Adversarial Defense on ImageNet (targeted PGD, max perturbation=16)
Metric: Accuracy (higher is better)
Metric: Accuracy (higher is better)
| # | Model↕ | Accuracy▼ | Extra Data | Paper | Date↕ | Code |
|---|---|---|---|---|---|---|
| 1 | ResNet-152 Denoise | 42.8 | No | Feature Denoising for Improving Adversarial Robu... | 2018-12-09 | Code |
| 2 | ResNeXt-101 DenoiseAll | 40.4 | No | Feature Denoising for Improving Adversarial Robu... | 2018-12-09 | Code |
| 3 | ResNet-152 | 39 | No | Feature Denoising for Improving Adversarial Robu... | 2018-12-09 | Code |