="tg-baqh">Mao</td>
326
+ <td class="tg-baqh">95.33</td>
327
+ <td class="tg-2imo">82.61</td>
328
+ <td class="tg-2imo">81.95</td>
329
+ <td class="tg-baqh">85.76</td>
330
+ <td class="tg-baqh">95.33</td>
331
+ <td class="tg-baqh">82.61</td>
332
+ <td class="tg-baqh">83.10</td>
333
+ <td class="tg-baqh">81.95</td>
334
+ <td class="tg-baqh">85.76</td>
335
+ </tr>
336
+ <tr>
337
+ <td class="tg-baqh">LNG</td>
338
+ <td class="tg-2imo">98.51 </td>
339
+ <td class="tg-baqh">63.14 </td>
340
+ <td class="tg-baqh">58.47 </td>
341
+ <td class="tg-2imo">94.71 </td>
342
+ <td class="tg-amwm">99.88 </td>
343
+ <td class="tg-2imo">91.39 </td>
344
+ <td class="tg-baqh">89.74 </td>
345
+ <td class="tg-2imo">84.03 </td>
346
+ <td class="tg-2imo">98.82 </td>
347
+ </tr>
348
+ <tr>
349
+ <td class="tg-baqh">BEYOND</td>
350
+ <td class="tg-amwm">98.89</td>
351
+ <td class="tg-amwm">99.28</td>
352
+ <td class="tg-amwm">99.16</td>
353
+ <td class="tg-amwm">99.27</td>
354
+ <td class="tg-2imo">98.89</td>
355
+ <td class="tg-amwm">99.28</td>
356
+ <td class="tg-amwm">99.20</td>
357
+ <td class="tg-amwm">99.16</td>
358
+ <td class="tg-amwm">99.27</td>
359
+ </tr>
360
+ </tbody></table>
361
+ </div>
362
+ </div>
363
+ </div>
364
+ </section>
365
+
366
+ <section class="section">
367
+ <div class="container is-max-desktop">
368
+ <h2 class="title is-3">Adaptive Attack</h2>
369
+ <div class="columns is-centered">
370
+ <div class="column container-centered">
371
+
372
+ </div>
373
+ </div>
374
+ </div>
375
+ </section>
376
+
377
 
378
  <section class="section" id="BibTeX">
379
  <div class="container is-max-desktop content">