BackdoorBench

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	93.61	1.23	93.24	93.59	1.20	93.20	93.54	0.91	93.24	93.45	1.26	93.03	90.29	1.27	90.08	89.60	0.71	89.37	89.97	1.37	89.57	N/A	N/A	N/A	81.44	1.99	79.69	71.59	4.90	68.82	90.51	1.18	90.07	11.63	0.00	13.02	84.59	1.52	84.31	90.17	2.79	88.78	90.11	2.23	89.36	93.46	1.18	93.00
PreActResNet-18	Blended	93.80	56.11	39.37	93.78	52.60	42.09	93.70	54.67	40.38	93.71	55.23	39.76	91.07	26.83	57.16	85.35	24.18	49.57	89.59	41.41	48.77	N/A	N/A	N/A	67.96	12.06	40.82	78.51	0.00	81.22	91.31	32.60	54.12	11.67	0.00	13.03	83.12	5.32	62.76	91.88	63.11	30.82	88.89	3.09	71.10	93.65	57.41	37.92
PreActResNet-18	LC	93.62	71.26	28.07	93.58	71.38	27.93	92.72	20.68	73.96	93.66	55.57	42.56	92.05	1.28	91.44	87.85	33.99	43.13	89.99	5.24	85.72	N/A	N/A	N/A	78.83	15.76	60.36	72.18	84.65	12.72	93.20	28.01	67.64	11.93	0.00	13.27	85.02	7.87	77.46	91.84	76.53	22.69	89.18	11.91	77.11	93.59	71.31	28.04
PreActResNet-18	SIG	93.73	41.27	42.34	93.64	38.99	44.12	93.53	37.71	43.07	93.75	37.60	45.49	89.34	15.96	42.92	84.72	2.71	41.97	89.62	40.09	35.27	N/A	N/A	N/A	62.37	13.52	22.79	74.78	0.07	21.54	92.51	41.81	39.61	14.91	0.00	15.53	83.92	74.92	11.36	92.29	60.33	25.07	87.48	13.70	45.68	93.59	40.93	41.98
PreActResNet-18	LF	93.55	12.72	81.16	93.27	9.63	83.07	93.42	12.48	81.00	93.57	10.51	82.41	89.68	4.57	83.62	88.52	5.63	79.58	89.94	13.26	76.52	N/A	N/A	N/A	54.82	8.07	53.46	74.19	9.50	70.13	93.34	12.68	80.97	10.93	0.00	11.49	82.44	1.81	81.29	91.41	13.17	77.67	90.40	3.57	84.83	93.48	12.47	81.21
PreActResNet-18	SSBA	93.89	1.62	90.64	93.86	1.41	90.84	93.72	1.60	90.28	93.83	1.43	90.76	93.89	1.62	90.64	90.21	0.99	86.69	89.97	2.33	86.16	N/A	N/A	N/A	81.00	6.22	76.59	73.42	4.42	67.39	91.42	1.24	89.02	10.22	0.52	10.79	82.56	0.99	79.00	90.43	4.72	85.84	89.23	1.66	84.68	93.74	1.80	90.14
PreActResNet-18	WaNet	92.18	0.78	91.42	93.49	0.74	92.92	91.88	1.06	91.00	93.44	0.76	92.93	90.71	0.94	89.81	87.53	0.56	88.91	90.07	1.69	88.13	N/A	N/A	N/A	67.90	5.04	61.27	87.83	2.63	86.66	89.84	1.10	87.18	79.20	4.16	75.59	80.73	1.92	80.29	91.19	1.09	89.81	91.73	0.82	90.87	91.84	1.07	90.69
PreActResNet-18	InputAware	91.94	47.32	45.53	93.05	56.61	39.22	92.03	26.13	51.19	93.05	58.94	37.43	91.94	47.32	45.53	86.47	14.83	63.89	89.93	30.92	58.30	N/A	N/A	N/A	76.14	31.19	44.80	82.22	13.18	69.51	90.39	22.02	59.74	53.22	65.12	19.56	82.61	10.68	56.09	89.73	38.96	49.76	90.26	9.89	59.54	89.21	33.53	52.99
PreActResNet-18	BPP	91.47	21.62	69.37	93.30	30.29	63.73	93.20	13.53	75.46	93.23	33.03	61.39	91.47	21.62	69.37	88.23	6.29	79.11	89.29	2.92	85.04	N/A	N/A	N/A	58.35	1.50	55.80	79.21	7.61	70.98	90.25	1.89	82.11	82.34	19.63	63.80	88.69	6.93	80.20	88.49	18.36	67.93	88.47	32.62	58.89	90.97	2.72	82.06
PreActResNet-18	TrojanNN	94.07	98.14	1.83	93.85	98.19	1.79	92.70	96.50	3.36	93.83	96.32	3.60	93.74	99.11	0.89	89.45	88.20	8.83	89.76	84.13	14.56	N/A	N/A	N/A	31.86	20.62	23.88	76.15	5.83	71.19	93.47	96.63	3.27	28.09	25.26	22.54	88.12	60.37	34.66	91.91	98.04	1.93	87.90	13.41	70.46	93.94	97.94	2.01
VGG19_BN	BadNet	92.15	0.96	91.84	90.15	1.36	89.87	90.50	0.70	90.41	88.75	1.70	88.21	89.33	0.86	89.26	92.01	0.54	92.10	86.76	1.49	86.24	N/A	N/A	N/A	23.50	18.66	18.61	55.80	13.31	51.05	N/A	N/A	N/A	12.54	0.00	13.97	84.69	0.80	84.28	91.84	1.31	91.03	88.42	1.26	87.82	92.17	1.03	91.82
VGG19_BN	Blended	92.34	48.53	45.57	90.65	17.59	66.38	90.65	29.68	58.40	89.01	30.39	55.62	92.34	48.53	45.57	88.71	31.33	54.93	86.92	16.40	65.18	N/A	N/A	N/A	25.87	0.02	26.44	54.46	13.43	45.76	N/A	N/A	N/A	91.06	52.93	41.10	91.75	23.62	61.59	91.45	58.23	36.19	86.83	28.47	57.10	92.23	49.76	44.39
VGG19_BN	LC	92.40	33.61	61.69	90.16	21.46	71.40	90.56	17.13	73.64	89.31	38.78	56.07	92.39	33.60	61.70	90.17	22.42	70.60	86.96	4.81	81.92	N/A	N/A	N/A	57.69	18.11	44.40	55.99	62.68	24.09	89.00	5.49	82.47	10.81	0.00	12.03	60.81	3.63	58.07	89.06	4.10	83.96	90.36	27.61	62.51	92.00	36.17	59.56
VGG19_BN	SIG	92.20	32.43	48.06	90.56	17.33	54.68	90.37	21.38	53.33	88.33	44.89	38.49	92.20	32.43	48.06	87.09	9.83	53.64	86.81	11.54	51.06	N/A	N/A	N/A	70.42	17.36	36.11	56.14	53.34	30.66	90.95	50.44	30.82	9.59	99.18	0.10	59.27	0.00	24.28	90.13	33.89	44.77	89.54	26.57	46.36	92.11	35.09	45.28
VGG19_BN	LF	92.28	0.80	92.23	90.29	1.23	90.12	89.48	0.90	89.51	89.21	1.27	89.00	90.38	0.80	90.46	92.16	0.36	92.42	87.07	1.46	86.84	N/A	N/A	N/A	55.27	6.16	52.94	52.73	8.98	49.12	91.37	1.08	91.09	10.03	0.00	11.14	91.20	0.63	91.38	90.53	1.70	90.08	89.18	0.46	89.64	92.16	0.86	92.06
VGG19_BN	SSBA	92.13	1.47	88.92	90.63	1.97	86.70	90.78	1.63	87.69	88.75	2.81	84.90	90.24	1.31	86.99	91.60	1.08	88.90	86.83	2.12	83.37	N/A	N/A	N/A	28.22	26.59	22.70	52.21	14.04	47.27	91.64	1.51	88.80	84.85	2.83	84.92	91.73	1.62	89.08	90.57	1.30	88.11	85.89	4.11	80.04	91.86	1.88	88.60
VGG19_BN	WaNet	90.16	2.57	87.10	91.87	1.19	90.24	91.81	1.27	89.63	91.41	1.00	89.92	90.16	2.57	87.10	88.17	1.26	87.01	87.14	1.88	84.61	N/A	N/A	N/A	64.85	5.91	60.06	54.83	8.85	50.67	86.65	2.75	80.21	91.72	1.26	89.61	62.08	4.95	61.10	88.15	3.02	84.60	89.96	0.97	87.57	88.94	3.10	85.31
VGG19_BN	InputAware	89.27	48.37	38.10	91.39	65.26	29.59	91.45	60.72	32.99	91.02	70.97	24.80	91.10	6.79	55.04	86.79	43.41	41.36	86.61	26.78	54.48	N/A	N/A	N/A	10.00	0.00	11.11	55.47	27.49	39.77	87.85	37.40	47.38	90.59	76.56	18.32	67.10	8.34	52.78	88.00	74.71	20.91	88.73	10.66	30.43	89.23	72.10	24.11
VGG19_BN	BPP	90.69	2.28	84.60	91.78	1.79	85.60	91.92	1.57	86.16	92.01	2.12	85.31	90.69	2.28	84.60	89.28	1.74	82.11	87.27	1.76	83.98	N/A	N/A	N/A	58.16	15.69	52.49	54.11	13.40	46.04	89.43	1.79	85.22	9.88	0.00	10.94	72.87	0.18	69.96	89.19	2.51	83.11	90.77	4.36	83.20	88.75	2.51	82.22
VGG19_BN	TrojanNN	92.30	98.92	1.06	90.19	98.40	1.57	90.46	95.49	3.97	88.25	72.92	21.56	92.30	98.92	1.06	86.62	37.12	41.20	86.98	89.78	9.32	N/A	N/A	N/A	10.00	0.00	11.11	53.99	14.17	39.41	91.65	86.81	11.90	10.00	0.00	11.11	80.91	94.23	3.90	90.57	99.58	0.41	88.84	17.33	49.63	92.22	99.09	0.89
ViT_b_16	BadNet	96.72	0.33	96.58	96.61	0.34	96.54	94.41	0.34	94.76	26.23	12.02	22.64	96.72	0.33	96.56	96.72	0.33	96.56	96.71	0.38	96.57	N/A	N/A	N/A	98.00	0.27	97.90	N/A	N/A	N/A	96.72	0.33	96.56	96.15	0.43	96.11	10.00	0.00	11.11	N/A	N/A	N/A	27.31	10.78	24.07	N/A	N/A	N/A
ViT_b_16	Blended	96.69	77.09	21.94	96.78	76.68	22.32	94.57	55.90	38.00	26.92	16.96	20.77	96.63	78.38	20.76	90.96	64.89	31.97	96.60	54.53	43.40	N/A	N/A	N/A	98.13	77.61	21.57	N/A	N/A	N/A	96.69	77.09	21.94	96.28	82.41	16.80	10.00	0.00	11.11	N/A	N/A	N/A	27.45	19.03	20.59	N/A	N/A	N/A
ViT_b_16	LC	96.56	13.47	83.97	96.40	13.56	84.03	94.75	35.44	52.91	28.51	14.34	24.91	96.35	12.42	84.90	96.55	13.10	84.33	96.62	1.10	95.79	N/A	N/A	N/A	98.03	35.43	61.97	N/A	N/A	N/A	96.56	13.47	83.97	12.21	3.29	11.13	10.00	0.00	11.11	96.26	9.88	87.20	26.07	14.19	22.91	95.99	14.56	81.78
ViT_b_16	SIG	96.61	8.67	80.47	96.67	8.38	80.06	94.67	3.22	74.23	26.27	12.04	23.64	96.61	8.67	80.47	96.61	8.67	80.47	96.63	6.99	80.58	N/A	N/A	N/A	98.08	10.64	79.43	27.85	4.02	25.05	96.61	8.67	80.47	95.81	8.42	77.46	10.00	0.00	11.11	96.38	10.59	78.00	27.02	7.51	27.62	95.87	13.22	76.18
ViT_b_16	LF	96.48	0.34	96.40	96.50	0.32	96.44	94.98	0.22	95.19	24.20	6.70	23.11	96.41	0.37	96.29	96.38	0.31	96.33	96.91	0.22	96.86	N/A	N/A	N/A	97.94	0.14	97.91	22.52	8.23	20.79	96.48	0.34	96.40	88.36	2.66	87.54	10.00	0.00	11.11	96.27	0.40	96.17	27.83	10.28	26.06	95.79	0.81	95.64
ViT_b_16	SSBA	96.68	1.48	94.18	96.58	1.14	94.28	93.85	1.11	91.30	27.88	11.87	25.46	96.68	1.48	94.18	96.63	1.31	94.21	96.54	0.66	94.38	N/A	N/A	N/A	98.00	0.43	96.89	N/A	N/A	N/A	96.68	1.48	94.18	96.28	1.39	93.97	10.00	0.00	11.11	96.40	1.58	93.98	26.67	10.00	25.20	95.88	2.11	93.13
ViT_b_16	WaNet	91.90	0.69	91.42	93.77	0.66	93.27	92.96	0.77	92.44	77.14	3.04	75.74	93.91	0.56	93.51	91.71	0.56	91.74	96.60	0.43	96.19	N/A	N/A	N/A	98.01	0.19	97.54	23.25	4.63	22.55	91.90	0.69	91.41	93.03	0.63	92.41	10.00	0.00	11.13	91.56	0.75	91.16	85.72	1.81	84.84	90.68	0.90	90.34
ViT_b_16	InputAware	91.65	29.23	63.72	94.47	39.77	56.37	94.09	20.02	65.02	76.95	22.69	48.53	94.57	8.53	80.58	90.83	54.27	40.77	96.60	52.22	47.13	N/A	N/A	N/A	98.01	65.08	34.56	N/A	N/A	N/A	90.82	54.28	40.77	80.58	57.27	37.23	N/A	N/A	N/A	90.47	58.82	36.99	82.10	5.81	66.48	89.19	68.98	26.94
ViT_b_16	BPP	91.46	35.26	58.06	93.96	37.24	58.19	93.96	29.70	64.08	78.27	8.98	58.83	91.46	35.26	58.06	90.84	35.19	57.83	96.69	17.21	78.54	N/A	N/A	N/A	97.72	43.27	54.90	N/A	N/A	N/A	91.46	35.26	58.06	93.71	20.36	73.51	N/A	N/A	N/A	N/A	N/A	N/A	79.11	3.79	67.20	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.76	89.13	10.82	96.66	84.98	14.96	94.53	54.24	27.30	25.22	10.21	22.43	96.53	69.43	30.28	96.75	87.31	12.66	96.65	90.48	9.41	N/A	N/A	N/A	98.07	96.20	3.78	N/A	N/A	N/A	96.76	89.13	10.82	19.04	27.98	13.44	10.00	0.00	11.11	96.54	89.28	10.69	28.12	13.61	22.44	96.17	93.96	6.02
ConvNext_tiny	BadNet	92.30	0.80	91.97	89.68	1.16	89.14	88.87	1.03	88.37	87.61	1.57	87.16	92.30	0.80	91.97	92.30	0.80	91.97	91.52	1.00	91.20	N/A	N/A	N/A	92.83	0.69	92.60	69.27	4.57	67.12	92.30	0.80	91.97	89.61	1.06	88.79	60.05	6.53	58.44	92.16	1.31	91.33	89.99	1.14	89.52	92.14	0.96	91.66
ConvNext_tiny	Blended	92.17	63.99	33.12	89.71	26.63	59.88	89.67	19.59	65.62	85.99	19.59	58.86	92.17	64.00	33.11	84.27	28.92	54.44	91.46	31.76	58.68	N/A	N/A	N/A	92.78	57.18	38.81	68.50	5.79	61.24	92.17	64.00	33.11	91.63	59.51	36.11	64.11	1.72	47.16	91.97	61.08	35.31	89.26	36.56	51.96	92.12	61.91	34.91
ConvNext_tiny	LC	92.10	4.36	88.18	89.97	2.88	87.43	89.02	1.66	87.47	87.07	2.13	84.48	89.74	2.10	87.71	88.67	1.02	87.74	91.49	1.74	89.89	N/A	N/A	N/A	93.06	2.41	90.39	74.81	4.00	71.92	92.11	4.36	88.18	91.58	4.29	87.63	55.99	11.01	50.63	91.69	3.41	88.77	89.51	4.26	85.77	91.84	4.58	88.04
ConvNext_tiny	SIG	92.51	23.38	62.66	89.39	6.40	70.64	88.82	10.82	65.82	85.86	22.29	58.56	92.50	23.39	62.66	85.92	10.39	64.11	91.37	12.51	66.70	N/A	N/A	N/A	92.84	22.61	59.93	76.08	30.49	46.83	92.50	23.39	62.66	91.69	23.93	59.89	58.77	0.39	30.93	91.80	18.10	65.27	89.69	7.70	67.66	92.18	22.56	63.19
ConvNext_tiny	LF	92.30	0.76	92.09	89.62	1.37	89.21	88.83	1.12	88.76	84.83	2.86	83.89	92.31	0.76	92.10	90.70	0.58	90.80	91.28	1.04	90.99	N/A	N/A	N/A	92.95	0.69	92.66	71.23	6.08	68.79	92.31	0.76	92.10	90.44	0.67	90.22	63.58	3.38	62.34	91.67	0.79	91.44	90.00	0.60	90.02	92.23	0.81	91.98
ConvNext_tiny	SSBA	92.40	1.06	90.01	89.67	1.23	87.34	88.78	1.17	86.42	87.24	1.18	84.76	92.40	1.06	90.00	90.24	0.80	87.53	91.67	1.02	89.32	N/A	N/A	N/A	92.84	1.33	90.37	70.79	5.53	65.58	92.40	1.06	90.00	91.81	0.91	89.41	25.44	1.69	26.19	92.17	1.09	89.71	90.44	0.78	87.69	92.23	1.07	89.77
ConvNext_tiny	WaNet	88.04	0.95	86.17	88.72	1.45	87.10	88.51	1.07	87.40	88.47	1.41	87.19	88.06	0.95	86.17	88.10	0.87	86.39	91.69	1.12	89.70	N/A	N/A	N/A	92.91	1.02	91.14	71.25	4.61	68.95	88.06	0.95	86.17	88.99	1.58	87.12	23.46	9.11	23.36	87.11	1.19	84.40	88.30	1.06	87.08	88.02	0.92	86.03
ConvNext_tiny	InputAware	87.57	15.47	68.44	89.86	19.20	65.48	88.72	17.17	66.42	89.34	18.96	65.53	87.54	35.73	53.50	82.30	5.32	69.08	91.91	21.80	66.28	N/A	N/A	N/A	93.00	29.41	61.50	71.22	7.32	64.87	87.54	35.73	53.50	89.71	42.09	49.39	61.84	6.89	53.80	86.66	39.48	49.93	87.96	9.48	66.48	87.38	35.39	54.17
ConvNext_tiny	BPP	87.66	2.56	83.93	88.59	1.81	83.91	87.88	1.87	82.61	88.51	2.86	82.78	88.62	1.93	84.28	87.66	2.56	83.93	91.76	1.59	88.66	N/A	N/A	N/A	92.85	1.57	89.54	73.99	5.06	70.28	87.66	2.56	83.93	88.60	2.06	84.11	17.47	5.13	18.31	87.01	2.38	83.24	87.92	1.61	82.84	87.45	2.66	83.40
ConvNext_tiny	TrojanNN	92.29	95.32	4.48	89.42	69.31	27.41	89.13	49.20	43.99	87.29	43.98	44.61	89.56	67.86	28.67	85.27	64.62	28.99	91.45	91.38	8.16	N/A	N/A	N/A	92.83	97.81	2.17	67.99	4.87	60.82	92.29	95.32	4.48	91.28	93.54	6.03	63.78	10.24	47.99	91.98	95.81	4.02	90.44	39.06	53.49	92.28	95.66	4.16

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	93.76	50.06	48.14	93.49	4.94	89.83	93.67	5.01	89.60	93.30	7.67	87.31	92.83	0.62	92.67	91.32	0.76	91.31	89.51	2.29	88.72	N/A	N/A	N/A	68.40	71.78	22.14	73.60	0.10	80.01	91.25	4.26	87.96	10.79	0.91	11.36	82.04	1.94	80.97	91.90	50.89	47.22	87.92	7.51	83.41	93.60	50.81	47.38
PreActResNet-18	Blended	93.68	93.30	6.37	93.46	90.68	8.79	93.30	93.28	6.39	93.48	91.97	7.60	90.64	60.71	33.92	89.90	53.54	36.19	90.14	75.23	22.02	N/A	N/A	N/A	61.89	26.51	38.22	71.18	0.01	71.24	91.37	82.20	15.61	9.88	0.00	11.27	83.77	49.60	40.37	92.23	93.87	5.57	88.39	40.42	44.32	93.34	93.26	6.36
PreActResNet-18	LC	93.71	93.59	6.39	93.55	94.88	5.10	92.83	53.91	39.24	93.24	91.88	8.03	93.27	92.74	7.22	88.79	81.38	15.27	89.56	62.50	35.29	N/A	N/A	N/A	49.30	6.52	42.20	70.94	99.86	0.13	93.62	56.78	41.81	12.08	5.24	11.81	84.06	16.82	68.64	91.22	1.03	89.31	79.86	1.49	68.12	93.76	92.48	7.49
PreActResNet-18	SIG	93.80	82.43	14.90	93.51	81.77	15.53	93.69	84.59	12.18	93.65	81.64	15.43	93.80	82.43	14.90	90.11	14.97	50.53	89.66	65.29	25.72	N/A	N/A	N/A	70.52	85.82	6.64	77.35	72.37	25.28	90.29	69.86	21.27	10.18	0.00	11.28	82.23	80.32	9.38	90.11	83.53	12.88	86.45	63.41	19.02	93.61	83.14	14.36
PreActResNet-18	LF	93.85	75.09	23.57	93.62	69.64	28.33	93.31	74.16	24.02	93.37	71.56	26.64	93.85	75.09	23.57	85.00	4.43	76.66	89.21	63.48	32.44	N/A	N/A	N/A	82.88	77.69	18.56	88.95	3.63	86.48	92.97	81.21	17.88	11.17	0.00	11.16	80.38	11.81	73.81	91.08	83.81	15.13	89.78	70.54	26.47	93.45	76.58	22.20
PreActResNet-18	SSBA	93.41	35.67	59.99	93.36	27.97	66.46	93.37	16.99	76.30	93.28	30.91	63.73	93.41	35.66	60.00	85.04	1.66	78.94	89.90	9.72	80.02	N/A	N/A	N/A	74.04	45.26	42.54	80.12	7.00	75.22	90.04	1.56	86.00	16.48	24.62	15.12	81.09	1.31	76.26	91.55	20.88	72.02	89.58	6.19	82.77	93.01	38.10	57.11
PreActResNet-18	WaNet	91.27	1.12	91.24	93.99	0.76	92.83	92.34	1.11	91.49	93.67	0.89	92.67	91.27	1.12	91.24	91.27	1.12	91.24	89.48	2.57	86.66	N/A	N/A	N/A	42.48	75.28	19.77	64.90	0.00	72.59	90.08	4.12	88.29	81.97	5.68	77.59	84.08	2.98	83.22	90.77	1.41	90.37	92.38	0.78	91.17	90.54	1.26	90.48
PreActResNet-18	InputAware	90.66	56.06	41.27	93.22	75.64	23.93	91.93	73.21	25.83	93.36	79.54	20.07	90.66	56.07	41.27	88.61	9.02	74.30	89.82	62.34	33.44	N/A	N/A	N/A	66.84	62.16	22.96	77.50	3.80	71.36	89.92	22.26	69.43	63.09	50.93	29.82	83.17	78.99	18.42	88.90	6.66	78.86	88.54	14.72	69.76	88.45	3.17	78.91
PreActResNet-18	BPP	91.37	80.06	18.30	93.33	94.84	4.87	93.31	81.39	17.32	93.14	96.09	3.71	93.51	93.70	5.89	83.57	0.86	80.74	89.55	36.03	54.59	N/A	N/A	N/A	75.56	68.12	20.86	80.07	8.17	70.45	88.35	11.44	75.00	83.97	80.69	13.74	84.39	56.66	36.08	89.47	16.18	72.42	91.31	6.82	81.42	91.03	62.78	33.81
PreActResNet-18	TrojanNN	93.72	99.88	0.12	93.35	99.74	0.26	92.63	98.78	1.21	92.96	99.87	0.13	93.29	99.92	0.08	85.13	44.58	30.11	89.84	99.03	0.87	N/A	N/A	N/A	31.58	0.00	25.77	79.75	12.25	70.42	93.45	99.01	0.99	11.05	0.00	12.03	87.61	99.12	0.88	92.63	99.90	0.10	88.61	6.44	74.73	93.43	99.89	0.11
VGG19_BN	BadNet	91.97	55.13	42.58	90.17	12.54	80.98	90.15	7.43	84.76	87.55	37.48	57.04	91.97	55.13	42.58	89.32	2.52	87.86	87.33	2.02	86.33	N/A	N/A	N/A	N/A	N/A	N/A	58.07	0.00	64.33	N/A	N/A	N/A	10.64	1.22	11.10	91.47	1.17	90.86	89.67	47.94	48.68	89.29	4.30	85.33	91.74	57.20	40.60
VGG19_BN	Blended	92.02	90.27	8.98	90.49	67.62	28.29	90.36	77.81	19.87	88.45	68.51	26.50	92.02	90.27	8.98	88.62	65.21	26.63	86.91	69.81	25.70	N/A	N/A	N/A	N/A	N/A	N/A	53.40	30.89	42.65	N/A	N/A	N/A	12.50	0.00	12.61	87.19	89.50	9.59	90.09	92.46	6.66	88.34	37.56	44.43	92.01	90.38	8.83
VGG19_BN	LC	92.14	92.28	7.67	90.11	79.20	19.98	90.24	50.04	41.63	88.28	95.86	4.07	90.12	85.00	14.53	91.50	87.22	12.54	87.50	55.14	40.76	N/A	N/A	N/A	42.83	4.18	30.59	55.11	99.88	0.12	90.42	16.28	73.90	22.96	5.36	23.22	88.97	79.39	14.28	90.51	3.37	86.22	86.67	73.76	24.23	92.02	95.52	4.46
VGG19_BN	SIG	92.26	85.64	11.69	90.48	71.12	22.06	90.75	76.56	17.43	88.31	77.56	16.90	90.45	86.99	10.13	86.20	0.84	68.40	87.30	58.97	24.26	N/A	N/A	N/A	57.89	23.68	18.50	54.31	80.48	16.16	91.54	96.02	3.30	16.27	10.33	16.62	63.97	23.46	11.29	90.69	63.76	26.86	89.79	67.86	19.33	92.15	87.06	10.37
VGG19_BN	LF	91.68	1.19	91.46	89.80	1.36	89.61	90.21	1.18	89.92	88.33	1.17	88.61	91.68	1.19	91.46	90.00	0.18	91.49	86.35	1.93	85.91	N/A	N/A	N/A	10.06	99.88	0.07	59.78	13.60	55.69	90.26	1.56	90.08	10.98	0.00	12.20	84.28	2.37	85.19	90.38	1.66	90.09	88.68	2.62	87.96	91.63	1.16	91.43
VGG19_BN	SSBA	92.08	7.70	83.44	90.07	3.17	84.32	89.98	1.82	86.19	88.74	5.93	80.67	90.36	2.06	86.06	91.88	1.10	88.24	86.69	5.16	81.17	N/A	N/A	N/A	66.94	15.50	54.31	61.44	4.55	56.73	89.69	7.70	80.20	10.47	0.00	11.63	88.54	0.36	88.00	91.34	4.01	85.88	86.02	3.38	81.00	92.11	9.20	82.27
VGG19_BN	WaNet	88.68	3.55	82.64	91.34	1.39	89.77	91.31	1.39	89.16	90.78	1.19	88.80	88.68	3.55	82.64	84.25	0.83	84.06	86.33	3.43	82.98	N/A	N/A	N/A	71.78	9.67	64.43	56.57	12.81	51.06	87.08	2.53	78.91	9.10	0.00	10.13	65.14	1.93	63.43	86.64	4.24	77.44	88.92	1.26	87.25	87.95	5.06	80.30
VGG19_BN	InputAware	88.57	80.46	16.56	91.08	80.17	17.56	91.38	67.09	28.09	91.14	88.04	10.43	91.53	83.49	15.03	88.86	5.29	76.79	86.80	49.30	41.70	N/A	N/A	N/A	63.37	14.43	48.70	62.15	13.18	52.63	85.90	7.11	74.32	11.98	1.41	11.52	84.45	9.96	71.31	87.19	30.53	56.57	89.56	0.99	45.43	88.79	3.72	74.70
VGG19_BN	BPP	88.06	8.29	79.60	91.80	11.12	80.29	91.69	4.66	85.37	91.25	10.37	80.51	91.65	6.98	83.66	84.10	1.62	77.58	86.38	7.52	74.96	N/A	N/A	N/A	35.13	27.06	26.86	62.87	15.98	52.74	84.61	0.37	83.57	89.87	27.93	65.72	59.92	5.77	51.26	87.92	5.24	81.24	89.91	1.34	86.26	84.23	0.88	78.97
VGG19_BN	TrojanNN	91.82	99.92	0.07	90.26	98.68	1.26	89.95	98.69	1.23	88.70	99.12	0.86	91.82	99.92	0.07	85.50	56.71	34.73	87.45	99.49	0.47	N/A	N/A	N/A	38.47	0.00	23.91	54.28	99.86	0.12	88.28	45.23	43.89	91.59	99.61	0.38	91.42	98.87	0.68	90.12	98.98	1.01	89.96	1.60	65.57	91.75	99.94	0.06
ViT_b_16	BadNet	96.49	47.00	51.53	96.62	31.29	67.04	95.46	14.48	82.06	24.37	10.01	21.92	96.53	27.02	71.17	95.56	38.01	60.16	96.62	0.72	96.40	N/A	N/A	N/A	97.79	39.88	59.11	N/A	N/A	N/A	96.49	47.01	51.53	91.23	17.52	78.17	10.00	0.00	11.11	N/A	N/A	N/A	26.59	13.60	21.29	N/A	N/A	N/A
ViT_b_16	Blended	96.49	92.90	6.86	96.58	92.86	6.89	94.85	82.19	16.17	28.24	11.00	23.99	96.36	93.30	6.48	96.49	92.91	6.84	96.72	91.78	7.89	N/A	N/A	N/A	97.92	96.63	3.27	N/A	N/A	N/A	96.49	92.91	6.84	95.61	92.39	7.29	10.00	0.00	11.11	N/A	N/A	N/A	26.15	20.30	20.10	N/A	N/A	N/A
ViT_b_16	LC	96.79	64.37	35.38	96.62	66.62	33.16	94.89	79.32	14.46	26.27	9.64	23.54	96.68	66.41	33.37	96.78	63.22	36.51	96.65	40.60	58.62	N/A	N/A	N/A	97.94	83.01	16.98	N/A	N/A	N/A	96.79	64.37	35.38	90.26	61.29	37.92	10.00	0.00	11.11	96.58	61.47	38.26	27.99	9.94	26.14	96.03	77.37	21.32
ViT_b_16	SIG	96.67	44.87	51.24	96.54	46.13	50.16	94.70	39.56	48.73	25.40	10.89	22.60	96.67	44.87	51.24	96.64	44.61	51.48	96.79	36.36	58.02	N/A	N/A	N/A	97.88	47.68	48.71	55.30	72.21	12.26	96.67	44.87	51.24	96.23	43.09	51.87	10.00	100.00	0.00	96.48	49.73	46.63	27.35	11.06	25.39	96.09	52.51	44.12
ViT_b_16	LF	96.50	0.32	96.46	96.36	0.38	96.28	95.19	0.40	95.24	25.95	8.10	24.04	96.37	0.33	96.34	96.50	0.32	96.46	96.64	0.34	96.57	N/A	N/A	N/A	97.78	0.18	97.79	22.72	1.46	23.90	96.50	0.32	96.46	96.09	0.30	96.01	10.00	100.00	0.00	96.17	0.41	96.10	27.82	11.48	25.20	95.13	1.36	94.90
ViT_b_16	SSBA	96.52	17.64	79.06	96.35	8.62	87.52	93.04	1.34	88.26	23.08	7.99	21.18	96.52	17.64	79.06	96.30	8.93	87.36	96.58	6.80	89.44	N/A	N/A	N/A	98.11	12.68	85.14	N/A	N/A	N/A	96.52	17.63	79.08	24.38	0.57	27.71	10.00	0.00	11.11	96.32	18.97	77.76	26.63	12.31	24.44	95.55	18.19	78.83
ViT_b_16	WaNet	91.80	1.67	90.35	93.87	0.67	93.33	93.60	0.53	93.28	79.36	4.90	78.10	91.80	1.67	90.35	91.80	1.67	90.35	96.71	0.69	95.99	N/A	N/A	N/A	97.78	0.31	97.33	57.92	3.94	55.88	91.80	1.67	90.35	93.54	1.67	92.21	10.00	0.00	11.11	91.51	1.83	89.83	84.22	1.21	83.53	90.26	1.90	88.79
ViT_b_16	InputAware	92.01	55.97	42.13	94.78	57.44	42.04	93.50	28.68	53.23	75.07	10.99	58.17	94.50	53.57	45.79	91.12	56.41	42.34	96.59	47.57	51.64	N/A	N/A	N/A	97.82	56.93	42.52	N/A	N/A	N/A	91.12	56.42	42.33	93.41	57.62	41.81	N/A	N/A	N/A	90.20	56.98	41.41	83.02	5.92	70.00	88.50	68.82	30.08
ViT_b_16	BPP	91.95	80.56	18.34	94.19	85.88	13.53	93.10	72.68	20.93	79.25	8.00	64.88	94.25	83.77	15.51	91.51	77.39	21.20	96.66	84.31	14.83	N/A	N/A	N/A	97.77	91.50	8.17	N/A	N/A	N/A	91.95	80.56	18.34	92.06	88.50	10.97	N/A	N/A	N/A	N/A	N/A	N/A	82.06	3.49	73.70	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.78	97.97	2.03	96.54	96.11	3.89	93.81	82.04	10.90	25.62	18.10	21.69	96.51	96.51	3.49	96.52	96.84	3.16	96.64	97.11	2.89	N/A	N/A	N/A	97.95	99.97	0.03	N/A	N/A	N/A	96.77	97.97	2.03	20.33	41.16	11.81	10.00	0.00	11.11	96.46	97.64	2.36	26.16	15.04	19.72	96.01	99.52	0.48
ConvNext_tiny	BadNet	91.97	23.04	71.14	89.61	2.81	87.52	89.03	1.29	88.02	86.08	3.64	83.93	56.12	3.68	56.58	84.02	1.08	85.30	91.53	1.24	90.73	N/A	N/A	N/A	92.69	19.91	75.18	69.48	6.48	66.95	91.97	23.06	71.13	84.42	15.62	73.02	61.83	8.77	60.17	91.63	14.11	78.89	90.12	6.64	84.59	91.73	19.64	74.09
ConvNext_tiny	Blended	92.25	90.01	9.26	89.98	58.53	35.79	88.93	38.92	51.21	86.81	39.38	49.67	92.25	90.01	9.26	84.65	71.27	24.13	91.30	87.84	11.30	N/A	N/A	N/A	92.95	92.18	7.24	76.35	4.83	68.62	92.25	90.01	9.26	91.40	91.52	7.78	58.98	7.46	45.20	91.98	90.53	8.81	88.89	8.07	65.62	92.12	85.17	13.68
ConvNext_tiny	LC	92.31	44.43	52.47	89.66	12.52	78.53	88.69	8.16	80.99	86.98	10.58	78.60	78.58	2.54	76.48	84.70	0.54	84.67	91.03	21.24	71.64	N/A	N/A	N/A	92.97	42.22	53.32	71.07	10.02	66.29	92.31	44.42	52.48	90.20	27.92	65.52	25.34	20.71	21.93	91.77	51.68	45.89	90.37	8.62	81.27	92.14	45.48	51.58
ConvNext_tiny	SIG	92.10	66.09	30.48	89.81	28.93	56.47	89.06	15.20	60.59	87.21	8.38	62.30	89.95	40.00	48.90	83.74	46.47	41.59	91.83	47.38	43.10	N/A	N/A	N/A	92.84	51.44	40.52	74.08	76.09	20.11	92.11	66.09	30.48	90.67	59.57	35.12	60.22	31.42	22.39	91.73	68.41	28.14	88.65	51.38	37.40	92.10	62.56	33.24
ConvNext_tiny	LF	92.08	0.79	91.86	89.65	0.90	89.50	88.67	1.06	88.49	86.26	1.53	85.58	92.08	0.79	91.86	88.11	0.52	88.87	91.43	1.01	91.12	N/A	N/A	N/A	92.86	0.81	92.58	70.52	5.29	68.23	92.08	0.79	91.86	91.70	0.76	91.48	58.33	14.84	54.66	91.03	1.31	90.62	89.93	0.80	90.01	91.79	0.96	91.52
ConvNext_tiny	SSBA	92.18	6.47	84.86	89.61	1.47	86.61	89.07	1.34	86.42	85.80	2.13	83.97	76.08	2.26	73.78	85.12	2.02	81.47	91.57	4.11	86.78	N/A	N/A	N/A	92.53	11.44	80.86	73.62	4.39	69.30	92.18	6.47	84.86	91.79	3.68	87.01	59.65	10.07	50.83	91.77	6.71	84.13	90.32	1.44	86.92	92.16	5.56	85.46
ConvNext_tiny	WaNet	87.54	1.18	85.25	89.04	1.12	87.78	88.35	1.10	87.09	88.81	1.31	87.47	87.54	1.18	85.25	85.52	0.46	85.04	91.48	2.53	88.66	N/A	N/A	N/A	92.83	3.74	88.87	69.19	4.87	66.07	87.54	1.18	85.25	83.33	4.48	77.85	59.84	5.90	58.22	85.38	0.71	84.14	88.00	1.29	86.28	87.14	0.86	85.23
ConvNext_tiny	InputAware	87.64	41.77	50.88	89.28	50.73	44.27	88.82	41.40	45.62	89.21	47.51	46.32	89.19	0.68	53.62	81.74	12.26	66.30	91.45	57.96	37.49	N/A	N/A	N/A	92.78	56.11	39.81	72.58	7.35	65.53	87.88	74.40	24.26	89.58	76.01	22.31	63.73	9.52	53.99	87.35	76.14	22.47	88.36	8.90	65.33	87.75	74.23	24.36
ConvNext_tiny	BPP	87.09	3.13	82.26	89.10	3.12	84.87	87.66	2.08	83.64	88.71	4.29	83.71	88.91	4.29	84.29	86.02	1.38	82.89	90.86	16.39	70.91	N/A	N/A	N/A	92.59	26.66	64.51	77.47	3.94	73.87	87.09	3.13	82.26	89.31	11.50	79.16	53.44	8.17	49.40	87.23	1.88	83.61	88.96	1.48	85.48	86.91	3.16	82.02
ConvNext_tiny	TrojanNN	92.39	99.93	0.06	89.62	93.60	5.96	89.26	71.68	25.68	85.64	91.13	8.16	89.56	91.87	7.89	84.23	82.71	15.37	91.55	99.43	0.54	N/A	N/A	N/A	93.01	99.91	0.09	72.40	12.16	58.70	92.39	99.93	0.06	90.78	99.19	0.79	57.85	9.23	50.06	91.86	99.96	0.04	88.71	96.56	3.38	92.28	99.96	0.03

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	93.14	74.73	24.24	93.07	10.36	84.58	92.98	20.18	75.87	92.52	8.33	85.96	91.64	0.88	91.68	84.67	0.29	85.30	88.88	27.18	68.14	N/A	N/A	N/A	72.81	53.20	41.31	78.09	2.99	76.51	89.46	3.51	87.10	11.66	0.86	12.93	81.78	2.21	80.79	91.85	45.86	51.72	87.63	3.62	85.46	92.19	79.57	19.37
PreActResNet-18	Blended	93.76	94.88	4.79	93.53	91.96	7.56	93.48	94.14	5.41	93.34	92.07	7.41	90.98	65.91	29.24	86.92	37.01	40.68	89.77	86.09	12.67	N/A	N/A	N/A	66.26	0.17	34.91	70.18	8.04	55.60	92.25	90.88	8.41	10.99	0.00	11.67	79.92	47.94	34.21	91.27	89.54	9.01	89.70	30.36	51.54	93.01	95.38	4.27
PreActResNet-18	LC	93.80	93.73	6.24	93.60	95.47	4.51	92.34	40.33	53.28	93.20	82.33	17.42	93.28	98.70	1.29	87.06	53.28	23.44	89.94	62.78	35.68	N/A	N/A	N/A	54.37	2.70	45.88	66.87	99.98	0.02	93.61	89.86	10.09	10.89	0.00	12.09	81.09	44.68	47.77	91.87	4.51	88.19	90.01	48.36	45.24	93.73	90.76	9.22
PreActResNet-18	SIG	93.82	83.40	14.29	93.59	88.17	10.13	93.48	88.07	10.08	93.41	83.20	14.22	93.82	83.40	14.29	91.82	23.63	50.47	90.00	74.81	18.61	N/A	N/A	N/A	64.33	0.00	20.51	75.01	67.82	29.87	93.74	82.36	15.02	11.57	0.00	11.73	82.87	61.66	12.84	91.99	78.71	16.81	90.66	36.52	38.69	93.45	82.50	14.89
PreActResNet-18	LF	93.56	86.46	12.88	93.35	82.54	16.36	93.25	86.58	12.60	93.34	84.43	14.64	93.56	86.46	12.87	88.11	6.36	78.78	89.49	76.22	21.40	N/A	N/A	N/A	60.04	55.07	30.76	79.13	7.47	75.38	91.20	81.26	16.52	9.36	0.00	10.08	79.77	24.27	65.33	90.39	86.24	12.74	90.41	70.56	26.09	93.32	86.76	12.54
PreActResNet-18	SSBA	93.43	73.44	24.89	93.24	61.32	35.98	93.34	52.76	43.53	93.33	67.03	30.83	90.45	1.22	85.77	91.68	2.19	87.52	89.61	27.92	64.11	N/A	N/A	N/A	83.11	56.33	37.69	78.52	1.13	74.21	90.99	5.27	83.82	12.41	27.69	11.47	82.42	2.47	76.30	91.93	73.97	24.00	90.06	3.43	81.27	93.37	66.92	30.58
PreActResNet-18	WaNet	90.65	12.63	79.94	93.61	0.68	92.72	92.07	0.93	91.10	93.61	0.78	92.67	90.65	12.66	79.92	84.96	0.59	86.37	89.53	4.87	84.87	N/A	N/A	N/A	65.43	53.43	37.98	79.74	4.60	78.46	88.57	2.91	85.96	82.12	2.86	78.67	83.91	2.72	83.59	87.67	12.76	76.59	91.51	2.23	89.94	90.43	14.34	78.30
PreActResNet-18	InputAware	91.74	79.18	19.89	93.14	77.68	21.59	92.20	53.69	43.89	93.07	85.13	14.37	91.74	79.19	19.88	85.88	7.54	75.41	89.44	60.56	36.07	N/A	N/A	N/A	72.26	69.31	24.89	69.66	14.36	62.67	91.24	23.19	67.31	67.69	59.08	30.12	82.69	55.81	38.97	88.70	5.34	79.14	88.54	3.97	78.19	90.18	82.74	16.44
PreActResNet-18	BPP	90.81	87.23	11.88	93.35	64.96	32.53	92.97	71.73	19.80	93.16	9.40	80.92	93.21	8.98	77.39	89.41	5.72	66.68	89.13	16.74	74.51	N/A	N/A	N/A	55.61	11.78	49.70	86.30	6.91	75.97	88.91	0.99	85.58	72.52	81.84	13.12	87.81	58.48	38.58	89.65	8.32	73.42	90.69	2.77	83.98	89.28	31.96	58.10
PreActResNet-18	TrojanNN	93.58	99.97	0.03	93.40	99.92	0.08	92.60	99.36	0.64	92.78	99.73	0.27	93.19	99.94	0.06	86.39	94.79	3.92	89.72	99.53	0.44	N/A	N/A	N/A	24.73	100.00	0.00	74.49	99.99	0.01	92.74	94.89	4.89	12.35	0.00	13.31	88.44	98.97	1.03	92.65	10.42	74.48	87.84	11.43	59.19	93.44	99.98	0.02
VGG19_BN	BadNet	91.51	79.87	19.12	89.28	30.16	65.19	89.32	29.44	66.27	87.54	49.50	46.83	90.01	37.34	58.09	88.41	1.74	87.17	86.58	9.01	80.99	N/A	N/A	N/A	N/A	N/A	N/A	54.81	11.12	50.42	N/A	N/A	N/A	87.88	73.66	24.82	90.60	1.86	90.10	90.42	71.02	27.33	85.87	9.64	76.73	91.56	79.81	19.16
VGG19_BN	Blended	91.83	94.19	5.21	89.99	74.37	22.81	89.94	83.74	14.72	89.32	87.67	10.77	88.32	48.04	42.10	86.94	49.83	39.09	87.17	85.10	12.60	N/A	N/A	N/A	N/A	N/A	N/A	55.09	0.00	31.27	N/A	N/A	N/A	14.55	4.76	13.83	91.22	97.10	2.33	89.83	93.96	5.10	89.58	79.41	16.84	91.86	94.67	4.79
VGG19_BN	LC	92.41	88.44	11.46	90.63	77.00	22.42	90.17	64.59	34.28	89.51	76.51	23.10	90.22	68.01	30.92	89.36	31.48	59.86	87.09	88.94	10.40	N/A	N/A	N/A	49.38	63.57	23.29	52.82	100.00	0.00	89.92	22.61	69.46	86.59	50.76	43.88	76.28	99.90	0.02	87.12	1.09	83.50	89.57	65.46	32.97	92.07	89.48	10.42
VGG19_BN	SIG	92.11	92.79	6.47	90.59	76.18	18.07	90.37	77.34	16.33	89.09	91.83	7.08	90.34	83.78	13.34	88.14	3.10	64.07	87.22	79.34	14.54	N/A	N/A	N/A	63.36	56.58	20.13	55.92	0.00	12.36	91.48	96.40	3.11	82.73	86.18	5.33	82.36	91.42	5.89	91.21	80.98	14.09	86.45	38.56	37.30	92.09	93.33	5.92
VGG19_BN	LF	91.17	1.54	91.00	89.69	1.20	89.48	89.68	0.97	89.54	88.74	1.44	88.71	89.82	0.91	89.81	91.00	0.40	91.58	86.02	1.90	85.72	N/A	N/A	N/A	70.42	0.26	72.08	56.83	10.21	52.68	89.48	1.50	89.22	9.95	0.01	11.03	82.41	0.94	81.43	89.87	2.97	89.30	89.63	1.83	89.17	91.21	1.58	91.09
VGG19_BN	SSBA	91.90	38.08	56.67	89.87	4.44	84.11	90.17	8.99	80.82	88.62	8.71	78.33	91.90	38.08	56.67	90.33	1.49	86.61	86.90	10.61	76.34	N/A	N/A	N/A	59.23	34.57	40.78	58.45	12.20	51.74	87.81	32.21	60.33	10.92	0.46	10.84	88.00	8.39	81.59	90.10	21.77	70.81	89.54	13.94	76.46	91.92	41.33	53.62
VGG19_BN	WaNet	90.12	23.47	69.62	91.64	2.33	88.92	91.42	2.01	89.12	91.02	3.37	87.38	90.12	23.47	69.62	88.09	1.20	87.81	86.56	5.19	81.39	N/A	N/A	N/A	14.31	96.55	0.45	55.80	15.22	50.86	88.76	1.64	84.23	10.00	0.00	11.13	87.22	2.44	86.35	87.43	31.16	61.64	89.77	2.26	87.17	75.84	55.76	39.70
VGG19_BN	InputAware	89.02	67.30	28.38	91.75	65.29	30.51	91.61	68.04	28.19	91.33	64.10	31.43	88.27	40.51	49.40	88.33	2.40	78.61	87.01	38.23	52.52	N/A	N/A	N/A	10.00	0.00	11.11	53.66	16.17	44.57	87.18	3.86	78.38	90.67	80.93	16.73	91.59	67.94	28.92	86.79	2.91	76.08	89.31	0.16	56.90	87.95	4.31	75.96
VGG19_BN	BPP	89.20	47.71	47.00	91.82	38.39	55.90	91.76	50.44	45.27	91.28	56.44	39.70	92.02	66.31	30.89	82.06	1.52	71.31	86.43	4.64	81.93	N/A	N/A	N/A	10.00	100.00	0.00	56.81	7.67	51.04	86.89	1.21	83.67	10.02	0.00	11.13	83.15	14.81	74.06	87.07	6.46	76.53	89.81	13.89	51.86	88.30	2.32	83.04
VGG19_BN	TrojanNN	91.97	99.92	0.08	90.39	98.73	1.18	90.32	99.46	0.49	88.98	100.00	0.00	91.97	99.92	0.08	89.18	82.90	14.91	87.57	99.68	0.31	N/A	N/A	N/A	18.54	0.00	15.40	55.68	99.87	0.13	90.75	76.58	19.96	11.41	0.00	12.10	88.26	99.88	0.12	91.27	23.69	56.87	88.72	99.66	0.33	91.78	99.94	0.06
ViT_b_16	BadNet	96.50	72.73	26.50	96.41	59.82	39.10	95.51	36.83	60.30	23.13	12.94	20.32	96.14	0.44	95.93	95.18	67.94	30.93	96.56	29.71	68.29	N/A	N/A	N/A	10.00	100.00	0.00	N/A	N/A	N/A	96.50	72.73	26.50	18.83	24.83	12.24	10.00	0.00	11.11	N/A	N/A	N/A	26.72	13.09	22.02	N/A	N/A	N/A
ViT_b_16	Blended	96.54	96.34	3.54	96.51	95.26	4.59	94.34	78.23	16.10	25.14	16.09	19.52	96.41	96.28	3.58	90.56	89.49	9.68	96.60	94.58	5.26	N/A	N/A	N/A	97.96	98.74	1.22	55.26	8.24	49.01	96.54	96.34	3.54	96.36	96.22	3.66	10.00	0.00	11.11	N/A	N/A	N/A	26.10	22.60	18.27	N/A	N/A	N/A
ViT_b_16	LC	96.65	68.03	31.46	96.46	65.61	33.80	94.12	75.12	15.91	24.51	9.47	22.70	96.43	66.21	33.21	96.58	67.07	32.40	96.51	63.31	36.53	N/A	N/A	N/A	98.16	89.72	10.28	N/A	N/A	N/A	96.65	68.03	31.46	18.64	29.07	11.70	10.00	0.00	11.11	96.54	61.71	37.50	26.23	13.14	23.43	95.95	61.74	31.99
ViT_b_16	SIG	96.74	56.59	40.83	96.66	57.52	39.93	94.11	20.66	51.06	25.07	10.74	22.31	96.74	56.59	40.83	96.72	55.34	42.01	96.45	59.98	37.37	N/A	N/A	N/A	97.94	50.12	47.90	59.83	97.72	1.56	96.74	56.59	40.83	15.70	8.02	12.37	10.00	100.00	0.00	96.61	56.11	41.16	27.80	9.73	25.77	95.86	68.59	29.23
ViT_b_16	LF	96.18	0.48	96.09	96.20	0.37	96.13	95.17	0.50	95.14	25.04	6.66	23.11	96.18	0.48	96.09	96.30	0.42	96.24	96.32	0.59	96.23	N/A	N/A	N/A	97.84	0.16	97.81	22.47	4.88	22.00	96.18	0.48	96.09	95.55	0.53	95.48	10.00	100.00	0.00	96.14	0.52	96.01	27.56	11.47	25.50	94.92	1.42	94.74
ViT_b_16	SSBA	96.55	63.79	34.96	96.44	44.57	53.16	94.64	0.54	90.17	26.28	10.22	24.26	96.59	50.52	47.54	96.49	43.00	54.64	96.52	36.16	61.90	N/A	N/A	N/A	97.62	54.39	44.73	N/A	N/A	N/A	96.55	63.79	34.96	27.01	8.57	25.07	10.00	0.00	11.11	96.36	62.23	36.43	27.52	9.81	26.19	95.51	59.44	39.14
ViT_b_16	WaNet	92.13	0.75	91.51	94.07	0.58	93.55	93.87	0.48	93.31	77.63	4.54	76.27	92.13	0.75	91.51	92.13	0.75	91.51	96.32	0.83	95.60	N/A	N/A	N/A	97.76	0.86	96.54	58.22	6.44	55.36	92.13	0.75	91.51	92.17	1.70	89.63	10.00	0.00	11.12	91.91	0.98	91.40	86.54	1.64	85.21	91.34	0.73	91.08
ViT_b_16	InputAware	90.88	61.21	37.24	94.56	65.96	33.56	93.80	62.81	35.17	76.87	11.34	64.76	94.48	61.74	37.54	90.98	82.06	17.44	96.57	53.64	45.26	N/A	N/A	N/A	97.82	60.42	39.02	N/A	N/A	N/A	90.99	83.83	15.74	53.93	39.64	32.18	N/A	N/A	N/A	90.55	85.28	14.30	76.63	18.00	59.37	88.61	91.44	8.22
ViT_b_16	BPP	91.63	78.04	20.41	94.01	89.26	10.29	93.74	86.31	13.00	75.53	4.58	66.56	91.63	78.04	20.41	91.19	77.01	21.38	96.66	93.81	6.01	N/A	N/A	N/A	97.90	95.53	4.40	N/A	N/A	N/A	91.63	78.04	20.41	45.74	43.90	20.23	N/A	N/A	N/A	N/A	N/A	N/A	81.49	6.49	71.62	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.59	99.23	0.77	96.53	98.40	1.59	94.80	95.03	4.63	25.61	20.82	19.91	96.65	98.63	1.36	96.58	99.02	0.97	96.51	97.93	2.07	N/A	N/A	N/A	97.95	99.97	0.03	N/A	N/A	N/A	96.59	99.23	0.77	95.37	95.40	4.57	10.00	0.00	11.11	96.53	99.24	0.76	27.00	14.28	21.42	95.87	99.93	0.07
ConvNext_tiny	BadNet	91.85	67.47	30.42	89.48	5.96	84.26	89.57	4.43	85.50	85.83	7.47	80.10	91.85	67.49	30.40	85.91	1.59	86.31	91.09	40.60	55.82	N/A	N/A	N/A	92.60	86.83	12.36	68.39	5.24	65.71	91.85	67.49	30.40	85.83	44.18	50.99	62.48	9.50	61.36	90.11	69.73	27.59	88.51	16.17	75.06	91.72	64.54	33.04
ConvNext_tiny	Blended	92.21	94.87	4.78	89.50	63.53	31.90	89.05	38.53	49.88	84.52	54.49	37.93	89.60	76.17	21.62	86.89	75.28	21.41	91.35	92.37	7.17	N/A	N/A	N/A	92.82	96.94	2.92	74.53	4.67	66.73	92.21	94.87	4.78	89.86	93.61	5.78	62.13	7.32	46.58	91.75	94.51	5.07	88.95	87.21	11.42	92.24	94.37	5.26
ConvNext_tiny	LC	92.25	71.23	27.91	89.18	19.03	72.62	89.10	18.71	72.11	85.65	10.41	77.28	90.08	21.80	71.71	85.93	0.64	86.20	91.79	43.49	52.23	N/A	N/A	N/A	92.89	58.16	39.06	67.31	75.13	20.77	92.25	71.20	27.94	91.81	65.26	33.40	58.55	18.30	49.56	91.57	79.80	19.71	90.12	15.27	70.18	92.13	72.72	26.54
ConvNext_tiny	SIG	92.11	77.46	20.78	89.70	25.86	57.58	88.16	21.40	54.14	87.25	25.99	52.01	69.39	0.41	33.66	83.69	42.76	44.59	91.38	67.22	27.87	N/A	N/A	N/A	92.91	72.50	24.03	72.26	91.47	7.46	92.10	77.43	20.80	91.65	77.11	20.58	62.48	68.29	14.12	91.74	83.37	15.49	90.16	72.97	23.42	91.92	73.62	23.98
ConvNext_tiny	LF	91.80	0.72	91.61	89.09	1.01	88.99	89.83	0.72	89.71	85.73	2.64	84.86	89.50	0.97	89.38	88.04	0.46	88.72	91.17	1.04	90.89	N/A	N/A	N/A	92.66	0.86	92.38	69.17	5.77	66.46	91.80	0.72	91.61	85.99	1.32	85.52	64.32	8.44	62.63	91.35	0.57	91.29	89.65	0.67	89.80	91.73	0.81	91.51
ConvNext_tiny	SSBA	91.84	38.48	56.12	89.46	3.83	84.52	89.01	1.34	85.94	86.09	6.87	79.31	91.84	38.48	56.12	88.83	18.13	72.77	91.56	11.09	80.90	N/A	N/A	N/A	92.51	59.27	38.02	75.03	6.23	70.45	91.84	38.48	56.12	91.14	22.43	70.03	39.74	9.27	37.02	91.60	38.26	56.13	89.58	13.71	75.71	91.63	35.88	58.33
ConvNext_tiny	WaNet	88.70	4.17	84.60	88.72	1.32	87.44	88.44	1.15	87.14	88.63	1.28	87.68	88.67	0.98	87.66	84.16	1.61	82.19	90.81	4.57	86.15	N/A	N/A	N/A	92.82	7.68	84.92	70.97	4.69	66.87	88.71	4.17	84.60	89.25	7.98	83.43	57.80	10.52	54.01	87.84	3.85	84.21	88.27	1.68	86.67	88.51	4.25	84.44
ConvNext_tiny	InputAware	88.18	62.34	35.34	89.65	46.19	48.82	88.97	27.96	60.91	89.58	47.06	48.37	89.56	66.06	31.66	81.69	7.00	68.11	91.35	48.08	48.01	N/A	N/A	N/A	92.94	50.88	45.36	72.47	6.34	67.48	87.96	74.36	23.62	87.48	73.48	24.64	59.71	11.23	52.06	87.38	74.00	23.64	89.05	6.01	77.06	87.96	72.66	25.09
ConvNext_tiny	BPP	86.00	23.67	67.04	89.08	13.70	77.58	88.33	5.30	82.11	88.94	14.24	76.67	88.92	10.31	79.63	84.27	3.12	81.11	91.27	13.63	77.74	N/A	N/A	N/A	92.94	30.28	64.47	79.03	4.14	75.90	86.00	23.67	67.04	89.27	16.76	75.30	21.22	19.52	19.69	85.06	18.23	69.91	88.58	2.76	84.12	86.04	23.38	67.14
ConvNext_tiny	TrojanNN	92.30	99.93	0.07	89.49	91.84	7.33	88.86	77.54	18.60	85.43	91.11	7.66	89.83	95.79	4.06	84.46	18.80	59.31	91.72	99.84	0.14	N/A	N/A	N/A	92.90	99.98	0.02	74.17	16.93	59.91	92.30	99.93	0.07	89.38	98.38	1.56	62.13	50.03	31.23	91.58	99.94	0.06	89.79	48.07	37.14	92.06	99.96	0.04

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	92.64	88.74	10.78	91.22	4.49	88.22	92.47	17.47	77.90	91.03	4.73	87.93	89.89	1.17	89.70	87.24	0.34	87.34	90.27	75.61	23.58	N/A	N/A	N/A	84.08	0.00	90.50	87.68	2.11	87.01	91.32	24.49	71.06	11.17	0.00	12.41	81.46	2.37	81.43	91.04	0.98	91.27	89.21	0.81	88.99	92.48	90.57	9.04
PreActResNet-18	Blended	93.67	99.61	0.39	93.25	98.78	1.21	93.46	98.87	1.11	93.10	99.06	0.93	93.66	99.61	0.39	88.00	11.98	58.50	91.54	98.93	1.03	N/A	N/A	N/A	65.78	0.00	48.48	75.00	99.99	0.01	90.19	79.58	15.56	16.48	0.00	15.87	83.03	86.08	12.21	92.06	98.99	0.92	85.92	36.33	34.14	93.49	99.58	0.42
PreActResNet-18	LC	93.53	99.80	0.20	92.99	99.98	0.02	92.26	60.30	35.79	91.98	99.26	0.74	92.88	100.00	0.00	86.16	20.84	47.72	89.35	94.73	5.20	N/A	N/A	N/A	46.92	0.01	40.44	85.11	99.96	0.04	93.36	81.69	18.14	17.19	0.78	18.13	83.54	19.36	70.23	91.20	0.26	89.12	87.84	3.78	81.41	93.37	99.91	0.09
PreActResNet-18	SIG	93.64	97.09	2.90	92.84	96.42	3.46	93.27	99.79	0.20	92.49	96.98	2.93	93.65	97.09	2.90	86.64	0.21	49.61	90.24	93.32	6.31	N/A	N/A	N/A	46.14	0.00	42.30	74.86	95.58	4.22	93.18	97.19	2.77	12.51	4.17	11.50	82.88	84.42	10.79	92.43	1.57	59.07	86.12	3.50	57.24	93.40	97.23	2.76
PreActResNet-18	LF	93.35	98.03	1.86	93.21	93.62	6.02	93.14	98.37	1.53	92.98	94.23	5.30	93.35	98.03	1.86	86.32	2.66	82.79	89.02	95.14	4.29	N/A	N/A	N/A	66.54	98.02	1.27	83.98	15.67	73.11	92.81	95.86	3.86	16.55	72.48	4.64	77.60	73.43	24.47	91.65	83.71	15.22	85.74	50.78	34.38	93.21	98.08	1.83
PreActResNet-18	SSBA	93.27	94.91	4.82	93.08	87.46	11.69	93.05	87.14	12.09	92.49	88.63	10.58	91.04	0.80	87.93	87.53	0.66	81.63	88.47	92.64	6.63	N/A	N/A	N/A	81.60	0.09	79.76	72.19	11.34	65.42	91.55	44.90	49.68	16.42	3.74	18.48	79.77	64.00	28.96	92.29	12.14	78.71	89.43	2.30	83.33	93.03	94.88	4.81
PreActResNet-18	WaNet	91.76	85.50	13.49	93.47	31.32	64.03	92.14	26.10	63.50	93.31	50.40	46.46	91.76	85.50	13.49	87.21	0.57	87.69	91.96	88.72	10.88	N/A	N/A	N/A	69.49	95.20	3.79	72.22	9.93	69.41	90.16	25.72	66.60	61.65	82.11	11.78	76.58	5.00	76.23	91.36	31.98	62.86	91.13	6.11	85.27	91.69	1.37	90.22
PreActResNet-18	InputAware	91.52	90.20	8.91	93.12	89.34	9.99	91.89	52.74	44.49	93.07	97.12	2.68	91.51	90.20	8.91	91.54	2.22	86.40	92.07	92.20	7.36	N/A	N/A	N/A	58.14	92.58	4.84	76.23	6.12	71.99	90.71	2.00	85.44	74.57	98.24	1.63	77.96	15.02	59.07	90.59	1.51	85.09	91.68	9.16	77.41	90.81	1.71	85.17
PreActResNet-18	BPP	91.47	99.34	0.62	93.37	3.46	86.60	93.26	87.12	11.63	93.09	3.53	87.29	91.47	99.34	0.62	84.03	0.69	78.00	89.64	97.96	1.90	N/A	N/A	N/A	82.89	99.93	0.07	81.71	99.98	0.01	89.13	1.43	83.23	83.08	95.02	1.12	88.04	94.51	5.21	89.14	7.60	77.67	91.35	5.72	77.33	90.75	89.31	9.68
PreActResNet-18	TrojanNN	93.79	99.99	0.01	92.90	44.22	47.99	92.33	83.60	13.32	92.68	4.24	82.82	92.59	95.06	4.14	89.02	12.68	64.08	89.40	99.93	0.07	N/A	N/A	N/A	18.64	100.00	0.00	72.34	100.00	0.00	92.72	99.90	0.10	13.30	0.00	14.00	88.14	93.66	6.31	92.05	4.12	80.90	89.42	7.49	71.71	93.62	81.63	17.26
VGG19_BN	BadNet	91.19	93.92	5.76	88.93	52.99	44.23	89.39	33.82	61.29	86.73	71.48	25.89	88.98	45.44	50.13	84.51	5.01	81.77	85.75	88.49	10.37	N/A	N/A	N/A	N/A	N/A	N/A	61.15	2.61	61.89	N/A	N/A	N/A	74.24	61.50	32.57	81.61	3.07	80.69	89.43	80.74	18.18	88.64	33.88	61.51	90.80	93.74	5.90
VGG19_BN	Blended	92.24	99.43	0.51	89.75	96.18	3.46	90.27	89.39	9.73	88.71	89.96	8.99	88.34	15.49	48.20	89.38	40.96	45.67	87.18	97.82	1.92	N/A	N/A	N/A	N/A	N/A	N/A	52.72	99.99	0.01	N/A	N/A	N/A	91.72	98.57	1.30	72.89	85.26	11.88	90.31	98.26	1.43	89.41	61.74	30.88	92.08	99.36	0.59
VGG19_BN	LC	91.70	98.73	1.27	89.79	90.77	8.73	89.76	86.54	13.04	88.22	99.82	0.18	89.67	19.10	37.98	87.59	27.13	59.93	86.70	98.98	1.02	N/A	N/A	N/A	10.00	0.00	11.11	55.75	100.00	0.00	89.61	14.16	77.82	11.48	0.00	12.69	56.79	27.17	44.99	89.00	0.58	85.86	83.58	30.93	45.28	91.51	99.30	0.70
VGG19_BN	SIG	91.91	97.23	2.70	90.14	44.28	39.22	90.22	77.98	18.63	88.95	97.76	2.09	89.75	94.60	5.21	83.75	0.43	64.94	86.30	97.11	2.57	N/A	N/A	N/A	10.00	100.00	0.00	54.16	99.36	0.63	90.34	98.72	1.22	10.71	0.00	11.70	63.28	0.02	25.89	90.36	26.16	47.40	87.74	4.80	64.11	91.89	97.37	2.57
VGG19_BN	LF	88.27	6.29	87.54	88.95	1.39	88.61	89.10	1.10	89.03	87.60	1.44	87.46	88.27	6.29	87.54	88.64	0.18	90.39	84.25	4.88	83.67	N/A	N/A	N/A	29.10	0.51	32.14	55.32	13.13	50.79	85.94	8.01	85.04	83.32	2.71	83.72	89.77	2.89	88.97	85.18	9.26	84.10	83.96	5.41	82.91	87.67	7.19	86.83
VGG19_BN	SSBA	91.53	90.39	8.88	89.81	53.11	42.08	89.69	54.68	40.88	87.94	55.64	39.07	91.53	90.39	8.88	88.60	0.84	85.39	85.93	74.07	22.44	N/A	N/A	N/A	58.57	19.21	49.48	48.43	97.05	2.14	90.04	83.41	15.14	90.68	58.26	38.43	55.82	21.69	48.28	90.46	78.27	19.67	88.15	8.16	77.16	91.27	90.96	8.31
VGG19_BN	WaNet	87.42	94.32	5.30	91.83	15.86	75.85	91.74	11.27	79.84	91.34	6.88	82.77	87.42	94.32	5.30	84.28	0.40	83.45	86.03	52.47	41.75	N/A	N/A	N/A	10.00	100.00	0.00	56.72	19.82	52.24	88.48	2.93	84.12	90.28	97.23	2.62	72.18	2.67	69.49	87.19	71.37	26.03	90.11	1.96	81.58	24.41	92.67	5.60
VGG19_BN	InputAware	90.01	89.74	9.09	91.07	31.36	61.11	91.09	42.01	52.66	90.65	39.68	55.06	89.22	93.34	6.18	88.20	0.88	82.49	87.79	71.59	24.83	N/A	N/A	N/A	59.66	83.81	9.72	61.18	43.38	43.59	87.11	3.58	78.98	91.57	94.28	5.51	90.19	77.01	19.61	88.32	3.26	80.00	89.33	27.39	42.19	88.71	2.44	81.32
VGG19_BN	BPP	89.30	98.30	1.60	91.78	2.12	86.94	91.90	2.99	86.29	91.57	2.07	84.72	91.54	2.04	86.80	82.55	0.54	70.87	86.50	72.54	24.26	N/A	N/A	N/A	14.34	100.00	0.00	59.82	17.05	53.23	88.44	3.18	83.97	91.63	95.27	4.37	10.00	0.00	11.11	88.87	5.29	82.36	90.46	0.31	75.20	88.41	87.02	11.76
VGG19_BN	TrojanNN	92.26	99.99	0.01	89.55	85.12	12.50	89.91	93.67	5.58	88.49	98.50	1.21	88.97	7.31	69.79	86.53	0.38	60.58	86.74	99.97	0.02	N/A	N/A	N/A	10.00	100.00	0.00	47.80	100.00	0.00	90.65	92.43	6.83	10.00	100.00	0.00	64.81	20.23	24.26	89.72	8.51	57.19	89.24	0.00	27.57	92.23	99.99	0.01
ViT_b_16	BadNet	95.58	91.08	8.62	95.80	76.32	23.01	95.18	43.57	53.78	26.89	10.36	24.34	95.88	77.16	22.17	95.58	91.08	8.62	96.31	79.33	20.23	N/A	N/A	N/A	10.00	0.00	11.11	N/A	N/A	N/A	95.58	91.08	8.62	94.52	88.00	11.68	10.00	0.00	11.11	N/A	N/A	N/A	27.61	13.70	21.34	N/A	N/A	N/A
ViT_b_16	Blended	96.65	99.32	0.66	96.51	98.70	1.26	93.84	31.48	26.94	25.05	15.79	21.59	96.37	99.20	0.77	93.38	97.66	2.21	96.74	99.18	0.80	N/A	N/A	N/A	97.74	99.81	0.19	N/A	N/A	N/A	96.65	99.32	0.66	95.68	99.22	0.74	10.00	0.00	11.11	N/A	N/A	N/A	25.97	27.50	17.28	N/A	N/A	N/A
ViT_b_16	LC	96.48	79.60	20.37	96.28	75.69	24.27	94.53	85.02	12.53	28.40	7.78	26.18	96.23	78.74	21.23	96.48	79.60	20.37	96.46	87.38	12.62	N/A	N/A	N/A	97.80	94.97	5.03	N/A	N/A	N/A	96.48	79.60	20.37	95.99	70.07	29.83	10.00	100.00	0.00	96.13	78.04	21.93	26.41	12.60	23.56	96.00	90.28	9.59
ViT_b_16	SIG	96.24	87.07	12.54	96.14	87.53	12.10	93.61	70.50	20.83	26.79	8.87	24.24	95.89	87.39	12.29	96.28	83.19	16.26	96.50	81.67	17.66	N/A	N/A	N/A	97.93	81.59	18.08	N/A	N/A	N/A	96.24	87.07	12.54	95.73	77.46	21.64	10.00	0.00	11.11	96.03	88.84	10.86	26.43	7.71	25.22	95.60	91.57	8.13
ViT_b_16	LF	95.33	1.23	95.17	96.01	0.39	95.96	94.01	0.40	94.23	23.94	8.08	22.51	95.85	0.48	95.72	94.18	0.67	94.24	95.97	0.90	95.89	N/A	N/A	N/A	10.00	100.00	0.00	15.58	79.03	6.53	95.33	1.23	95.17	80.56	2.46	79.06	10.00	0.00	11.11	94.95	1.54	94.66	28.17	9.74	25.82	93.28	2.91	92.99
ViT_b_16	SSBA	96.46	95.48	4.39	96.45	88.81	10.86	94.83	2.00	87.80	24.69	6.58	23.49	96.34	90.06	9.58	96.35	89.07	10.70	96.33	91.96	7.91	N/A	N/A	N/A	97.64	95.58	4.37	25.27	32.89	19.56	96.45	95.48	4.39	21.26	10.62	22.64	10.00	0.00	11.11	96.26	95.59	4.31	27.75	14.39	24.92	95.27	95.62	4.21
ViT_b_16	WaNet	91.53	47.74	49.44	94.13	1.54	92.53	94.36	0.40	93.97	78.60	3.28	77.79	91.53	47.74	49.44	82.44	8.88	75.83	95.61	18.24	79.13	N/A	N/A	N/A	97.39	32.67	65.64	N/A	N/A	N/A	91.53	47.74	49.44	91.20	65.41	32.74	10.00	0.00	11.12	91.00	49.88	47.50	85.32	1.99	83.86	90.43	30.79	64.13
ViT_b_16	InputAware	90.52	86.74	12.68	94.63	94.53	5.31	94.25	65.87	33.28	77.67	3.28	71.77	94.47	94.64	5.22	89.74	94.84	5.00	96.40	80.69	18.77	N/A	N/A	N/A	97.73	85.91	13.87	N/A	N/A	N/A	91.59	96.01	3.83	51.73	94.01	5.17	N/A	N/A	N/A	91.24	95.13	4.67	84.01	1.88	79.88	88.75	96.67	3.21
ViT_b_16	BPP	91.34	99.01	0.96	94.09	99.21	0.77	93.68	98.77	1.11	76.61	10.23	60.92	94.29	99.37	0.63	91.34	99.01	0.96	96.60	99.52	0.47	N/A	N/A	N/A	97.94	99.69	0.31	N/A	N/A	N/A	91.34	99.01	0.96	70.63	98.26	1.13	N/A	N/A	N/A	N/A	N/A	N/A	83.19	53.09	39.02	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.46	99.87	0.13	96.30	99.23	0.77	94.38	92.08	4.50	25.51	13.41	21.38	96.41	99.82	0.18	96.47	99.78	0.22	96.52	99.81	0.19	N/A	N/A	N/A	97.96	100.00	0.00	55.10	99.98	0.02	96.45	99.87	0.13	13.31	0.00	14.32	10.00	0.00	11.11	96.21	99.98	0.02	27.10	14.00	21.39	95.89	100.00	0.00
ConvNext_tiny	BadNet	91.28	92.78	6.73	89.28	20.91	72.33	89.23	4.32	85.09	84.53	34.68	58.93	91.28	92.77	6.74	89.44	18.41	75.00	89.84	91.61	7.77	N/A	N/A	N/A	89.37	81.53	17.31	72.76	6.71	70.37	91.28	92.77	6.74	76.81	1.60	75.47	39.25	4.21	39.46	90.84	92.22	7.21	88.55	38.51	56.82	90.60	92.44	7.00
ConvNext_tiny	Blended	92.25	99.44	0.52	89.31	81.63	16.74	88.45	62.86	32.72	86.46	81.70	16.22	89.33	91.29	8.02	86.99	91.87	7.54	91.74	98.31	1.53	N/A	N/A	N/A	93.26	99.56	0.41	74.03	21.38	54.12	92.25	99.44	0.52	90.24	98.58	1.31	10.00	0.00	11.11	91.83	97.78	2.11	88.67	95.47	3.97	92.09	99.20	0.77
ConvNext_tiny	LC	91.97	90.83	9.06	89.51	38.58	57.64	88.67	21.40	71.24	84.84	19.04	69.19	89.23	35.16	60.42	83.55	0.53	83.74	91.24	74.37	24.27	N/A	N/A	N/A	92.61	82.16	17.31	68.98	100.00	0.00	91.98	90.82	9.07	91.60	82.40	17.34	54.81	18.72	47.70	91.69	89.84	10.02	89.42	51.16	44.40	91.68	88.00	11.87
ConvNext_tiny	SIG	91.88	96.01	3.78	89.41	70.13	25.62	88.98	54.76	34.19	85.18	44.93	41.50	78.63	2.37	55.68	90.73	88.67	10.36	91.67	95.58	4.11	N/A	N/A	N/A	92.56	94.61	4.91	71.59	99.63	0.36	91.88	96.01	3.78	89.79	88.84	10.03	57.87	74.12	12.19	91.69	96.36	3.42	88.74	94.33	5.18	91.82	94.86	4.84
ConvNext_tiny	LF	90.21	2.07	89.89	88.92	1.04	88.82	88.67	0.96	88.58	85.43	3.40	84.49	90.21	2.06	89.89	89.52	0.50	90.23	89.28	2.46	88.93	N/A	N/A	N/A	91.22	2.17	90.72	67.76	10.04	64.89	90.21	2.06	89.89	89.47	1.97	89.28	56.51	12.70	55.89	89.86	2.47	89.44	89.63	1.03	89.66	90.29	2.07	89.87
ConvNext_tiny	SSBA	91.66	94.46	5.10	89.48	26.04	65.59	88.58	2.74	84.02	85.91	57.74	38.17	91.66	94.46	5.10	84.87	30.28	59.61	90.95	84.93	13.86	N/A	N/A	N/A	92.45	96.17	3.57	72.27	13.64	66.86	91.66	94.46	5.10	90.14	83.20	15.82	32.29	5.77	28.86	91.11	92.63	6.77	89.63	2.69	80.48	90.88	93.52	5.92
ConvNext_tiny	WaNet	87.10	56.72	39.07	88.84	2.89	86.20	88.77	0.95	87.53	88.43	5.88	83.18	87.09	56.70	39.09	79.26	7.98	73.26	90.19	39.47	55.11	N/A	N/A	N/A	92.00	53.38	43.65	77.81	2.85	74.97	87.09	56.70	39.09	86.93	76.21	21.81	17.99	25.98	16.95	86.28	60.09	35.78	88.21	7.71	80.59	86.82	56.12	39.56
ConvNext_tiny	InputAware	88.32	92.08	7.54	89.30	88.02	11.54	88.70	55.54	41.61	89.15	83.27	15.89	89.22	91.83	7.90	80.77	3.49	72.44	91.39	71.68	25.91	N/A	N/A	N/A	92.52	76.49	21.40	70.54	13.56	62.32	87.69	91.01	8.36	88.89	95.20	4.70	17.42	3.52	18.40	85.62	96.20	3.54	88.45	88.47	10.97	87.30	92.52	6.93
ConvNext_tiny	BPP	87.34	99.48	0.47	88.87	98.53	1.42	87.90	97.59	2.32	88.63	98.24	1.67	88.82	99.16	0.78	80.79	0.71	79.36	91.31	97.66	2.21	N/A	N/A	N/A	92.89	99.50	0.49	74.59	7.28	69.91	87.34	99.48	0.47	88.85	98.18	1.77	48.34	17.80	44.71	86.01	99.69	0.28	88.92	22.27	54.19	87.02	99.31	0.62
ConvNext_tiny	TrojanNN	92.33	99.99	0.01	89.35	97.37	2.44	89.23	87.30	11.11	85.71	91.56	7.84	89.45	97.98	1.99	84.03	38.83	47.46	91.52	99.98	0.02	N/A	N/A	N/A	92.88	100.00	0.00	67.76	100.00	0.00	92.33	99.99	0.01	91.55	99.96	0.04	32.28	13.41	25.72	91.64	99.99	0.01	89.82	8.57	69.28	92.15	99.99	0.01

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	91.32	95.03	4.67	89.96	1.48	89.39	91.31	57.13	41.62	89.87	2.14	88.71	89.05	1.27	89.16	84.17	0.73	84.04	88.80	86.23	13.28	N/A	N/A	N/A	83.32	0.00	89.02	89.65	1.28	89.17	90.07	77.56	21.44	29.41	4.68	27.28	82.63	5.41	80.87	89.69	1.83	89.54	89.16	1.29	89.24	91.10	94.77	4.91
PreActResNet-18	Blended	93.47	99.92	0.08	92.78	96.11	3.57	93.17	99.26	0.73	92.17	97.69	2.14	93.47	99.92	0.08	86.58	2.19	61.17	88.52	99.72	0.28	N/A	N/A	N/A	77.30	0.73	64.52	69.91	99.98	0.02	91.32	99.74	0.23	14.77	7.70	10.92	83.33	79.49	16.51	92.43	52.11	37.54	87.00	50.53	33.21	93.33	99.89	0.11
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	93.19	99.28	0.71	92.37	78.44	19.42	92.90	98.97	1.02	92.37	47.83	47.49	91.62	1.41	87.48	85.15	0.60	82.72	88.92	98.09	1.72	N/A	N/A	N/A	81.72	0.21	84.81	50.98	99.70	0.08	92.84	99.18	0.80	11.23	77.14	2.79	76.48	93.20	6.23	91.82	85.98	12.77	84.36	44.96	48.00	93.06	99.23	0.76
PreActResNet-18	SSBA	92.88	97.86	1.99	92.14	74.79	23.31	92.54	83.50	15.36	91.91	77.40	20.86	90.99	0.58	87.04	86.54	0.39	79.87	90.00	96.23	3.53	N/A	N/A	N/A	80.79	0.00	84.66	63.50	99.51	0.39	91.38	68.13	29.16	16.18	38.54	12.34	82.16	80.03	18.16	92.31	10.81	78.53	87.67	3.97	74.23	92.80	97.61	2.21
PreActResNet-18	WaNet	91.25	89.73	9.76	93.48	17.10	78.29	91.46	1.09	69.73	93.17	22.98	72.69	91.80	7.53	85.09	85.73	0.43	86.50	91.93	96.80	3.06	N/A	N/A	N/A	83.19	0.00	85.86	80.90	6.61	77.61	81.91	78.42	17.68	61.70	82.06	9.30	77.56	7.91	74.46	90.08	86.64	12.54	89.49	5.21	86.60	90.97	1.24	89.00
PreActResNet-18	InputAware	90.67	98.26	1.66	93.12	1.72	90.53	91.74	0.04	44.54	93.18	1.68	91.12	92.61	0.76	90.87	90.36	1.64	86.99	91.48	88.62	10.61	N/A	N/A	N/A	63.19	90.16	5.77	78.60	8.54	75.28	90.30	2.17	85.51	81.87	94.16	5.68	74.71	94.63	4.46	89.86	2.23	85.20	89.17	27.08	56.73	89.71	1.79	86.77
PreActResNet-18	BPP	90.69	99.78	0.21	93.25	2.54	87.00	92.70	18.39	72.20	92.81	2.46	86.22	92.68	2.84	85.18	81.78	0.24	75.37	89.29	99.73	0.26	N/A	N/A	N/A	78.55	13.77	64.93	68.65	100.00	0.00	90.40	2.18	83.97	83.11	90.87	7.40	87.02	99.17	0.78	90.56	2.39	83.84	90.99	6.24	82.34	90.20	33.10	59.48
PreActResNet-18	TrojanNN	93.42	100.00	0.00	92.42	5.99	77.34	92.47	71.07	22.97	91.88	3.73	81.59	91.76	8.22	78.00	86.87	0.20	76.24	89.75	99.97	0.03	N/A	N/A	N/A	11.07	100.00	0.00	66.23	100.00	0.00	92.98	100.00	0.00	12.03	0.00	12.97	88.71	99.47	0.53	92.17	2.50	83.37	90.37	2.91	79.10	93.33	40.72	54.96
VGG19_BN	BadNet	90.42	94.43	5.24	88.19	27.59	67.27	88.42	5.86	82.94	86.48	5.47	81.09	89.21	11.31	80.37	88.39	0.48	89.21	84.81	93.83	5.49	N/A	N/A	N/A	68.81	79.96	16.43	56.35	20.95	51.49	N/A	N/A	N/A	10.41	0.00	11.56	84.28	47.32	46.79	87.56	7.28	83.97	86.01	2.28	85.16	90.15	94.71	5.02
VGG19_BN	Blended	91.91	99.50	0.48	90.08	86.82	11.90	89.51	86.83	12.12	88.60	83.86	13.97	90.07	83.33	14.78	89.19	4.77	69.92	86.21	99.17	0.70	N/A	N/A	N/A	10.00	0.00	11.11	46.97	99.97	0.03	N/A	N/A	N/A	10.00	100.00	0.00	91.15	97.81	1.71	90.99	22.62	55.56	87.58	69.90	22.00	91.62	99.42	0.56
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	83.28	13.83	81.93	87.67	1.82	87.59	88.80	1.29	88.70	83.72	1.14	84.20	86.64	1.36	86.60	84.33	0.08	88.09	80.26	10.86	79.08	N/A	N/A	N/A	62.37	0.00	69.00	59.77	8.15	55.96	81.99	14.61	80.46	14.00	2.17	13.51	60.11	9.76	60.11	79.36	18.88	77.36	87.68	1.47	87.69	83.25	13.92	81.87
VGG19_BN	SSBA	90.85	95.11	4.44	89.26	70.22	27.08	89.10	65.76	30.80	88.33	56.64	38.19	90.85	95.11	4.44	89.81	1.34	85.26	85.54	90.61	8.16	N/A	N/A	N/A	10.00	0.00	11.11	51.21	98.81	0.81	85.82	98.56	1.33	78.27	54.40	37.53	80.31	68.83	23.01	89.62	85.40	13.13	87.56	22.26	58.92	90.75	94.74	4.76
VGG19_BN	WaNet	84.58	96.49	3.00	91.35	5.72	84.16	91.07	3.91	83.21	90.73	10.33	80.45	91.20	6.88	83.83	78.04	0.03	81.98	85.05	80.78	16.98	N/A	N/A	N/A	32.80	99.99	0.00	56.87	36.84	49.00	88.46	1.75	82.47	10.12	99.71	0.12	89.23	14.72	78.31	86.10	73.61	21.47	89.76	1.61	84.85	18.14	98.92	0.75
VGG19_BN	InputAware	88.66	94.58	5.10	91.56	13.08	79.68	91.40	3.23	82.63	91.00	14.11	78.10	89.70	97.02	2.72	86.56	0.71	83.78	86.53	83.22	15.16	N/A	N/A	N/A	10.00	100.00	0.00	54.60	36.44	43.11	87.54	2.66	83.28	91.66	98.47	1.41	89.84	81.59	17.03	88.92	3.84	83.51	88.29	69.56	25.09	89.47	2.01	84.91
VGG19_BN	BPP	89.32	99.79	0.18	91.39	1.91	87.29	91.45	2.79	86.00	91.09	2.49	86.57	91.50	1.92	87.38	83.63	0.03	85.46	86.62	93.22	5.89	N/A	N/A	N/A	10.00	100.00	0.00	54.07	99.96	0.03	87.37	0.80	83.94	11.45	0.00	11.49	80.10	99.90	0.10	88.41	1.34	85.50	88.69	1.72	84.27	89.17	99.81	0.16
VGG19_BN	TrojanNN	91.57	100.00	0.00	89.60	7.17	67.89	89.88	63.42	27.93	87.29	2.30	72.61	89.28	7.76	76.86	89.39	0.00	34.31	87.07	99.97	0.03	N/A	N/A	N/A	10.00	100.00	0.00	46.60	100.00	0.00	90.56	99.70	0.29	10.00	0.00	11.11	88.52	99.37	0.04	89.57	7.33	74.39	88.63	8.23	45.86	91.37	100.00	0.00
ViT_b_16	BadNet	94.78	93.77	6.02	95.19	75.51	23.64	94.77	52.33	45.78	26.34	9.66	23.83	95.30	69.40	29.34	94.78	93.77	6.02	95.27	86.30	13.26	N/A	N/A	N/A	10.00	0.00	11.11	N/A	N/A	N/A	94.78	93.77	6.02	18.45	66.89	10.18	10.00	0.00	11.11	N/A	N/A	N/A	26.39	14.10	21.47	N/A	N/A	N/A
ViT_b_16	Blended	96.54	99.68	0.31	96.28	99.37	0.61	93.52	71.77	16.97	26.23	10.62	23.30	96.01	99.59	0.40	96.40	99.61	0.38	96.45	99.53	0.46	N/A	N/A	N/A	97.95	99.94	0.06	55.99	98.74	0.98	96.54	99.68	0.31	96.20	99.67	0.31	10.00	100.00	0.00	N/A	N/A	N/A	27.09	19.31	20.93	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	93.36	3.37	93.00	95.67	0.58	95.67	94.43	0.48	94.51	25.53	11.61	22.51	95.34	0.51	95.34	91.13	0.84	91.69	94.25	2.51	93.96	N/A	N/A	N/A	69.39	32.82	66.04	13.02	90.92	3.73	93.36	3.37	93.00	16.00	67.37	9.07	10.00	0.00	11.11	93.23	3.28	92.89	27.71	7.42	26.31	90.89	5.28	90.43
ViT_b_16	SSBA	96.17	97.81	2.13	95.99	93.57	6.24	95.22	25.49	69.24	25.54	7.92	23.81	96.13	93.80	6.01	96.06	94.01	5.80	96.28	96.60	3.27	N/A	N/A	N/A	97.79	98.31	1.64	N/A	N/A	N/A	96.17	97.81	2.13	22.75	41.18	17.13	10.00	0.00	11.11	95.97	98.10	1.82	30.61	5.96	29.74	94.67	97.63	2.27
ViT_b_16	WaNet	89.12	80.95	17.59	93.95	6.77	87.26	94.00	0.42	92.73	80.23	5.59	78.91	94.20	8.65	85.58	89.12	80.95	17.59	94.81	52.68	45.82	N/A	N/A	N/A	11.67	99.99	0.01	N/A	N/A	N/A	89.12	80.95	17.59	85.21	71.82	23.45	10.00	0.00	11.13	88.85	79.05	19.31	83.02	1.31	81.45	87.46	77.32	20.64
ViT_b_16	InputAware	91.65	92.30	7.06	94.38	82.54	16.33	93.95	19.81	76.37	79.02	5.43	71.96	91.55	79.34	19.50	91.16	75.76	23.18	95.87	64.40	34.58	N/A	N/A	N/A	21.28	99.30	0.70	15.97	99.52	0.13	91.55	79.34	19.50	93.84	97.63	2.29	N/A	N/A	N/A	90.94	79.03	19.64	81.93	2.28	78.29	89.90	80.74	18.07
ViT_b_16	BPP	91.38	99.37	0.58	93.83	99.46	0.51	93.08	99.27	0.63	80.62	9.24	65.53	91.38	99.37	0.58	91.38	99.37	0.58	96.63	99.80	0.19	N/A	N/A	N/A	97.86	99.90	0.10	N/A	N/A	N/A	91.38	99.37	0.58	93.48	99.00	0.96	N/A	N/A	N/A	N/A	N/A	N/A	80.56	43.24	41.78	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.46	99.98	0.02	96.24	99.73	0.27	94.04	94.78	2.76	23.85	10.09	22.02	96.13	99.91	0.09	96.35	99.96	0.04	96.48	99.99	0.01	N/A	N/A	N/A	97.85	100.00	0.00	N/A	N/A	N/A	96.46	99.98	0.02	19.54	99.77	0.07	10.00	0.00	11.11	96.12	99.99	0.01	25.83	13.01	20.48	95.53	100.00	0.00
ConvNext_tiny	BadNet	90.49	94.33	5.31	88.84	13.96	78.02	89.04	7.43	82.93	86.54	37.33	57.06	88.42	24.96	68.08	86.75	25.74	67.32	89.07	94.83	4.70	N/A	N/A	N/A	90.92	93.57	6.00	77.86	4.42	75.95	90.48	94.34	5.30	86.00	4.28	84.06	59.32	5.86	60.46	89.55	92.63	6.77	88.10	56.38	40.79	89.96	94.20	5.40
ConvNext_tiny	Blended	92.31	99.80	0.19	89.14	86.64	12.22	88.97	83.62	15.26	85.47	72.64	21.54	89.35	91.71	7.73	85.19	82.69	15.36	91.70	99.39	0.56	N/A	N/A	N/A	93.04	99.88	0.10	65.97	99.77	0.15	92.31	99.80	0.19	91.73	99.71	0.27	63.82	87.12	9.77	91.76	99.08	0.86	89.00	79.77	17.12	92.02	99.63	0.33
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	87.94	4.28	87.28	88.71	1.06	88.71	88.92	0.83	89.06	84.95	2.80	84.17	87.94	4.28	87.28	88.49	1.54	88.51	87.24	5.19	86.37	N/A	N/A	N/A	88.94	3.87	88.62	71.24	7.43	69.14	87.94	4.28	87.28	69.26	11.64	67.27	23.60	14.62	24.96	86.39	5.44	85.66	88.44	1.21	88.37	87.60	4.58	86.89
ConvNext_tiny	SSBA	91.59	97.63	2.17	89.14	33.83	59.34	89.00	13.53	75.66	87.45	38.69	53.73	91.59	97.63	2.17	85.94	82.48	16.41	90.89	95.53	4.11	N/A	N/A	N/A	92.06	99.20	0.73	56.70	74.90	23.44	91.59	97.63	2.17	79.90	67.18	27.21	25.27	17.39	20.81	91.53	97.21	2.49	87.65	35.42	55.19	90.96	96.83	2.88
ConvNext_tiny	WaNet	86.56	75.68	22.35	89.14	8.10	80.60	88.03	1.48	85.77	88.48	11.61	77.53	88.30	5.00	83.44	79.44	4.72	76.46	89.70	68.65	29.02	N/A	N/A	N/A	91.35	80.34	18.42	78.55	6.80	75.69	86.56	75.68	22.35	86.39	88.29	10.74	53.76	10.22	52.84	86.29	75.74	22.16	88.33	28.01	63.40	86.58	71.54	26.06
ConvNext_tiny	InputAware	87.70	93.08	6.53	89.49	90.14	9.48	89.17	52.44	44.92	89.32	95.82	3.94	87.29	97.62	2.21	81.92	6.37	71.42	90.99	88.61	10.50	N/A	N/A	N/A	91.98	92.29	7.19	76.96	22.32	64.67	87.29	97.62	2.21	58.00	98.96	0.92	51.64	44.68	33.63	87.03	96.21	3.53	88.82	85.72	13.44	87.17	97.62	2.22
ConvNext_tiny	BPP	86.79	99.48	0.50	88.28	99.49	0.49	87.59	97.72	2.21	87.97	99.56	0.44	88.44	99.44	0.53	85.44	5.72	79.02	91.15	99.41	0.57	N/A	N/A	N/A	92.62	99.84	0.14	69.90	12.62	64.94	86.79	99.48	0.50	72.10	99.32	0.44	54.12	14.62	49.48	86.18	99.49	0.50	88.11	27.10	46.20	86.59	99.53	0.44
ConvNext_tiny	TrojanNN	92.04	99.99	0.01	89.31	98.02	1.89	87.97	71.98	22.11	86.06	96.18	3.20	89.13	99.64	0.34	82.93	28.89	53.42	91.00	100.00	0.00	N/A	N/A	N/A	93.20	99.99	0.01	64.06	100.00	0.00	92.04	99.99	0.01	90.07	99.98	0.02	24.08	13.27	18.61	91.59	99.99	0.01	89.97	70.39	21.31	91.76	99.99	0.01

CIFAR-10 Leaderboard