Multiple Adversarial Domains Adaptation Approach for Mitigating Adversarial Attacks Effects

Table 3

Accuracy results on MNIST.

Defense	Clean%	FGSM	BIM	PGD
Vanilla	98.63	11.33	10.56	10.14
AT	97.53	91.37	89.28	87.10
MADA without	97.18	92.32	90.84	88.32
MADA without and	93.67	90.11	87.97	84.01
MADA	98.07	96.81	96.62	96.01