Spaces:
Running
Running
table
Browse files- index.html +115 -105
index.html
CHANGED
|
@@ -227,7 +227,13 @@
|
|
| 227 |
<div class="columns is-centered">
|
| 228 |
<div class="column container-centered is-four-fifths">
|
| 229 |
<img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
|
| 230 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 231 |
</div>
|
| 232 |
</div>
|
| 233 |
</div>
|
|
@@ -254,110 +260,114 @@
|
|
| 254 |
<div class="columns is-centered">
|
| 255 |
<div class="column container-centered">
|
| 256 |
<table class="tg" border="1" style="width:100%; text-align:center;">
|
| 257 |
-
|
| 258 |
-
|
| 259 |
-
|
| 260 |
-
|
| 261 |
-
|
| 262 |
-
|
| 263 |
-
|
| 264 |
-
|
| 265 |
-
|
| 266 |
-
|
| 267 |
-
<
|
| 268 |
-
|
| 269 |
-
|
| 270 |
-
|
| 271 |
-
|
| 272 |
-
|
| 273 |
-
|
| 274 |
-
|
| 275 |
-
|
| 276 |
-
|
| 277 |
-
|
| 278 |
-
|
| 279 |
-
|
| 280 |
-
<
|
| 281 |
-
|
| 282 |
-
|
| 283 |
-
|
| 284 |
-
|
| 285 |
-
|
| 286 |
-
|
| 287 |
-
|
| 288 |
-
|
| 289 |
-
|
| 290 |
-
|
| 291 |
-
|
| 292 |
-
<
|
| 293 |
-
|
| 294 |
-
|
| 295 |
-
|
| 296 |
-
|
| 297 |
-
|
| 298 |
-
|
| 299 |
-
|
| 300 |
-
|
| 301 |
-
|
| 302 |
-
|
| 303 |
-
|
| 304 |
-
<
|
| 305 |
-
|
| 306 |
-
|
| 307 |
-
|
| 308 |
-
|
| 309 |
-
|
| 310 |
-
|
| 311 |
-
|
| 312 |
-
|
| 313 |
-
|
| 314 |
-
|
| 315 |
-
|
| 316 |
-
<
|
| 317 |
-
|
| 318 |
-
|
| 319 |
-
|
| 320 |
-
|
| 321 |
-
|
| 322 |
-
|
| 323 |
-
|
| 324 |
-
|
| 325 |
-
|
| 326 |
-
|
| 327 |
-
|
| 328 |
-
<
|
| 329 |
-
|
| 330 |
-
|
| 331 |
-
|
| 332 |
-
|
| 333 |
-
|
| 334 |
-
|
| 335 |
-
|
| 336 |
-
|
| 337 |
-
|
| 338 |
-
|
| 339 |
-
|
| 340 |
-
<
|
| 341 |
-
|
| 342 |
-
|
| 343 |
-
|
| 344 |
-
|
| 345 |
-
|
| 346 |
-
|
| 347 |
-
|
| 348 |
-
|
| 349 |
-
|
| 350 |
-
|
| 351 |
-
|
| 352 |
-
<
|
| 353 |
-
|
| 354 |
-
|
| 355 |
-
|
| 356 |
-
|
| 357 |
-
|
| 358 |
-
|
| 359 |
-
|
| 360 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
| 361 |
</table>
|
| 362 |
</div>
|
| 363 |
</div>
|
|
|
|
| 227 |
<div class="columns is-centered">
|
| 228 |
<div class="column container-centered is-four-fifths">
|
| 229 |
<img src="./static/images/relations.jpg" alt="Neighborhood Relations of Benign Examples and AEs"/>
|
| 230 |
+
</div>
|
| 231 |
+
</div>
|
| 232 |
+
<div class="columns is-centered">
|
| 233 |
+
<div class="column has-text-justified">
|
| 234 |
+
<p>
|
| 235 |
+
<strong>Figure 1. Neighborhood Relations of Benign Examples and AEs.</strong>
|
| 236 |
+
</p>
|
| 237 |
</div>
|
| 238 |
</div>
|
| 239 |
</div>
|
|
|
|
| 260 |
<div class="columns is-centered">
|
| 261 |
<div class="column container-centered">
|
| 262 |
<table class="tg" border="1" style="width:100%; text-align:center;">
|
| 263 |
+
<caption><strong>Table 1.</strong>The Area Under the ROC Curve (AUC) of Different Adversarial Detection Approaches on CIFAR-10. LNG
|
| 264 |
+
is not open-sourced and the data comes from its report. To align with baselines, classifier: ResNet110, FGSM: ε = 0.05, PGD:
|
| 265 |
+
ε = 0.02. Note that BEYOND needs no AE for training, leading to the same value on both seen and unseen settings. The <strong>bold</strong> values
|
| 266 |
+
are the best performance, and the <u><i>underlined italicized</i></u> values are the second-best performanc</caption>
|
| 267 |
+
<thead>
|
| 268 |
+
<tr>
|
| 269 |
+
<th class="tg-amwm" rowspan="2">AUC(%)</th>
|
| 270 |
+
<th class="tg-baqh" colspan="4"><span style="font-weight:bold;font-style:italic">Unse</span><span style="font-weight:bold">e</span><span style="font-weight:bold;font-style:italic">n</span><span style="font-weight:bold">: </span>Attacks used in training are preclude from tests</th>
|
| 271 |
+
<th class="tg-baqh" colspan="5"><span style="font-weight:bold;font-style:italic">Seen</span><span style="font-weight:bold">:</span> Attacks used in training are included in tests</th>
|
| 272 |
+
</tr>
|
| 273 |
+
<tr>
|
| 274 |
+
<th class="tg-baqh">FGSM</th>
|
| 275 |
+
<th class="tg-baqh">PGD</th>
|
| 276 |
+
<th class="tg-baqh">AutoAttack</th>
|
| 277 |
+
<th class="tg-baqh">Square</th>
|
| 278 |
+
<th class="tg-baqh">FGSM</th>
|
| 279 |
+
<th class="tg-baqh">PGD</th>
|
| 280 |
+
<th class="tg-baqh">CW</th>
|
| 281 |
+
<th class="tg-baqh">AutoAttack</th>
|
| 282 |
+
<th class="tg-baqh">Square</th>
|
| 283 |
+
</tr>
|
| 284 |
+
</thead>
|
| 285 |
+
<tbody>
|
| 286 |
+
<tr>
|
| 287 |
+
<td class="tg-baqh">DkNN</td>
|
| 288 |
+
<td class="tg-baqh">61.55</td>
|
| 289 |
+
<td class="tg-baqh">51.22</td>
|
| 290 |
+
<td class="tg-baqh">52.12</td>
|
| 291 |
+
<td class="tg-baqh">59.46</td>
|
| 292 |
+
<td class="tg-baqh">61.55</td>
|
| 293 |
+
<td class="tg-baqh">51.22</td>
|
| 294 |
+
<td class="tg-baqh">61.52</td>
|
| 295 |
+
<td class="tg-baqh">52.12</td>
|
| 296 |
+
<td class="tg-baqh">59.46</td>
|
| 297 |
+
</tr>
|
| 298 |
+
<tr>
|
| 299 |
+
<td class="tg-baqh">kNN</td>
|
| 300 |
+
<td class="tg-baqh">61.83</td>
|
| 301 |
+
<td class="tg-baqh">54.52</td>
|
| 302 |
+
<td class="tg-baqh">52.67</td>
|
| 303 |
+
<td class="tg-baqh">73.39</td>
|
| 304 |
+
<td class="tg-baqh">61.83</td>
|
| 305 |
+
<td class="tg-baqh">54.52</td>
|
| 306 |
+
<td class="tg-baqh">62.23</td>
|
| 307 |
+
<td class="tg-baqh">52.67</td>
|
| 308 |
+
<td class="tg-baqh">73.39</td>
|
| 309 |
+
</tr>
|
| 310 |
+
<tr>
|
| 311 |
+
<td class="tg-baqh">LID</td>
|
| 312 |
+
<td class="tg-baqh">71.08</td>
|
| 313 |
+
<td class="tg-baqh">61.33</td>
|
| 314 |
+
<td class="tg-baqh">55.56</td>
|
| 315 |
+
<td class="tg-baqh">66.18</td>
|
| 316 |
+
<td class="tg-baqh">73.61</td>
|
| 317 |
+
<td class="tg-baqh">67.98</td>
|
| 318 |
+
<td class="tg-baqh">55.68</td>
|
| 319 |
+
<td class="tg-baqh">56.33</td>
|
| 320 |
+
<td class="tg-baqh">85.94</td>
|
| 321 |
+
</tr>
|
| 322 |
+
<tr>
|
| 323 |
+
<td class="tg-baqh">Hu</td>
|
| 324 |
+
<td class="tg-baqh">84.51</td>
|
| 325 |
+
<td class="tg-baqh">58.59</td>
|
| 326 |
+
<td class="tg-baqh">53.55</td>
|
| 327 |
+
<td class="tg-baqh">95.82</td>
|
| 328 |
+
<td class="tg-baqh">84.51</td>
|
| 329 |
+
<td class="tg-baqh">58.59</td>
|
| 330 |
+
<td class="tg-2imo">91.02</td>
|
| 331 |
+
<td class="tg-baqh">53.55</td>
|
| 332 |
+
<td class="tg-baqh">95.82</td>
|
| 333 |
+
</tr>
|
| 334 |
+
<tr>
|
| 335 |
+
<td class="tg-baqh">Mao</td>
|
| 336 |
+
<td class="tg-baqh">95.33</td>
|
| 337 |
+
<td class="tg-2imo">82.61</td>
|
| 338 |
+
<td class="tg-2imo">81.95</td>
|
| 339 |
+
<td class="tg-baqh">85.76</td>
|
| 340 |
+
<td class="tg-baqh">95.33</td>
|
| 341 |
+
<td class="tg-baqh">82.61</td>
|
| 342 |
+
<td class="tg-baqh">83.10</td>
|
| 343 |
+
<td class="tg-baqh">81.95</td>
|
| 344 |
+
<td class="tg-baqh">85.76</td>
|
| 345 |
+
</tr>
|
| 346 |
+
<tr>
|
| 347 |
+
<td class="tg-baqh">LNG</td>
|
| 348 |
+
<td class="tg-2imo">98.51 </td>
|
| 349 |
+
<td class="tg-baqh">63.14 </td>
|
| 350 |
+
<td class="tg-baqh">58.47 </td>
|
| 351 |
+
<td class="tg-2imo">94.71 </td>
|
| 352 |
+
<td class="tg-amwm">99.88 </td>
|
| 353 |
+
<td class="tg-2imo">91.39 </td>
|
| 354 |
+
<td class="tg-baqh">89.74 </td>
|
| 355 |
+
<td class="tg-2imo">84.03 </td>
|
| 356 |
+
<td class="tg-2imo">98.82 </td>
|
| 357 |
+
</tr>
|
| 358 |
+
<tr>
|
| 359 |
+
<td class="tg-baqh">BEYOND</td>
|
| 360 |
+
<td class="tg-amwm">98.89</td>
|
| 361 |
+
<td class="tg-amwm">99.28</td>
|
| 362 |
+
<td class="tg-amwm">99.16</td>
|
| 363 |
+
<td class="tg-amwm">99.27</td>
|
| 364 |
+
<td class="tg-2imo">98.89</td>
|
| 365 |
+
<td class="tg-amwm">99.28</td>
|
| 366 |
+
<td class="tg-amwm">99.20</td>
|
| 367 |
+
<td class="tg-amwm">99.16</td>
|
| 368 |
+
<td class="tg-amwm">99.27</td>
|
| 369 |
+
</tr>
|
| 370 |
+
</tbody>
|
| 371 |
</table>
|
| 372 |
</div>
|
| 373 |
</div>
|