Research Article
VarDefense: Variance-Based Defense against Poison Attack
Table 3
The performance of VarDefense over different
.
| | MNIST | Fashion-MNIST | CIFAR-10 | CIFAR-100 | ACC | ASR | ACC | ASR | ACC | ASR | ACC | ASR |
| 0.0001 | 95.96 | 0.22 | 95.96 | 0.19 | 76.47 | 4.50 | 45.96 | 0.50 | 0.001 | 96.15 | 0.28 | 96.15 | 0.21 | 80.25 | 4.90 | 46.04 | 0.94 | 0.01 | 97.37 | 0.28 | 96.37 | 0.22 | 80.27 | 5.80 | 46.05 | 1.01 | 0.1 | 97.85 | 0.39 | 96.85 | 0.38 | 80.29 | 7.59 | 46.05 | 1.19 | 1 | 98.30 | 0.57 | 97.25 | 0.58 | 80.41 | 8.46 | 46.23 | 2.14 | 10 | 97.43 | 0.59 | 97.47 | 0.56 | 80.97 | 12.50 | 46.29 | 3.03 | 100 | 97.52 | 0.63 | 97.79 | 0.67 | 81.03 | 15.53 | 46.80 | 3.73 | 1000 | 97.95 | 0.69 | 97.88 | 0.63 | 81.04 | 16.85 | 46.92 | 5.07 | 10000 | 98.06 | 0.77 | 98.02 | 0.83 | 81.59 | 17.50 | 47.97 | 5.65 | 100000 | 98.19 | 1.92 | 98.07 | 1.87 | 81.72 | 19.41 | 48.27 | 5.84 |
|
|
The numbers in bold mean that this method is the best compared with other methods, under the corresponding experiment settings.
|