BackdoorBench

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	70.80	0.20	70.44	70.44	0.17	70.28	68.88	0.14	68.57	70.66	0.17	70.31	70.80	0.20	70.43	69.44	0.10	68.76	61.22	0.20	60.60	N/A	N/A	N/A	58.68	0.38	57.31	61.94	0.38	61.66	68.50	0.16	68.24	57.36	0.42	56.48	49.01	0.05	48.63	68.36	0.14	68.23	64.05	0.19	63.73	70.45	0.30	70.00
PreActResNet-18	Blended	70.75	52.75	24.27	70.14	47.08	26.02	69.08	42.75	25.64	70.40	48.15	25.85	70.75	52.76	24.27	67.15	40.93	26.12	60.47	23.64	30.09	N/A	N/A	N/A	61.00	46.00	21.26	60.86	0.10	46.16	64.19	29.42	27.36	57.29	23.08	24.84	49.88	25.14	20.81	66.11	44.46	24.16	62.34	22.64	23.88	70.24	53.22	23.97
PreActResNet-18	LC	70.82	4.89	59.51	70.32	4.90	58.61	63.93	2.52	55.56	70.58	3.65	59.98	70.82	4.89	59.52	68.84	3.11	58.87	61.42	0.60	58.19	N/A	N/A	N/A	55.06	1.58	48.51	60.80	91.87	7.18	67.50	3.12	57.40	56.37	4.71	41.59	34.39	1.98	23.41	66.23	0.32	62.00	65.20	5.24	54.87	70.33	6.72	56.59
PreActResNet-18	SIG	70.79	11.19	27.03	69.93	10.19	26.83	68.69	6.49	24.86	70.14	10.07	26.68	67.53	12.03	24.51	67.55	3.87	24.06	60.74	14.58	17.28	N/A	N/A	N/A	60.15	32.05	14.51	61.54	57.53	26.55	68.87	8.39	23.31	57.38	5.03	22.25	49.05	51.66	7.15	68.15	8.29	27.41	64.14	3.85	23.62	70.08	9.66	26.43
PreActResNet-18	LF	70.82	0.84	65.70	70.22	0.59	65.57	69.01	0.52	64.15	70.28	0.61	65.83	70.82	0.84	65.69	68.68	0.30	63.53	60.47	1.22	54.31	N/A	N/A	N/A	61.92	1.04	55.20	61.77	0.46	58.92	60.27	1.22	53.25	56.29	0.44	49.87	32.51	0.55	32.22	66.71	0.57	62.35	63.38	0.10	58.45	69.89	0.62	65.64
PreActResNet-18	SSBA	70.31	0.40	63.31	69.84	0.30	63.15	68.80	0.22	61.62	70.07	0.32	63.07	70.31	0.40	63.31	65.50	0.08	56.99	60.62	0.66	53.27	N/A	N/A	N/A	60.64	0.51	52.90	60.72	0.18	55.94	68.63	0.25	60.67	55.86	0.83	47.91	48.42	0.03	38.62	68.32	0.20	60.82	62.80	0.36	54.24	70.19	0.40	63.56
PreActResNet-18	WaNet	65.02	0.71	63.34	69.69	0.28	67.27	65.35	0.18	63.36	69.46	0.37	67.29	65.02	0.71	63.34	60.39	0.39	59.02	60.98	0.58	56.84	N/A	N/A	N/A	56.40	0.68	50.25	61.56	0.21	58.66	63.32	0.80	60.72	53.46	1.87	51.00	50.17	0.02	49.77	63.20	0.49	61.54	65.09	0.33	63.09	64.03	0.85	62.00
PreActResNet-18	InputAware	64.18	73.11	18.49	69.95	72.44	20.34	67.14	68.06	20.52	69.63	74.14	19.13	66.84	0.14	62.96	63.11	52.81	23.46	60.55	24.91	34.72	N/A	N/A	N/A	61.71	24.38	32.94	60.51	0.21	56.20	59.61	35.12	29.37	53.79	50.21	21.93	49.90	51.83	15.74	58.89	37.67	27.69	66.46	36.80	31.51	58.39	39.61	28.00
PreActResNet-18	BPP	64.17	33.02	41.16	69.48	29.00	45.99	67.97	10.01	49.79	69.42	26.65	46.85	69.21	26.61	46.98	62.36	16.46	44.86	60.48	0.29	53.96	N/A	N/A	N/A	62.08	0.55	55.25	59.31	0.12	51.60	62.84	21.63	46.01	55.25	31.94	35.07	50.07	0.11	41.30	63.81	20.02	46.25	65.94	0.35	54.07	60.50	3.98	50.52
PreActResNet-18	TrojanNN	71.13	92.55	5.51	70.27	90.36	6.61	63.42	68.92	12.41	70.36	92.07	5.48	70.29	91.51	5.93	66.40	84.85	9.36	60.95	82.41	9.67	N/A	N/A	N/A	37.09	20.14	14.95	60.95	0.41	54.54	69.63	83.60	10.55	56.17	59.80	9.38	49.33	96.63	2.10	67.15	71.40	14.45	63.03	5.76	34.00	69.97	92.72	5.19
VGG19_BN	BadNet	65.52	0.33	64.78	63.57	0.14	62.76	64.93	0.25	64.26	63.61	0.16	62.83	60.67	0.27	60.02	64.85	0.11	63.98	51.99	0.30	50.77	N/A	N/A	N/A	43.15	0.26	42.05	42.33	0.32	41.91	N/A	N/A	N/A	65.26	0.32	64.52	9.66	0.95	9.03	62.31	0.28	62.05	60.88	0.29	60.33	64.03	0.28	63.19
VGG19_BN	Blended	65.76	38.03	26.61	62.77	31.80	27.32	65.27	30.00	28.33	64.70	36.69	26.31	65.76	38.03	26.61	59.60	13.55	26.06	52.33	2.63	31.70	N/A	N/A	N/A	34.37	23.35	12.55	38.59	0.00	32.80	N/A	N/A	N/A	65.42	37.56	26.76	36.98	0.00	14.51	61.64	40.58	21.64	59.56	19.88	28.62	64.81	41.18	24.25
VGG19_BN	LC	65.67	18.23	39.57	63.98	15.23	39.95	64.96	19.65	38.19	64.19	16.14	39.66	62.24	15.38	38.10	65.68	15.20	40.78	53.54	1.34	43.95	N/A	N/A	N/A	36.53	7.41	20.44	43.27	88.09	7.64	59.99	2.98	50.71	65.78	16.60	40.00	16.80	0.01	14.64	63.26	10.41	42.51	60.61	30.59	28.85	62.45	13.06	38.39
VGG19_BN	SIG	65.27	11.57	20.20	63.38	12.86	20.09	64.64	13.39	19.86	64.34	10.35	21.75	62.33	7.48	20.12	65.31	11.43	20.43	52.69	6.90	15.58	N/A	N/A	N/A	41.44	6.87	16.44	41.64	61.20	12.06	59.19	14.54	10.22	1.17	0.00	1.17	27.17	0.24	5.71	63.31	6.95	24.64	59.92	10.20	17.23	63.75	8.59	21.16
VGG19_BN	LF	65.45	0.21	65.29	62.99	0.16	62.91	64.62	0.15	64.44	64.13	0.21	63.97	65.45	0.21	65.29	64.87	0.13	64.71	52.12	0.17	51.87	N/A	N/A	N/A	37.41	0.71	37.26	38.48	0.67	38.09	62.75	0.25	62.70	65.34	0.19	65.16	33.92	0.19	33.57	62.38	0.19	62.47	60.26	0.16	60.01	62.85	0.19	62.87
VGG19_BN	SSBA	65.51	0.56	58.70	64.56	0.27	57.69	65.50	0.12	58.52	65.14	0.47	58.56	65.51	0.56	58.70	65.04	0.21	58.64	51.80	0.37	46.24	N/A	N/A	N/A	28.49	0.26	26.29	43.69	0.32	40.18	61.57	0.62	56.97	65.45	0.49	58.93	27.86	0.05	24.13	63.20	0.69	56.52	60.45	0.02	52.15	62.63	0.83	55.53
VGG19_BN	WaNet	59.39	0.34	56.12	65.07	0.23	62.01	65.41	0.27	62.54	64.69	0.29	61.95	59.39	0.34	56.12	59.39	0.34	56.12	52.62	0.45	48.94	N/A	N/A	N/A	22.82	0.10	21.57	40.39	0.72	38.15	48.66	1.00	42.64	1.00	100.00	0.00	26.25	2.31	26.17	57.91	0.31	54.30	62.16	0.53	59.49	59.02	0.30	55.94
VGG19_BN	InputAware	58.68	70.81	11.13	63.88	56.49	19.53	64.24	55.99	20.37	63.65	60.34	17.65	63.77	63.05	17.17	58.91	34.17	24.64	51.83	1.02	35.33	N/A	N/A	N/A	43.94	16.96	21.46	42.17	0.06	32.08	58.49	49.78	19.99	62.57	57.72	19.22	31.55	0.00	19.87	55.24	65.39	12.67	61.47	52.99	16.74	58.29	51.26	19.67
VGG19_BN	BPP	60.46	0.13	53.80	65.68	0.06	57.32	65.28	0.15	57.01	64.96	0.07	55.98	60.46	0.13	53.80	60.47	0.11	53.79	51.47	0.36	48.11	N/A	N/A	N/A	31.20	3.03	26.35	43.58	0.49	40.74	58.44	0.15	52.54	1.00	0.00	1.01	25.98	0.09	23.72	56.81	0.09	50.91	61.45	0.03	53.71	59.60	0.09	52.89
VGG19_BN	TrojanNN	65.97	93.69	3.19	63.86	92.07	3.70	65.40	87.99	4.77	64.75	92.06	3.73	62.46	83.24	6.36	60.47	91.91	4.37	52.36	52.93	13.73	N/A	N/A	N/A	9.72	0.56	5.77	43.87	97.66	1.57	60.47	48.12	20.72	65.88	94.52	2.77	31.03	86.49	1.62	63.18	90.13	4.28	58.86	88.17	2.00	63.99	93.91	2.99
ViT_b_16	BadNet	84.66	0.08	84.53	84.00	0.08	83.86	73.06	0.24	73.11	6.77	0.00	6.75	83.92	0.03	83.90	84.61	0.05	84.53	84.55	0.05	84.42	N/A	N/A	N/A	87.90	15.27	76.78	N/A	N/A	N/A	84.65	0.08	84.53	83.76	0.04	83.66	1.00	0.00	1.01	N/A	N/A	N/A	7.34	4.21	7.06	N/A	N/A	N/A
ViT_b_16	Blended	84.47	63.65	27.33	84.23	59.75	29.14	73.42	6.74	32.78	7.54	0.00	6.31	84.46	63.64	27.33	83.83	61.64	29.06	84.43	57.02	32.08	N/A	N/A	N/A	88.01	76.96	19.24	47.24	0.22	38.71	84.46	63.64	27.33	84.36	63.45	27.22	1.00	0.00	1.01	N/A	N/A	N/A	7.49	3.32	6.17	N/A	N/A	N/A
ViT_b_16	LC	84.51	47.44	49.76	84.11	52.35	45.24	74.07	82.22	10.04	5.81	0.00	6.04	83.98	53.60	44.09	84.51	47.44	49.76	84.66	4.25	79.88	N/A	N/A	N/A	87.91	41.59	54.82	N/A	N/A	N/A	84.51	47.44	49.76	83.94	50.22	47.32	1.00	0.00	1.01	83.68	50.69	46.55	7.72	2.56	7.68	83.07	52.52	44.89
ViT_b_16	SIG	84.55	3.32	56.79	84.24	3.64	55.28	73.75	1.48	41.14	6.57	0.00	6.51	84.55	3.32	56.79	84.32	2.96	56.31	84.43	3.87	59.22	N/A	N/A	N/A	88.21	3.80	59.11	N/A	N/A	N/A	84.55	3.32	56.79	84.38	3.38	56.34	1.00	0.00	1.01	84.04	3.36	55.13	7.51	3.14	7.07	83.56	3.52	52.95
ViT_b_16	LF	84.63	0.07	84.54	84.01	0.04	83.92	72.11	0.20	71.90	5.45	0.00	5.51	84.63	0.07	84.54	84.59	0.06	84.49	84.47	0.06	84.37	N/A	N/A	N/A	87.76	0.09	87.70	N/A	N/A	N/A	84.63	0.07	84.54	81.16	0.09	81.06	1.00	0.00	1.01	84.20	0.05	84.13	7.60	4.05	7.38	83.62	0.14	83.54
ViT_b_16	SSBA	84.28	0.82	78.40	83.96	0.72	77.92	74.15	0.29	65.03	6.84	0.00	6.83	84.28	0.82	78.40	84.23	0.78	78.23	84.50	0.47	78.33	N/A	N/A	N/A	87.90	0.54	82.71	47.59	0.14	42.50	84.28	0.82	78.40	84.05	0.77	77.85	1.00	0.00	1.01	84.08	0.54	78.10	7.57	4.75	7.15	83.13	0.70	76.75
ViT_b_16	WaNet	71.90	2.86	67.11	78.04	0.27	75.50	76.37	0.07	73.92	56.62	0.15	53.74	71.90	2.86	67.11	71.37	1.73	67.11	83.93	0.49	81.15	N/A	N/A	N/A	88.18	0.25	85.80	11.35	2.99	11.07	71.90	2.86	67.11	2.89	0.00	2.78	1.00	0.00	1.00	71.40	2.93	66.63	66.90	0.75	63.06	17.66	35.98	14.30
ViT_b_16	InputAware	75.07	33.01	49.81	80.22	35.23	53.34	75.68	7.35	58.59	53.20	0.41	41.19	80.13	22.91	60.55	76.29	47.44	41.21	84.28	50.54	44.79	N/A	N/A	N/A	88.09	53.18	43.40	44.23	0.23	27.56	76.29	47.44	41.21	41.88	45.85	23.90	N/A	N/A	N/A	75.44	48.82	39.84	66.68	3.04	51.33	74.58	52.89	36.36
ViT_b_16	BPP	71.57	53.09	32.94	77.92	63.96	28.89	75.71	46.90	38.93	57.45	0.89	39.11	78.01	64.24	28.94	71.57	53.09	32.94	84.00	18.35	65.59	N/A	N/A	N/A	87.78	29.35	60.82	N/A	N/A	N/A	71.57	53.09	32.94	68.51	52.86	30.65	N/A	N/A	N/A	N/A	N/A	N/A	61.96	23.70	37.78	N/A	N/A	N/A
ViT_b_16	TrojanNN	84.41	88.13	11.49	83.83	85.29	14.01	73.89	68.13	10.80	6.43	0.00	5.99	83.84	88.52	11.12	84.49	88.05	11.57	84.33	75.49	23.23	N/A	N/A	N/A	87.88	96.80	3.11	N/A	N/A	N/A	84.40	88.13	11.49	84.44	87.91	11.70	1.00	0.00	1.01	84.10	87.97	11.65	7.91	2.61	7.14	83.43	90.12	9.55
ConvNext_tiny	BadNet	73.27	0.13	72.52	69.22	0.19	68.70	65.72	0.26	65.05	65.85	0.55	65.23	68.99	0.18	68.49	73.27	0.13	72.52	71.30	0.12	71.13	N/A	N/A	N/A	75.40	0.09	74.92	48.93	0.28	48.44	N/A	N/A	N/A	55.34	0.37	54.69	15.65	0.02	15.48	72.72	0.14	72.13	70.29	0.17	69.61	72.98	0.17	72.41
ConvNext_tiny	Blended	73.18	46.67	35.11	68.91	25.75	41.98	64.40	2.90	40.56	64.56	31.95	35.71	31.46	1.35	20.05	69.40	44.27	33.11	71.68	18.51	40.61	N/A	N/A	N/A	75.32	58.39	26.57	49.56	0.14	41.72	N/A	N/A	N/A	65.63	39.89	34.51	5.11	0.21	4.75	72.61	43.23	36.25	70.19	41.18	35.41	72.94	43.17	36.79
ConvNext_tiny	LC	73.44	1.71	69.67	69.46	0.91	66.10	67.05	1.25	63.72	64.64	1.43	61.00	36.49	0.40	33.98	71.28	0.19	69.95	71.39	0.31	68.66	N/A	N/A	N/A	75.49	0.87	71.59	49.67	3.51	46.38	73.44	1.71	69.68	50.04	4.27	46.03	15.55	2.85	14.16	72.34	1.46	68.31	69.83	0.59	66.51	73.13	1.34	69.66
ConvNext_tiny	SIG	73.25	15.41	35.25	68.49	6.66	33.09	66.98	2.44	33.17	64.79	3.17	32.43	48.05	1.54	17.25	73.28	15.32	35.26	71.51	3.74	35.01	N/A	N/A	N/A	75.48	13.72	36.97	48.63	24.23	22.59	73.27	15.41	35.24	60.96	7.56	30.53	22.83	1.18	5.82	72.68	14.09	33.08	70.43	11.84	29.09	72.89	10.19	38.52
ConvNext_tiny	LF	73.39	0.13	73.23	69.34	0.17	69.16	67.53	0.20	67.32	64.28	0.16	64.08	69.23	0.11	69.08	72.76	0.11	72.59	71.12	0.13	70.99	N/A	N/A	N/A	75.02	0.10	74.89	49.32	0.46	49.04	73.39	0.13	73.23	60.85	0.32	60.57	1.76	0.00	1.78	72.46	0.14	72.29	69.55	0.11	69.40	73.26	0.16	73.11
ConvNext_tiny	SSBA	73.48	0.48	68.28	69.31	0.30	63.75	66.53	0.28	61.78	64.33	0.20	60.12	69.06	0.31	63.37	69.81	0.44	63.92	71.45	0.25	65.52	N/A	N/A	N/A	75.21	0.62	69.53	49.23	0.10	44.79	73.47	0.48	68.29	57.89	0.42	52.19	6.39	0.98	5.65	72.77	0.42	67.56	69.57	0.41	64.40	73.12	0.62	67.55
ConvNext_tiny	WaNet	62.29	2.87	57.44	66.24	0.48	63.06	63.19	0.30	59.63	65.93	0.53	61.83	65.42	0.26	62.11	56.15	2.53	52.10	71.55	0.40	66.89	N/A	N/A	N/A	75.05	0.54	70.52	51.08	0.33	49.15	62.29	2.87	57.45	49.22	0.74	45.83	22.12	0.22	22.73	60.86	3.71	55.95	63.83	0.65	59.94	62.14	2.87	57.60
ConvNext_tiny	InputAware	63.77	31.88	39.31	68.35	19.54	45.72	66.54	4.52	45.47	68.19	24.00	43.61	67.70	0.03	45.37	61.22	8.28	44.49	71.60	18.68	46.55	N/A	N/A	N/A	75.52	23.73	48.46	49.27	0.28	41.78	65.94	26.19	42.74	53.60	16.17	34.74	22.35	0.06	19.34	65.09	22.01	43.47	66.91	0.12	50.75	65.06	27.11	41.87
ConvNext_tiny	BPP	62.39	5.18	56.63	66.73	1.18	61.34	63.98	0.36	58.67	66.16	1.21	60.94	66.32	0.09	60.23	62.39	5.18	56.63	71.25	0.27	65.83	N/A	N/A	N/A	75.03	0.65	69.75	52.30	0.14	49.27	62.39	5.18	56.63	49.77	1.28	45.29	22.69	0.27	21.44	61.57	4.37	55.90	64.37	0.85	59.96	61.82	5.46	55.84
ConvNext_tiny	TrojanNN	73.53	94.86	4.53	68.93	76.72	17.61	66.88	41.30	28.72	65.23	41.44	33.72	55.11	0.15	36.63	67.50	42.55	32.75	71.42	86.44	9.09	N/A	N/A	N/A	75.37	94.73	4.16	51.35	0.10	36.46	73.52	94.86	4.53	51.27	76.43	14.80	21.59	0.07	16.87	72.72	94.91	4.51	70.25	76.72	17.21	72.90	94.24	5.01

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	69.77	22.21	58.20	69.23	10.69	63.83	68.00	2.53	65.29	69.28	11.41	63.26	69.77	22.21	58.21	65.15	0.29	64.09	61.19	1.42	60.23	N/A	N/A	N/A	52.21	0.62	50.22	62.21	0.23	61.80	62.90	17.31	55.55	56.89	21.03	47.38	48.82	0.08	48.20	65.43	4.70	63.69	64.70	0.97	63.29	69.64	21.85	58.32
PreActResNet-18	Blended	70.95	85.72	9.07	70.12	81.55	11.04	69.14	71.98	14.36	70.52	82.25	10.84	70.95	85.72	9.07	64.02	70.15	14.24	60.66	74.08	13.19	N/A	N/A	N/A	60.84	0.94	30.01	61.56	1.19	43.29	64.30	78.80	11.07	56.68	48.09	16.29	49.52	66.60	12.99	68.11	78.77	10.85	65.07	77.03	10.54	70.53	87.87	7.93
PreActResNet-18	LC	70.48	68.94	23.49	70.21	71.24	21.81	63.50	19.24	42.70	70.14	66.12	24.75	70.16	71.51	21.35	66.40	61.11	26.13	61.36	6.62	52.85	N/A	N/A	N/A	61.99	24.21	41.23	60.81	80.72	16.34	64.46	13.45	50.67	56.88	82.96	9.81	32.46	89.68	4.39	62.07	0.03	58.58	63.92	9.87	48.77	70.30	58.96	29.33
PreActResNet-18	SIG	70.76	46.03	17.18	70.10	34.41	19.02	69.16	44.41	15.50	69.94	39.04	17.68	70.76	46.02	17.19	65.30	19.06	22.11	60.13	25.57	12.94	N/A	N/A	N/A	63.07	5.69	24.37	60.80	83.53	12.96	68.79	49.82	15.38	57.22	16.70	9.27	49.06	68.93	5.63	66.78	30.41	17.41	62.88	37.05	15.29	70.48	48.24	16.76
PreActResNet-18	LF	70.78	17.08	56.58	70.22	8.39	60.68	68.57	5.35	59.04	70.30	8.37	60.66	65.75	2.94	57.95	65.58	2.90	57.65	60.03	18.60	44.22	N/A	N/A	N/A	63.80	7.77	54.12	60.71	0.40	58.98	70.66	11.92	58.74	57.28	13.12	45.13	31.61	0.32	30.44	68.27	15.41	55.06	64.83	5.41	54.59	70.71	15.14	57.17
PreActResNet-18	SSBA	70.41	15.53	54.58	69.90	9.76	56.89	68.80	4.40	57.01	70.12	12.03	56.14	65.78	0.10	59.46	66.12	2.21	56.16	60.90	5.53	50.93	N/A	N/A	N/A	60.64	1.00	52.30	60.90	0.15	55.66	68.57	20.35	49.58	55.93	11.22	42.48	48.79	1.77	38.59	67.39	19.40	49.33	64.19	0.78	56.19	70.31	14.65	54.69
PreActResNet-18	WaNet	64.59	10.39	59.37	69.19	6.26	64.20	65.59	3.38	61.40	69.17	7.71	63.34	67.70	4.35	63.58	59.96	0.33	59.11	60.59	2.42	55.96	N/A	N/A	N/A	52.60	3.60	43.14	61.11	0.24	58.41	61.36	36.61	43.99	54.07	38.17	38.83	48.38	0.13	48.29	59.39	7.68	56.34	66.31	8.26	60.73	62.08	11.09	57.55
PreActResNet-18	InputAware	64.74	73.59	20.62	69.85	64.72	28.12	66.44	18.18	44.39	69.55	66.63	26.45	64.73	73.59	20.62	59.65	21.24	43.38	60.90	62.23	20.67	N/A	N/A	N/A	61.80	52.81	25.60	62.41	0.26	59.67	61.32	2.57	50.15	55.57	68.04	19.25	50.21	74.81	14.18	60.63	2.15	48.43	64.99	33.12	38.78	61.32	3.63	48.78
PreActResNet-18	BPP	63.81	97.90	1.60	69.72	96.22	3.09	68.90	94.62	4.31	69.61	95.17	4.06	69.40	94.67	4.43	63.93	0.01	11.63	59.20	10.70	46.24	N/A	N/A	N/A	60.04	16.79	43.08	61.28	0.30	53.69	61.59	0.30	55.87	54.41	94.85	3.06	46.58	66.57	16.27	61.86	0.91	35.13	64.71	0.14	56.05	61.97	0.01	12.05
PreActResNet-18	TrojanNN	70.64	98.68	1.13	70.37	98.22	1.42	63.06	77.39	11.72	70.38	98.61	1.19	70.27	98.10	1.56	66.32	95.66	2.60	60.96	97.27	1.78	N/A	N/A	N/A	30.37	99.97	0.03	60.59	0.51	55.56	69.21	95.81	3.18	57.16	94.06	2.67	48.81	98.55	1.09	68.58	91.81	5.89	66.34	0.06	42.90	70.00	98.44	1.33
VGG19_BN	BadNet	65.51	10.08	58.68	63.58	1.41	60.89	65.06	1.73	61.65	63.86	2.76	60.53	61.68	3.87	57.99	60.68	3.23	56.47	51.48	0.99	49.83	N/A	N/A	N/A	N/A	N/A	N/A	44.07	2.99	43.38	N/A	N/A	N/A	65.36	10.31	58.62	22.50	0.00	22.46	61.20	7.61	56.87	60.73	0.85	58.02	63.93	10.19	56.85
VGG19_BN	Blended	65.87	80.06	9.81	63.74	72.45	13.00	65.32	75.22	11.27	64.20	75.69	10.73	62.00	66.03	14.61	65.14	77.96	10.71	53.28	54.13	15.77	N/A	N/A	N/A	N/A	N/A	N/A	44.22	3.90	34.34	N/A	N/A	N/A	65.77	78.57	10.44	27.93	84.91	2.03	62.38	82.96	6.74	61.01	67.43	12.58	65.35	80.75	9.30
VGG19_BN	LC	65.74	79.78	8.75	63.49	88.52	4.85	65.27	76.46	9.59	62.98	77.83	9.60	61.62	0.28	56.10	64.00	69.31	10.11	52.85	73.95	5.80	N/A	N/A	N/A	40.09	0.00	29.94	43.68	92.25	3.91	54.57	0.96	46.70	65.72	76.96	9.58	19.03	0.00	11.18	61.66	13.47	34.45	59.91	82.03	6.22	63.02	83.25	6.44
VGG19_BN	SIG	65.49	29.93	17.47	63.36	27.02	17.21	65.14	33.32	15.77	63.09	33.07	16.55	61.00	28.83	12.53	64.19	19.37	17.61	51.78	37.00	10.35	N/A	N/A	N/A	43.09	0.05	16.25	41.40	78.24	5.99	59.65	47.42	6.43	65.55	30.22	17.51	36.10	42.48	4.57	63.85	26.24	18.41	60.53	23.99	17.12	61.71	21.03	15.35
VGG19_BN	LF	65.11	0.44	64.98	62.58	0.20	62.47	64.17	0.17	64.01	63.59	0.15	63.43	62.13	0.13	61.97	64.51	0.06	64.43	52.50	0.47	52.22	N/A	N/A	N/A	36.68	3.24	36.14	39.39	0.28	39.10	57.03	0.63	56.79	65.11	0.51	64.97	25.08	0.22	24.82	63.16	0.27	63.07	58.87	0.12	58.71	62.58	0.35	62.64
VGG19_BN	SSBA	64.96	4.01	55.63	62.85	1.10	55.22	64.16	0.81	56.44	62.91	2.05	54.15	64.96	4.01	55.64	58.79	0.75	52.07	51.95	2.19	45.81	N/A	N/A	N/A	40.59	4.52	31.60	42.20	0.94	39.18	60.59	2.81	54.11	64.75	4.40	55.41	26.21	1.28	22.53	62.44	5.43	51.98	58.87	0.18	49.53	61.90	3.20	53.57
VGG19_BN	WaNet	62.22	0.41	57.80	65.99	0.30	61.19	66.06	0.38	61.30	64.57	0.36	61.13	62.22	0.41	57.79	57.31	0.09	55.32	52.30	1.64	48.16	N/A	N/A	N/A	43.53	1.90	39.51	38.83	1.72	36.78	60.58	0.46	55.46	63.18	0.29	58.64	24.54	0.00	24.55	60.94	0.16	57.02	62.84	0.41	58.04	61.98	0.39	57.36
VGG19_BN	InputAware	58.30	95.77	2.74	64.64	75.67	15.91	64.47	69.63	19.19	64.14	80.00	13.22	64.28	76.38	15.54	56.05	6.02	43.32	52.61	35.59	25.55	N/A	N/A	N/A	45.36	42.56	16.71	40.96	17.77	31.31	59.56	9.61	43.71	1.00	100.00	0.00	27.23	0.00	14.65	58.80	10.41	39.46	61.41	49.81	27.16	59.76	0.95	40.87
VGG19_BN	BPP	60.16	0.25	54.45	64.80	0.05	59.56	65.30	0.07	60.22	64.30	0.05	59.21	60.16	0.25	54.45	60.01	0.09	53.20	49.84	1.37	43.19	N/A	N/A	N/A	45.42	6.12	31.09	40.09	6.34	36.30	59.28	0.12	54.74	1.10	0.03	1.09	29.19	24.46	14.42	59.51	0.10	54.11	61.78	0.17	56.47	59.33	0.25	53.78
VGG19_BN	TrojanNN	65.96	98.94	0.60	63.93	98.59	0.70	64.89	96.64	1.67	63.53	98.32	0.93	61.24	0.05	48.27	64.61	97.90	0.96	51.91	96.03	1.40	N/A	N/A	N/A	12.57	99.94	0.05	42.65	98.96	0.73	60.01	47.45	19.30	66.16	99.14	0.48	23.23	99.48	0.10	62.80	2.85	34.87	61.37	95.19	0.87	61.43	98.51	0.79
ViT_b_16	BadNet	84.14	27.57	62.78	84.00	11.88	74.83	73.76	0.14	71.75	5.89	0.00	5.84	83.01	0.09	82.82	84.28	26.23	63.93	83.68	7.71	78.13	N/A	N/A	N/A	30.15	0.00	29.09	44.88	0.64	42.08	84.14	27.56	62.78	83.25	29.95	60.16	1.00	0.00	1.01	N/A	N/A	N/A	7.08	2.88	6.93	N/A	N/A	N/A
ViT_b_16	Blended	84.47	89.61	8.71	83.96	81.51	14.46	73.52	6.23	28.28	5.65	0.00	5.16	83.87	87.02	10.52	81.49	87.96	9.68	84.39	87.11	10.66	N/A	N/A	N/A	88.23	95.81	3.73	N/A	N/A	N/A	84.46	89.61	8.71	84.37	90.83	7.69	1.00	0.00	1.01	N/A	N/A	N/A	7.56	2.91	6.27	N/A	N/A	N/A
ViT_b_16	LC	84.58	44.90	50.07	83.97	41.02	52.84	74.01	72.94	12.10	5.74	0.00	5.79	83.85	45.78	49.21	84.57	43.98	50.80	83.89	42.03	53.08	N/A	N/A	N/A	87.99	79.08	20.60	N/A	N/A	N/A	84.58	44.90	50.07	83.52	43.28	50.68	1.00	0.00	1.01	84.09	42.78	51.76	7.39	2.53	7.41	83.51	49.49	45.77
ViT_b_16	SIG	84.34	18.52	47.32	83.57	22.55	44.25	72.81	5.11	35.66	5.59	0.00	5.51	84.34	18.52	47.32	84.07	18.12	47.40	84.04	14.44	50.76	N/A	N/A	N/A	87.81	24.70	48.88	N/A	N/A	N/A	84.34	18.52	47.32	83.62	20.07	46.43	1.00	0.00	1.01	83.62	17.95	46.24	7.37	2.58	7.06	83.55	22.08	42.70
ViT_b_16	LF	84.32	0.14	84.22	83.85	0.08	83.75	73.79	0.09	73.64	5.49	0.00	5.55	83.47	0.07	83.35	84.20	0.07	84.11	84.37	0.17	84.30	N/A	N/A	N/A	88.13	0.07	88.05	N/A	N/A	N/A	84.32	0.14	84.22	83.92	0.23	83.81	1.00	0.00	1.01	83.93	0.18	83.81	6.95	2.91	6.79	83.20	0.09	83.12
ViT_b_16	SSBA	84.48	24.07	61.91	84.04	12.71	69.29	73.01	0.42	62.39	5.96	0.00	5.86	83.93	13.71	68.32	84.48	24.07	61.91	84.67	7.64	74.52	N/A	N/A	N/A	88.04	20.58	68.02	46.79	0.26	41.59	84.48	24.07	61.91	83.84	25.24	60.41	1.00	0.00	1.01	84.23	24.95	61.06	7.49	4.07	7.16	83.25	24.04	60.42
ViT_b_16	WaNet	72.52	4.64	67.08	78.09	0.42	75.20	75.35	0.09	72.17	53.91	0.08	52.17	72.52	4.64	67.08	72.63	3.07	67.33	83.98	2.82	80.28	N/A	N/A	N/A	87.89	1.63	84.22	46.94	0.27	46.00	72.52	4.64	67.08	2.41	10.49	2.42	1.00	0.00	1.01	72.10	4.47	66.93	67.15	0.29	63.32	71.19	4.48	65.65
ViT_b_16	InputAware	74.52	54.92	39.55	79.44	51.45	44.40	76.68	13.62	58.83	56.91	4.68	46.17	79.32	55.10	41.40	74.33	73.73	24.64	83.93	48.79	46.92	N/A	N/A	N/A	87.91	52.69	43.79	N/A	N/A	N/A	74.33	73.74	24.63	75.86	75.61	22.87	N/A	N/A	N/A	73.84	77.97	20.73	67.98	8.51	60.74	73.07	81.46	17.49
ViT_b_16	BPP	73.03	74.40	20.09	77.91	82.56	14.82	75.05	78.17	17.28	57.01	0.78	46.49	77.80	83.65	13.88	73.03	74.40	20.09	83.80	84.23	13.79	N/A	N/A	N/A	87.32	89.31	9.65	N/A	N/A	N/A	73.03	74.40	20.09	2.59	0.00	2.60	N/A	N/A	N/A	N/A	N/A	N/A	65.65	48.34	34.71	N/A	N/A	N/A
ViT_b_16	TrojanNN	84.92	96.61	3.33	84.39	94.95	4.91	73.77	90.10	3.96	6.57	0.00	6.51	83.99	96.10	3.81	84.95	96.52	3.42	84.30	95.83	4.09	N/A	N/A	N/A	88.10	99.90	0.09	47.62	99.62	0.26	84.92	96.61	3.33	84.61	96.93	3.03	1.00	0.00	1.01	84.46	96.37	3.57	7.85	2.68	7.02	83.38	97.01	2.93
ConvNext_tiny	BadNet	73.28	8.69	67.69	69.01	0.44	67.87	64.39	0.43	63.30	64.90	0.37	63.47	55.27	2.08	53.93	68.08	0.46	67.23	71.64	0.49	70.97	N/A	N/A	N/A	N/A	N/A	N/A	51.53	0.31	50.65	N/A	N/A	N/A	52.55	4.49	50.38	4.37	0.89	4.18	72.34	5.93	68.36	69.82	0.69	68.24	72.67	8.17	67.70
ConvNext_tiny	Blended	73.07	86.00	10.84	69.05	67.48	22.19	56.00	26.23	27.58	63.63	65.36	21.36	43.09	1.60	28.05	71.57	85.19	11.19	71.28	80.77	12.93	N/A	N/A	N/A	N/A	N/A	N/A	48.10	0.60	40.91	N/A	N/A	N/A	51.40	12.97	31.95	5.72	8.95	4.70	72.41	85.70	11.06	68.61	77.49	14.93	72.88	83.80	12.49
ConvNext_tiny	LC	73.39	10.43	62.96	69.16	4.83	63.06	53.86	5.59	47.12	65.13	7.70	58.76	42.31	0.59	41.24	67.64	0.14	66.25	71.81	2.28	66.03	N/A	N/A	N/A	75.31	9.10	63.56	49.27	24.47	39.37	73.39	10.43	62.96	2.55	98.77	0.63	17.02	4.82	14.59	72.51	7.87	63.58	69.77	3.75	64.08	72.84	11.97	61.64
ConvNext_tiny	SIG	73.18	43.28	28.46	69.16	34.67	26.45	66.56	18.26	23.73	64.65	16.61	24.28	40.88	1.39	11.81	71.26	41.12	28.47	71.72	33.93	26.24	N/A	N/A	N/A	75.58	39.55	27.46	49.16	94.29	4.70	73.17	43.29	28.45	61.73	44.80	20.24	23.26	53.70	3.95	72.40	45.29	26.20	70.09	26.81	27.21	72.82	29.90	33.48
ConvNext_tiny	LF	72.83	0.20	72.70	68.66	0.11	68.47	68.29	0.18	68.11	63.18	0.17	63.03	68.47	0.15	68.30	68.38	0.12	68.21	71.58	0.20	71.39	N/A	N/A	N/A	74.92	0.10	74.79	49.62	0.26	49.29	72.84	0.20	72.71	51.49	0.54	51.14	1.00	0.00	1.01	71.93	0.16	71.78	70.39	0.14	70.24	72.75	0.14	72.64
ConvNext_tiny	SSBA	73.41	11.94	62.47	69.05	2.60	62.03	67.42	0.62	61.81	63.57	8.61	54.80	47.16	2.05	41.99	70.18	7.16	61.81	71.02	7.04	62.06	N/A	N/A	N/A	75.11	22.39	57.36	49.55	0.17	45.91	73.42	11.92	62.47	55.59	13.65	46.76	10.23	0.60	8.68	72.79	11.49	61.76	70.09	8.70	60.65	73.23	11.21	62.27
ConvNext_tiny	WaNet	64.70	17.96	55.30	66.95	2.40	62.54	64.68	0.63	60.15	66.94	4.98	60.96	65.56	1.24	61.28	62.73	15.44	55.39	70.84	2.40	65.54	N/A	N/A	N/A	75.23	3.61	68.86	51.40	0.28	49.60	64.70	17.98	55.30	58.47	18.73	50.29	22.08	0.23	22.64	63.67	20.80	53.22	65.13	2.00	60.38	64.17	18.26	54.84
ConvNext_tiny	InputAware	64.13	57.32	29.11	68.30	70.72	22.05	66.14	50.14	28.13	67.97	64.48	26.12	66.68	0.04	33.09	58.81	14.51	40.24	71.72	52.68	30.14	N/A	N/A	N/A	75.41	61.53	28.41	50.06	0.36	42.67	64.68	55.30	29.27	50.07	70.68	15.31	22.16	0.19	19.01	64.18	58.72	26.91	66.98	14.09	47.04	63.45	44.87	34.42
ConvNext_tiny	BPP	62.57	31.47	46.34	66.67	16.04	56.56	63.63	4.19	57.75	65.91	26.23	51.62	64.70	2.21	58.72	56.50	1.37	50.09	70.08	8.58	57.54	N/A	N/A	N/A	74.47	16.02	57.87	51.47	0.27	48.92	62.57	31.47	46.34	49.56	42.27	33.12	20.97	0.08	19.77	62.29	31.08	46.22	64.77	0.77	58.95	62.14	32.06	45.68
ConvNext_tiny	TrojanNN	73.46	99.54	0.42	68.92	91.34	7.23	65.52	62.61	20.91	64.22	85.25	11.22	18.75	1.25	15.90	67.98	62.92	22.39	71.59	98.78	1.06	N/A	N/A	N/A	75.56	99.55	0.35	48.79	0.33	38.12	73.46	99.54	0.42	49.45	94.72	4.05	21.20	5.41	13.33	72.24	99.26	0.69	70.51	98.00	1.78	72.98	99.27	0.66

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	70.25	41.51	46.49	69.74	14.14	61.91	68.97	5.59	64.15	69.81	11.01	63.16	68.60	0.08	68.47	64.06	0.52	62.81	60.26	16.12	53.35	N/A	N/A	N/A	60.32	0.00	60.15	60.88	0.28	60.51	65.20	27.23	51.12	56.45	24.78	44.91	49.97	0.62	49.62	66.48	16.11	58.19	64.90	1.13	62.73	70.11	41.93	46.00
PreActResNet-18	Blended	70.48	90.67	6.42	69.83	87.91	8.08	68.40	77.07	12.24	70.19	88.24	7.92	66.60	80.47	11.11	65.26	80.03	10.84	60.80	81.21	9.83	N/A	N/A	N/A	47.09	0.00	16.77	61.26	88.70	9.04	66.50	87.44	7.91	56.91	78.09	10.01	49.10	77.32	9.28	66.75	86.96	7.74	64.61	69.37	14.25	70.21	89.94	6.96
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	70.36	45.55	38.52	69.93	29.62	47.97	68.90	18.24	50.13	69.73	29.35	48.06	70.35	45.52	38.55	65.30	8.62	52.80	60.29	30.45	40.58	N/A	N/A	N/A	58.35	45.23	31.38	61.55	0.25	59.44	66.98	33.22	42.71	56.58	32.15	35.72	33.40	2.58	31.22	67.75	40.88	39.76	64.67	14.86	48.59	69.82	41.76	40.40
PreActResNet-18	SSBA	70.18	44.05	38.30	69.82	36.03	42.39	68.29	16.56	49.99	69.90	37.40	41.83	66.01	0.06	59.24	65.04	3.39	55.10	60.37	18.41	45.44	N/A	N/A	N/A	55.06	0.01	46.94	61.58	0.32	57.01	63.03	15.96	47.72	56.97	39.70	30.10	48.56	28.64	32.53	66.57	34.10	40.54	63.14	0.86	49.58	69.75	42.96	38.65
PreActResNet-18	WaNet	63.37	49.16	35.08	69.42	55.48	33.18	65.25	45.80	34.92	69.34	48.47	37.41	63.36	49.15	35.09	57.68	0.37	56.27	60.73	3.92	55.64	N/A	N/A	N/A	60.03	7.96	51.04	60.25	0.32	58.49	60.47	21.72	47.38	56.31	82.56	11.08	49.62	0.08	49.60	62.61	26.87	47.45	64.78	36.76	43.65	62.69	0.42	61.24
PreActResNet-18	InputAware	64.82	73.72	20.36	69.97	75.38	20.54	66.76	15.66	45.42	69.60	79.04	17.60	69.29	0.23	62.64	58.69	2.62	44.85	60.19	63.54	20.14	N/A	N/A	N/A	59.49	52.51	24.18	60.27	0.33	57.76	59.97	14.65	42.88	55.01	85.00	9.57	49.73	81.81	12.15	61.09	4.00	47.99	65.24	18.60	47.41	54.67	42.43	30.32
PreActResNet-18	BPP	63.89	66.93	21.29	69.57	69.74	21.63	68.42	87.82	9.04	69.19	19.24	51.01	69.41	71.68	20.27	63.73	0.04	35.69	60.18	4.10	52.01	N/A	N/A	N/A	55.24	7.33	47.11	60.92	0.11	53.34	62.68	0.17	54.32	53.82	84.77	9.38	49.30	73.11	15.52	62.44	0.07	48.97	65.40	0.95	55.80	62.86	0.27	49.88
PreActResNet-18	TrojanNN	70.78	99.81	0.18	70.10	99.42	0.57	62.94	77.38	10.58	70.89	99.57	0.42	70.26	99.62	0.37	65.94	99.45	0.45	60.88	98.48	1.13	N/A	N/A	N/A	6.64	100.00	0.00	61.78	99.60	0.38	70.03	99.18	0.78	56.41	97.47	1.56	48.40	98.88	1.03	67.41	30.39	32.89	65.74	27.63	28.96	70.64	99.69	0.29
VGG19_BN	BadNet	65.28	70.57	21.35	62.09	48.36	31.68	64.93	54.86	29.23	60.57	55.95	26.93	61.96	43.41	34.46	59.54	35.74	34.68	51.53	5.23	47.86	N/A	N/A	N/A	N/A	N/A	N/A	41.94	0.68	41.33	N/A	N/A	N/A	1.18	0.00	1.20	29.67	4.53	29.48	61.65	71.20	20.01	60.40	54.04	26.31	61.16	67.49	22.06
VGG19_BN	Blended	65.22	87.84	6.23	62.46	77.76	9.47	64.16	80.62	9.05	61.34	82.28	7.91	65.22	87.84	6.23	60.65	76.85	7.49	51.16	71.23	9.89	N/A	N/A	N/A	N/A	N/A	N/A	41.83	88.77	6.18	N/A	N/A	N/A	64.88	86.70	6.70	34.16	94.86	1.37	61.76	74.70	10.24	60.22	78.25	7.70	62.80	88.33	5.24
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	64.61	0.74	64.43	63.24	0.17	63.07	64.55	0.10	64.40	61.13	0.20	60.96	64.60	0.74	64.42	63.82	0.08	63.71	51.69	0.90	51.40	N/A	N/A	N/A	38.03	2.59	37.96	37.57	6.80	37.02	56.39	0.98	56.10	1.25	0.00	1.26	34.22	2.30	33.64	N/A	N/A	N/A	60.06	0.16	59.83	61.60	0.94	61.48
VGG19_BN	SSBA	65.47	15.01	50.33	62.60	3.01	52.59	64.91	4.25	54.52	61.51	4.07	51.43	60.33	0.10	53.11	60.77	2.02	51.98	51.75	4.21	43.44	N/A	N/A	N/A	40.64	10.38	28.02	43.97	0.37	40.53	59.97	9.88	48.62	65.25	15.42	50.08	26.85	0.00	23.68	61.53	16.83	45.53	59.22	1.20	48.01	62.84	15.16	47.44
VGG19_BN	WaNet	59.70	0.45	53.61	64.92	0.33	61.53	65.44	0.29	61.80	64.43	0.30	61.17	59.70	0.45	53.62	56.06	0.03	51.76	51.48	1.69	47.08	N/A	N/A	N/A	39.32	1.95	34.85	42.26	1.16	40.06	57.53	0.69	50.09	1.00	100.00	0.00	27.49	1.32	28.10	57.33	0.36	51.41	61.93	0.23	58.20	58.78	0.42	52.57
VGG19_BN	InputAware	59.11	52.60	27.20	64.28	76.90	15.81	64.18	53.26	27.06	64.20	67.73	21.01	63.30	3.49	49.16	58.51	0.21	42.97	52.39	54.43	17.40	N/A	N/A	N/A	40.81	29.33	19.35	44.09	0.83	36.34	55.91	0.58	43.83	63.03	81.83	12.13	34.81	37.30	9.05	54.57	0.36	41.02	60.28	14.67	38.96	57.26	0.24	44.93
VGG19_BN	BPP	58.89	0.12	54.06	65.14	0.11	60.64	64.88	0.18	60.00	64.04	0.13	59.64	58.89	0.12	54.06	58.89	0.12	54.06	50.98	2.04	46.87	N/A	N/A	N/A	39.88	5.63	34.76	41.65	0.50	38.70	58.26	0.08	53.76	1.65	0.00	1.65	25.11	6.17	22.55	56.84	0.03	51.47	62.04	0.17	57.67	57.57	0.05	52.18
VGG19_BN	TrojanNN	65.18	99.03	0.47	62.72	97.38	1.31	64.72	97.99	0.98	60.93	98.18	1.00	62.49	94.35	2.64	64.94	98.75	0.62	52.24	98.51	0.51	N/A	N/A	N/A	13.60	99.73	0.07	42.29	99.90	0.09	62.12	74.60	11.43	64.53	98.68	0.85	34.74	99.76	0.11	62.97	26.71	27.69	60.18	0.00	3.80	63.60	98.73	0.66
ViT_b_16	BadNet	84.39	49.51	44.14	83.69	24.05	65.12	74.95	1.77	70.44	6.09	0.00	6.13	83.33	22.34	65.97	84.33	48.40	45.20	83.99	27.78	64.12	N/A	N/A	N/A	1.00	0.00	1.01	N/A	N/A	N/A	84.39	49.51	44.14	84.06	49.90	43.84	1.00	0.00	1.01	N/A	N/A	N/A	7.27	4.19	6.93	N/A	N/A	N/A
ViT_b_16	Blended	84.49	94.00	5.11	83.88	90.64	7.70	73.71	1.85	25.56	8.73	0.00	7.33	83.57	91.29	7.18	81.19	92.45	6.16	84.42	91.96	6.80	N/A	N/A	N/A	88.02	97.54	2.18	N/A	N/A	N/A	84.49	94.00	5.11	84.35	93.12	5.78	1.00	0.00	1.01	N/A	N/A	N/A	7.64	3.18	6.27	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	84.25	0.16	84.14	83.49	0.09	83.37	73.43	0.14	73.25	7.05	0.00	7.12	83.38	0.06	83.28	83.82	0.09	83.75	83.92	0.24	83.82	N/A	N/A	N/A	1.00	0.00	1.01	N/A	N/A	N/A	84.25	0.16	84.14	1.46	74.28	0.82	1.00	0.00	1.01	83.92	0.28	83.80	7.36	4.46	7.07	83.14	0.10	83.06
ViT_b_16	SSBA	84.49	61.43	32.56	83.96	42.67	46.81	73.01	0.14	62.47	4.94	0.00	5.04	83.89	43.96	45.63	84.49	61.43	32.56	83.87	37.75	52.89	N/A	N/A	N/A	83.59	0.00	79.29	N/A	N/A	N/A	84.49	61.43	32.56	84.10	60.79	32.95	1.00	0.00	1.01	83.96	60.78	32.74	7.62	3.38	7.29	83.31	60.89	32.31
ViT_b_16	WaNet	72.93	50.96	39.38	78.33	4.27	73.11	77.18	0.10	73.72	55.67	0.16	54.02	72.93	50.96	39.38	72.25	19.05	58.73	83.86	5.06	78.97	N/A	N/A	N/A	87.50	3.86	82.48	N/A	N/A	N/A	72.93	50.96	39.38	20.92	14.89	18.69	1.00	0.00	1.01	71.62	53.66	37.41	65.60	1.03	62.07	2.19	98.82	0.31
ViT_b_16	InputAware	74.92	53.49	41.72	79.43	37.58	55.11	76.11	0.78	62.46	55.08	1.45	46.47	79.35	38.04	54.72	75.39	65.96	31.86	83.95	56.62	39.43	N/A	N/A	N/A	87.69	57.69	39.46	45.49	98.03	1.26	75.39	65.96	31.86	75.58	67.26	30.34	N/A	N/A	N/A	75.32	67.44	30.40	61.85	32.33	44.15	74.32	75.77	22.95
ViT_b_16	BPP	74.57	88.89	9.26	77.94	87.15	10.85	74.61	71.55	21.02	57.56	0.33	45.78	77.39	82.26	15.00	73.15	88.75	9.46	84.17	89.79	9.15	N/A	N/A	N/A	88.06	93.41	6.20	45.77	0.27	40.24	74.57	88.89	9.26	2.16	0.00	2.14	N/A	N/A	N/A	N/A	N/A	N/A	64.88	24.98	47.67	N/A	N/A	N/A
ViT_b_16	TrojanNN	84.63	98.72	1.24	83.90	97.03	2.88	72.82	89.71	4.85	5.76	0.00	5.49	83.75	98.16	1.78	84.57	98.68	1.28	84.45	98.54	1.43	N/A	N/A	N/A	88.22	99.88	0.12	N/A	N/A	N/A	84.64	98.72	1.24	84.39	98.75	1.20	N/A	N/A	N/A	84.38	99.10	0.88	7.65	2.37	6.90	83.56	99.27	0.72
ConvNext_tiny	BadNet	73.23	41.76	46.22	68.34	2.28	66.17	67.53	0.72	65.21	64.39	1.07	62.91	24.14	0.63	23.62	67.77	0.35	66.86	70.95	7.98	65.67	N/A	N/A	N/A	74.19	3.67	71.22	50.91	0.44	50.62	73.22	41.76	46.22	53.58	18.07	46.08	6.52	2.23	6.44	71.99	40.09	46.51	70.67	6.12	65.62	72.92	37.55	48.77
ConvNext_tiny	Blended	73.67	90.96	7.31	69.22	76.01	17.54	65.05	50.68	26.60	62.92	84.78	10.82	35.65	1.89	22.43	66.63	86.67	9.51	71.56	87.25	8.96	N/A	N/A	N/A	74.84	90.08	7.55	50.80	0.12	40.62	73.67	90.96	7.31	55.36	30.58	30.74	13.28	0.10	9.54	72.61	91.13	7.00	69.68	83.96	11.54	73.06	90.26	7.77
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	73.23	0.29	73.08	68.82	0.15	68.68	61.12	0.27	60.88	64.45	0.13	64.30	68.94	0.13	68.78	66.39	0.16	66.28	71.47	0.41	71.33	N/A	N/A	N/A	74.92	0.32	74.82	49.54	0.43	49.29	73.23	0.29	73.08	54.29	1.04	53.98	23.19	0.14	23.41	72.26	0.30	72.09	69.77	0.18	69.61	72.63	0.19	72.52
ConvNext_tiny	SSBA	73.36	36.60	47.45	68.84	11.01	58.64	66.54	0.97	60.15	63.20	8.44	53.62	48.09	6.82	41.81	71.21	27.23	51.40	71.38	23.44	53.65	N/A	N/A	N/A	74.58	7.40	64.94	49.40	0.13	44.71	73.37	36.58	47.47	47.65	39.93	30.41	21.68	0.22	18.51	72.89	34.57	48.14	70.30	23.68	53.10	72.88	33.86	48.93
ConvNext_tiny	WaNet	62.77	39.76	40.66	66.38	7.08	59.53	63.43	1.82	57.18	66.40	11.36	57.57	66.20	6.62	59.77	59.40	27.32	45.44	71.37	4.81	64.81	N/A	N/A	N/A	74.65	8.35	66.52	49.14	0.38	47.64	62.76	39.77	40.66	50.72	28.11	38.14	21.92	0.29	21.90	61.80	41.42	39.14	64.67	6.91	58.03	62.52	36.41	41.98
ConvNext_tiny	InputAware	64.60	77.79	17.24	68.23	63.10	27.86	66.01	59.35	28.01	68.01	62.43	28.62	68.65	0.12	56.83	58.97	4.86	39.98	71.30	54.51	30.74	N/A	N/A	N/A	75.23	59.56	30.33	49.05	0.84	41.77	65.50	67.55	24.67	60.66	74.53	19.48	20.74	0.13	18.29	64.87	67.46	24.28	67.26	16.62	48.98	64.89	69.24	23.28
ConvNext_tiny	BPP	62.28	27.56	46.94	65.64	44.57	39.78	62.62	37.16	41.12	65.78	46.35	37.88	63.52	1.37	58.14	56.71	0.42	51.36	70.93	5.96	62.68	N/A	N/A	N/A	75.21	16.49	60.63	52.37	0.51	49.54	62.28	27.56	46.94	57.27	87.83	9.47	23.50	0.33	22.04	62.03	26.03	46.74	63.82	0.32	59.26	61.77	29.02	45.32
ConvNext_tiny	TrojanNN	73.68	99.78	0.22	68.97	96.56	2.92	66.67	81.29	12.45	64.14	87.62	9.12	58.90	0.32	14.75	68.78	80.87	13.22	71.59	99.75	0.21	N/A	N/A	N/A	75.65	99.96	0.04	48.95	99.54	0.41	73.68	99.78	0.22	50.40	99.57	0.38	2.11	1.99	2.03	72.62	99.72	0.27	69.55	96.85	2.68	73.39	99.73	0.25

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	68.83	69.24	25.66	68.05	0.58	65.76	67.18	6.36	61.79	67.87	0.27	65.92	64.69	0.11	64.65	62.74	0.01	60.68	58.69	65.99	25.21	N/A	N/A	N/A	60.29	0.00	60.53	61.74	0.17	61.45	64.02	41.33	43.34	52.44	86.43	9.22	44.11	18.93	41.91	64.92	1.03	64.15	61.98	0.31	60.96	67.61	67.01	26.88
PreActResNet-18	Blended	70.23	98.72	1.00	68.76	97.07	2.19	68.03	83.76	8.13	68.91	97.63	1.77	65.58	0.02	34.49	65.87	89.81	6.25	60.48	95.94	2.57	N/A	N/A	N/A	37.56	0.00	20.86	59.29	100.00	0.00	64.31	96.46	2.46	55.63	97.19	1.74	49.16	97.03	1.80	67.00	91.15	5.00	64.48	85.14	7.12	69.57	98.39	1.20
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	69.05	88.64	8.49	68.42	67.78	22.55	67.62	64.66	20.57	68.43	65.16	24.07	66.47	0.06	55.81	62.15	10.46	47.14	59.03	81.65	11.81	N/A	N/A	N/A	62.04	72.08	18.30	59.25	88.49	9.00	64.14	83.84	11.61	53.06	82.93	10.11	43.73	63.00	21.75	67.85	61.77	25.71	63.85	0.18	53.26	68.91	87.46	9.59
PreActResNet-18	SSBA	69.42	91.41	6.47	68.42	84.36	11.34	67.58	59.69	24.07	68.27	87.08	9.55	64.91	0.10	58.17	64.63	38.59	37.47	59.69	83.02	10.52	N/A	N/A	N/A	51.92	0.00	49.22	61.82	0.22	58.01	64.00	68.33	20.87	53.38	94.05	3.27	45.57	89.88	5.40	67.34	29.42	43.85	64.03	0.64	51.65	68.84	90.49	7.15
PreActResNet-18	WaNet	64.17	88.88	8.38	69.81	47.69	39.13	65.90	80.94	12.64	69.31	36.17	46.18	68.86	0.10	65.38	59.21	0.08	58.65	58.92	56.66	27.33	N/A	N/A	N/A	61.13	0.01	56.54	62.07	0.57	59.81	58.33	36.41	44.00	53.09	96.20	2.49	47.53	12.56	43.93	60.92	0.13	59.83	66.60	50.77	34.67	61.00	4.30	57.83
PreActResNet-18	InputAware	63.69	93.69	5.29	69.97	89.44	8.58	66.14	75.76	16.81	69.80	85.03	12.04	70.12	0.27	65.09	60.49	0.08	52.74	59.80	87.10	8.54	N/A	N/A	N/A	59.83	0.00	47.07	61.24	40.86	37.26	64.90	42.24	39.25	51.78	98.29	1.16	49.95	78.82	13.48	64.59	0.16	56.84	66.33	46.87	38.07	63.45	0.17	56.71
PreActResNet-18	BPP	63.96	99.66	0.26	69.55	0.06	60.64	68.36	21.11	46.25	69.24	0.09	60.96	68.79	0.08	60.67	60.79	0.05	50.33	60.02	81.53	13.21	N/A	N/A	N/A	56.35	0.00	47.35	61.81	0.21	54.31	62.07	0.46	55.34	53.66	99.22	0.58	47.39	94.40	3.91	61.09	0.08	52.86	65.94	6.99	17.84	61.19	94.08	4.10
PreActResNet-18	TrojanNN	70.31	99.99	0.01	69.40	99.94	0.05	62.37	44.88	21.42	69.22	99.95	0.05	69.11	99.99	0.01	63.76	88.11	7.87	60.01	99.86	0.12	N/A	N/A	N/A	35.85	0.00	25.48	59.38	99.99	0.00	67.56	99.41	0.47	56.76	99.94	0.01	49.07	99.29	0.53	65.97	0.10	47.68	63.73	0.86	29.93	70.21	99.99	0.01
VGG19_BN	BadNet	62.88	84.99	11.59	60.89	4.13	42.66	62.79	7.41	38.24	59.85	0.61	43.60	60.70	3.30	39.57	57.52	0.04	27.32	49.77	76.46	14.64	N/A	N/A	N/A	N/A	N/A	N/A	40.07	88.25	7.30	N/A	N/A	N/A	62.93	84.04	12.19	32.95	0.01	6.18	57.51	51.01	34.55	55.41	6.91	30.12	62.04	84.34	11.84
VGG19_BN	Blended	65.05	97.99	1.27	62.13	70.21	8.83	64.00	81.49	5.56	60.70	91.38	4.28	61.54	0.09	11.11	59.35	64.39	13.36	51.37	94.41	2.69	N/A	N/A	N/A	N/A	N/A	N/A	37.11	99.31	0.48	N/A	N/A	N/A	64.98	97.32	1.65	35.70	99.68	0.11	63.48	31.80	19.51	59.42	71.68	7.93	63.64	91.85	4.32
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	62.51	5.48	62.29	60.86	0.19	60.73	62.92	0.18	62.71	59.85	0.23	59.65	62.50	5.48	62.28	60.21	0.01	60.60	50.20	6.63	49.95	N/A	N/A	N/A	35.46	30.55	35.06	35.60	26.58	34.97	58.04	7.09	57.76	62.35	5.46	62.14	32.80	1.92	33.13	60.71	6.41	60.53	55.98	0.14	55.83	60.02	5.27	59.86
VGG19_BN	SSBA	64.74	86.10	8.80	62.12	69.49	17.31	63.71	70.65	17.46	59.98	73.75	13.96	60.48	0.17	35.95	59.83	57.73	21.27	50.00	69.89	14.03	N/A	N/A	N/A	45.94	0.00	46.08	35.85	92.49	4.75	56.77	78.12	12.05	64.39	84.95	9.37	28.92	90.02	2.31	62.32	23.24	41.07	56.97	0.48	35.43	63.63	81.41	11.37
VGG19_BN	WaNet	52.39	97.33	1.82	64.46	5.76	53.20	65.00	8.25	53.05	63.51	3.94	53.39	64.41	5.25	55.02	57.30	0.00	53.40	49.67	21.40	37.94	N/A	N/A	N/A	30.80	67.86	13.88	40.60	61.70	24.56	56.47	12.87	45.78	1.00	100.00	0.00	31.84	0.00	32.30	56.40	0.01	47.42	61.55	2.73	49.28	55.83	90.64	6.19
VGG19_BN	InputAware	60.39	72.95	18.45	64.31	6.69	48.65	64.14	14.08	42.86	63.90	4.99	49.68	63.14	0.26	55.45	58.54	0.01	49.82	50.45	79.45	9.74	N/A	N/A	N/A	41.15	13.86	23.36	40.87	93.81	4.71	51.01	0.09	44.01	1.06	0.00	1.07	29.91	72.67	5.79	58.85	0.01	52.43	60.63	40.32	36.54	59.31	0.01	52.28
VGG19_BN	BPP	61.40	96.64	2.46	65.09	0.07	54.60	64.51	0.15	54.82	63.99	0.06	58.71	64.42	0.07	53.74	56.25	0.00	47.94	49.29	14.80	41.19	N/A	N/A	N/A	27.65	91.59	3.09	36.49	87.85	8.32	58.75	0.06	52.42	1.00	100.00	0.00	20.09	97.74	0.62	60.61	0.04	54.76	62.10	18.52	13.54	59.60	96.48	2.53
VGG19_BN	TrojanNN	64.69	99.96	0.04	62.40	99.95	0.03	63.61	99.62	0.28	60.75	99.99	0.01	62.19	98.96	0.72	60.53	92.88	3.70	52.62	99.65	0.20	N/A	N/A	N/A	1.00	0.00	1.01	41.07	99.98	0.02	58.64	94.32	3.23	64.47	99.90	0.09	43.29	10.19	10.33	52.24	0.12	29.13	58.17	0.18	5.45	64.28	99.93	0.07
ViT_b_16	BadNet	83.09	82.89	15.00	82.92	51.85	42.29	74.11	27.82	53.59	3.57	0.00	3.73	82.32	60.19	34.85	83.09	82.89	15.00	83.39	70.42	26.55	N/A	N/A	N/A	77.19	0.00	76.81	45.39	85.31	8.54	83.09	82.89	15.00	82.34	79.83	17.67	1.00	0.00	1.01	N/A	N/A	N/A	5.91	8.84	5.32	N/A	N/A	N/A
ViT_b_16	Blended	84.04	99.46	0.47	83.26	98.49	1.34	73.09	42.25	10.98	6.20	0.00	5.59	83.08	98.51	1.32	81.39	98.62	1.22	84.02	98.95	0.97	N/A	N/A	N/A	87.63	99.76	0.22	N/A	N/A	N/A	84.04	99.46	0.47	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	7.38	2.76	5.83	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	83.11	1.01	83.00	82.59	0.15	82.49	74.40	0.04	74.24	6.33	0.00	6.39	83.11	1.01	83.00	83.06	0.73	82.97	83.08	0.97	82.98	N/A	N/A	N/A	79.09	1.21	78.91	N/A	N/A	N/A	83.11	1.01	83.00	82.83	1.13	82.70	1.00	0.00	1.01	82.32	1.88	82.17	6.68	6.23	6.34	82.16	0.97	82.04
ViT_b_16	SSBA	84.17	95.09	4.25	83.37	88.65	9.56	72.25	0.85	50.71	6.51	0.00	6.43	83.31	88.54	9.63	84.17	95.09	4.25	83.93	91.26	7.47	N/A	N/A	N/A	1.65	0.00	1.12	N/A	N/A	N/A	84.17	95.09	4.25	83.83	95.77	3.61	1.00	0.00	1.01	83.63	95.69	3.74	7.52	4.20	7.23	83.10	95.41	3.86
ViT_b_16	WaNet	73.53	84.86	12.41	78.44	46.34	42.93	75.47	3.59	68.77	62.44	2.09	57.92	78.28	48.26	41.50	69.59	69.53	26.58	82.86	54.83	39.61	N/A	N/A	N/A	87.45	69.35	27.46	N/A	N/A	N/A	73.53	84.86	12.41	39.52	48.80	13.48	1.00	0.00	1.01	73.21	84.04	13.12	67.29	21.84	55.77	72.81	79.63	16.63
ViT_b_16	InputAware	76.49	80.77	17.53	79.72	71.39	24.69	76.75	11.18	66.31	56.49	0.27	49.48	79.64	71.57	24.39	75.69	81.78	15.76	83.86	64.98	31.99	N/A	N/A	N/A	87.24	76.88	21.39	N/A	N/A	N/A	75.70	81.77	15.77	35.70	50.76	8.60	N/A	N/A	N/A	74.58	90.66	8.15	66.08	22.25	54.74	12.88	33.40	8.52
ViT_b_16	BPP	73.36	96.58	2.82	77.77	97.40	2.28	75.73	96.91	2.49	59.88	13.42	41.25	77.71	97.93	1.84	73.36	96.58	2.82	83.88	98.87	1.01	N/A	N/A	N/A	87.86	99.28	0.70	41.31	93.72	3.46	73.36	96.58	2.82	2.82	55.17	1.55	N/A	N/A	N/A	N/A	N/A	N/A	68.40	85.55	11.28	N/A	N/A	N/A
ViT_b_16	TrojanNN	84.42	99.85	0.14	83.54	99.06	0.90	72.41	97.05	1.23	5.50	0.00	5.15	83.73	99.73	0.25	84.41	99.84	0.15	84.10	99.65	0.34	N/A	N/A	N/A	87.80	100.00	0.00	N/A	N/A	N/A	84.42	99.85	0.14	83.64	99.58	0.41	N/A	N/A	N/A	79.03	99.97	0.03	7.81	3.16	6.46	82.67	99.91	0.08
ConvNext_tiny	BadNet	71.66	84.11	12.81	67.79	14.76	59.22	67.02	4.65	61.92	62.98	36.06	43.43	23.39	0.59	22.98	64.81	21.90	52.58	69.66	83.07	13.49	N/A	N/A	N/A	1.15	0.00	1.16	49.46	77.70	16.00	71.67	84.11	12.81	67.05	7.13	62.54	18.59	1.48	18.46	70.90	83.10	13.67	69.70	46.36	40.26	71.21	83.01	13.71
ConvNext_tiny	Blended	73.09	98.68	1.07	67.94	81.46	13.03	65.61	71.39	17.43	62.52	92.30	5.87	48.18	3.42	31.43	69.65	98.32	1.38	71.07	97.99	1.43	N/A	N/A	N/A	75.16	99.39	0.48	50.59	99.20	0.61	73.08	98.68	1.07	70.28	98.65	1.10	8.49	9.25	6.29	72.03	98.09	1.60	70.34	93.86	4.63	72.20	98.39	1.28
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	71.13	1.95	70.96	65.99	0.17	65.84	67.56	0.16	67.39	64.27	0.13	64.20	42.40	0.67	42.25	66.01	0.23	66.21	69.20	2.44	69.02	N/A	N/A	N/A	61.09	1.23	60.79	49.41	0.29	49.11	71.13	1.95	70.96	65.71	2.64	65.47	1.36	0.00	1.37	70.41	1.59	70.24	68.35	0.12	68.25	70.87	1.66	70.72
ConvNext_tiny	SSBA	72.86	90.78	7.58	67.48	34.55	44.14	66.62	12.89	53.23	64.14	71.10	21.15	52.13	4.32	45.32	67.39	81.95	13.57	70.85	84.38	12.14	N/A	N/A	N/A	1.00	100.00	0.00	47.47	90.03	6.99	72.86	90.77	7.59	68.07	91.35	7.03	21.10	28.75	16.20	72.07	89.04	8.88	69.74	81.07	14.82	72.62	90.13	8.21
ConvNext_tiny	WaNet	63.04	77.66	16.51	66.05	23.11	51.34	63.32	2.68	55.73	66.39	32.05	46.74	66.17	21.96	51.34	56.82	15.55	47.44	69.63	53.52	35.21	N/A	N/A	N/A	56.07	78.90	16.92	51.01	0.74	49.37	63.03	77.67	16.51	51.16	88.15	7.89	14.60	4.63	14.50	62.77	74.16	18.78	64.47	28.18	47.07	61.02	74.48	18.23
ConvNext_tiny	InputAware	63.87	81.73	14.82	68.36	83.20	14.20	65.73	51.69	32.93	68.30	84.15	13.54	64.79	0.20	49.66	58.78	1.86	46.88	70.46	69.90	22.92	N/A	N/A	N/A	74.38	77.40	18.53	47.20	96.58	2.85	64.40	84.31	13.01	52.19	97.80	1.46	21.50	51.25	11.73	62.44	74.16	20.11	67.15	43.38	41.21	63.55	83.55	13.59
ConvNext_tiny	BPP	64.09	98.90	1.00	66.11	94.75	4.53	63.11	91.09	7.06	65.77	94.47	4.81	64.37	57.77	30.29	58.93	10.63	51.29	71.16	87.35	10.70	N/A	N/A	N/A	75.05	94.05	5.33	51.71	0.14	49.06	64.09	98.90	1.00	49.02	99.39	0.44	21.62	7.43	19.42	63.44	98.51	1.31	65.47	0.35	33.92	63.84	98.93	0.97
ConvNext_tiny	TrojanNN	73.54	99.97	0.03	68.14	97.87	1.85	63.69	89.68	6.03	65.30	93.65	4.84	51.08	0.79	28.36	68.15	85.16	10.18	71.20	99.96	0.04	N/A	N/A	N/A	75.14	100.00	0.00	47.41	100.00	0.00	73.54	99.97	0.03	68.63	99.94	0.06	21.23	96.61	1.99	72.29	99.92	0.08	70.59	99.06	0.79	72.99	99.92	0.08

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	67.23	87.43	10.49	66.61	0.43	63.05	65.17	33.65	46.68	66.26	0.14	63.27	65.60	0.05	65.41	62.98	0.00	61.78	57.26	80.51	15.03	N/A	N/A	N/A	61.21	0.00	61.65	54.06	92.05	6.29	65.40	81.95	15.45	46.98	90.99	5.68	34.10	72.33	17.48	60.39	0.62	59.88	60.37	0.04	58.46	66.77	87.54	10.37
PreActResNet-18	Blended	69.28	99.59	0.34	67.85	98.23	1.30	67.12	89.83	4.93	67.77	98.62	1.02	64.99	0.00	33.25	64.15	68.07	10.99	59.23	98.31	1.08	N/A	N/A	N/A	41.37	0.00	24.63	56.49	100.00	0.00	65.22	99.81	0.17	55.05	99.64	0.22	47.02	99.40	0.37	67.10	88.45	6.04	63.75	0.79	23.44	69.00	99.42	0.47
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	68.51	95.06	3.73	67.72	61.60	25.16	66.00	80.11	11.22	67.44	55.28	29.07	65.95	0.21	52.75	62.97	5.68	50.35	58.56	91.62	5.24	N/A	N/A	N/A	51.95	0.00	52.97	56.46	93.97	4.84	68.29	93.76	4.65	49.91	88.84	5.61	26.23	38.26	18.51	65.00	72.75	17.93	62.00	3.81	44.30	68.54	92.42	5.65
PreActResNet-18	SSBA	69.07	97.22	2.09	67.82	90.01	7.14	66.85	79.41	12.38	67.82	85.34	10.05	63.08	0.13	55.83	62.61	20.10	43.22	58.72	94.20	3.58	N/A	N/A	N/A	54.17	0.00	49.76	57.07	99.93	0.06	65.39	97.52	1.74	53.64	98.01	1.22	46.75	96.94	1.85	66.82	8.81	52.42	63.09	28.91	39.05	69.00	96.83	2.36
PreActResNet-18	WaNet	64.05	97.73	1.92	68.70	0.85	64.34	64.76	86.74	8.46	68.27	2.20	63.16	67.34	0.02	59.61	59.10	0.03	56.64	57.48	83.83	10.25	N/A	N/A	N/A	52.17	0.00	55.65	56.66	96.91	2.61	25.90	83.49	11.06	50.88	97.64	1.57	41.35	19.33	36.58	63.07	0.10	58.76	65.31	43.96	37.16	62.80	96.30	2.97
PreActResNet-18	InputAware	65.16	85.00	12.18	69.27	62.34	29.53	66.44	51.00	34.56	68.96	65.28	27.28	65.15	85.00	12.18	60.50	0.01	54.24	58.93	90.67	6.24	N/A	N/A	N/A	49.81	99.93	0.06	58.20	99.75	0.16	63.33	98.06	1.60	53.63	99.42	0.46	47.52	88.39	7.86	63.94	0.09	59.47	65.21	85.14	12.18	63.80	0.04	56.67
PreActResNet-18	BPP	64.01	98.88	0.94	69.26	0.09	62.18	68.48	0.75	58.78	69.09	0.13	62.32	68.93	0.13	62.04	58.49	0.02	48.52	59.84	97.44	2.04	N/A	N/A	N/A	41.64	0.00	43.69	58.06	99.98	0.02	59.82	0.35	54.73	52.36	99.81	0.14	47.19	97.78	1.60	59.96	0.18	49.17	66.71	3.80	16.77	61.62	3.57	51.81
PreActResNet-18	TrojanNN	69.82	100.00	0.00	68.46	99.99	0.01	62.34	22.94	27.12	67.99	100.00	0.00	67.78	57.11	24.30	63.70	79.37	12.74	59.46	99.99	0.01	N/A	N/A	N/A	37.15	0.00	27.66	58.24	100.00	0.00	68.22	99.81	0.17	42.19	100.00	0.00	45.17	99.96	0.03	64.71	0.22	47.11	63.74	0.92	30.38	69.38	100.00	0.00
VGG19_BN	BadNet	61.27	88.32	9.15	59.76	0.15	46.15	61.46	0.44	48.90	57.81	0.13	46.00	59.18	0.32	47.84	56.76	0.00	52.89	48.65	80.12	13.26	N/A	N/A	N/A	N/A	N/A	N/A	39.06	90.75	6.30	N/A	N/A	N/A	1.00	100.00	0.00	33.13	0.07	33.36	57.68	7.74	56.28	56.03	0.22	37.17	58.02	88.10	9.12
VGG19_BN	Blended	64.24	98.98	0.72	60.62	35.76	16.56	62.80	91.00	5.21	59.80	87.40	6.03	61.24	92.38	4.15	58.19	12.77	22.18	50.84	97.28	1.33	N/A	N/A	N/A	16.34	0.00	8.57	35.25	99.89	0.08	N/A	N/A	N/A	1.00	100.00	0.00	36.82	99.87	0.07	60.40	0.25	25.21	57.94	42.25	12.88	61.04	91.10	4.71
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	58.09	18.43	57.80	60.46	0.35	60.26	61.53	0.35	61.32	58.29	0.36	58.13	58.09	18.41	57.80	61.35	0.89	61.29	45.78	17.21	45.46	N/A	N/A	N/A	1.00	100.00	0.00	29.62	41.64	28.89	51.37	21.67	50.98	1.00	100.00	0.00	27.56	0.00	27.84	54.49	21.99	54.20	55.66	0.37	55.55	56.18	20.52	55.89
VGG19_BN	SSBA	62.58	95.66	2.87	60.47	72.52	14.25	61.90	77.20	12.66	58.32	70.65	14.72	57.81	0.21	41.48	57.73	22.03	39.28	50.54	88.36	5.41	N/A	N/A	N/A	2.42	99.81	0.13	35.03	98.32	1.20	53.81	84.24	8.73	62.61	95.79	2.72	19.43	97.10	0.38	61.78	16.30	39.96	57.67	82.37	7.89	60.10	94.61	3.16
VGG19_BN	WaNet	57.91	96.22	2.82	64.62	10.44	52.75	64.38	24.28	45.61	64.35	5.31	54.92	64.18	3.24	57.15	54.89	0.01	52.75	48.37	57.65	21.08	N/A	N/A	N/A	8.74	90.17	3.12	34.84	85.48	9.29	58.47	2.34	53.90	56.29	93.15	5.04	18.97	8.46	17.57	N/A	N/A	N/A	61.05	39.59	36.30	46.58	90.17	7.24
VGG19_BN	InputAware	59.45	85.52	9.99	64.28	31.31	38.71	64.73	56.27	19.36	64.02	25.00	41.89	63.97	6.78	28.05	55.08	0.00	47.67	49.13	88.62	5.63	N/A	N/A	N/A	44.08	0.00	35.01	33.61	97.49	1.86	57.73	0.40	50.39	1.00	100.00	0.00	22.85	8.20	4.10	54.11	0.03	44.57	61.07	91.18	5.81	57.85	0.08	51.28
VGG19_BN	BPP	60.15	98.27	1.24	65.27	0.16	56.89	65.11	6.56	39.76	64.48	0.12	59.14	64.88	0.14	56.59	59.93	0.00	53.00	50.62	78.74	12.13	N/A	N/A	N/A	33.04	99.97	0.00	37.48	99.34	0.53	55.60	0.09	48.44	61.77	99.42	0.45	23.61	98.97	0.32	58.71	0.00	49.88	63.20	2.22	51.36	59.18	93.84	4.77
VGG19_BN	TrojanNN	64.89	99.98	0.02	60.53	13.85	29.91	63.24	98.05	1.17	59.21	4.37	28.08	60.50	0.03	22.71	59.66	0.17	37.19	51.26	99.96	0.00	N/A	N/A	N/A	1.00	0.00	1.01	39.22	98.66	0.06	54.32	40.12	23.86	64.77	99.98	0.02	10.00	84.98	1.65	54.89	0.06	35.14	57.28	0.40	25.25	63.73	77.52	11.33
ViT_b_16	BadNet	81.93	84.90	13.26	81.66	61.19	34.02	75.31	48.82	41.70	6.24	0.00	6.29	82.03	57.72	36.72	81.93	84.90	13.26	82.19	82.20	16.03	N/A	N/A	N/A	1.00	0.00	1.01	N/A	N/A	N/A	81.93	84.90	13.26	81.37	82.62	15.11	1.00	0.00	1.01	N/A	N/A	N/A	6.59	6.77	6.22	N/A	N/A	N/A
ViT_b_16	Blended	84.35	99.70	0.26	83.14	99.25	0.66	71.98	73.91	6.17	5.92	0.00	4.83	83.03	99.13	0.77	80.79	99.45	0.49	83.70	99.67	0.31	N/A	N/A	N/A	88.21	99.96	0.04	N/A	N/A	N/A	84.34	99.70	0.26	83.28	99.64	0.33	1.00	0.00	1.01	N/A	N/A	N/A	7.17	2.60	6.10	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	80.72	3.35	80.57	81.84	0.11	81.74	76.00	0.14	75.90	7.15	0.00	7.22	80.72	3.35	80.57	80.54	3.21	80.38	80.63	3.54	80.48	N/A	N/A	N/A	1.00	100.00	0.00	N/A	N/A	N/A	80.72	3.35	80.57	1.31	96.63	0.31	1.00	0.00	1.01	79.04	5.01	78.86	7.32	5.42	7.04	80.00	2.74	79.88
ViT_b_16	SSBA	83.88	98.40	1.42	82.92	93.22	5.56	72.10	9.22	39.28	4.88	0.00	4.90	82.62	95.00	4.12	83.88	98.40	1.42	83.23	96.85	2.78	N/A	N/A	N/A	87.45	96.87	2.89	41.78	94.48	3.78	83.88	98.40	1.42	83.45	98.38	1.44	1.00	100.00	0.00	82.49	98.25	1.54	7.49	2.76	7.23	82.75	98.61	1.26
ViT_b_16	WaNet	72.31	96.47	2.93	77.88	60.25	32.34	75.54	12.14	64.07	57.96	0.34	54.49	77.88	61.56	31.29	72.08	73.05	21.89	82.27	84.82	13.26	N/A	N/A	N/A	86.11	89.42	9.43	N/A	N/A	N/A	72.31	96.47	2.93	1.20	88.79	0.30	1.00	100.00	0.00	71.88	95.95	3.31	69.26	14.38	57.05	71.72	95.56	3.68
ViT_b_16	InputAware	75.43	91.62	7.42	79.65	91.63	7.62	76.61	19.64	60.69	57.27	1.17	49.80	79.47	91.22	7.95	75.50	91.48	7.76	83.45	72.74	24.75	N/A	N/A	N/A	86.94	79.91	18.53	42.48	98.80	0.96	75.49	93.08	6.25	35.47	36.29	12.05	N/A	N/A	N/A	74.02	96.01	3.64	65.11	45.12	41.41	74.11	96.05	3.57
ViT_b_16	BPP	74.09	99.55	0.37	77.97	99.28	0.67	75.22	98.54	1.09	56.76	25.33	36.58	78.14	99.51	0.45	72.73	99.41	0.51	83.35	99.59	0.33	N/A	N/A	N/A	87.47	99.74	0.24	43.03	99.48	0.25	74.09	99.55	0.37	37.46	64.59	1.64	N/A	N/A	N/A	N/A	N/A	N/A	70.74	88.25	9.70	N/A	N/A	N/A
ViT_b_16	TrojanNN	84.11	99.97	0.03	82.88	99.30	0.67	71.95	95.04	1.85	6.15	0.00	5.82	82.72	99.93	0.07	84.11	99.97	0.03	84.18	99.95	0.05	N/A	N/A	N/A	87.48	100.00	0.00	N/A	N/A	N/A	84.11	99.97	0.03	83.95	99.98	0.02	1.00	0.00	1.01	82.02	99.98	0.02	7.52	2.64	6.37	80.84	99.96	0.04
ConvNext_tiny	BadNet	70.59	88.02	9.81	67.17	13.73	58.82	67.06	13.00	57.82	63.16	24.61	51.13	37.46	0.55	37.13	66.56	13.58	59.05	68.29	88.53	9.04	N/A	N/A	N/A	29.01	0.00	29.35	44.61	84.33	11.21	70.59	88.03	9.80	61.06	72.76	20.09	21.95	2.69	21.64	69.39	87.60	10.06	68.55	18.70	55.28	70.04	87.17	10.56
ConvNext_tiny	Blended	72.80	99.34	0.54	67.67	92.76	5.59	65.61	81.84	12.11	61.88	92.81	5.13	34.43	3.58	20.46	67.43	98.92	0.84	70.77	99.17	0.58	N/A	N/A	N/A	74.57	99.80	0.16	46.63	99.93	0.05	72.80	99.34	0.54	1.67	0.00	1.37	23.12	95.62	1.43	72.34	98.89	0.90	69.84	97.98	1.63	72.41	99.13	0.70
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	68.69	4.34	68.49	66.49	0.10	66.42	65.67	0.23	65.47	62.46	0.05	62.35	66.62	0.10	66.51	63.11	0.34	63.29	66.64	5.75	66.42	N/A	N/A	N/A	68.91	8.06	68.69	45.21	13.75	44.79	68.69	4.34	68.49	44.44	31.24	44.05	3.73	12.93	3.75	68.30	3.49	68.09	68.38	0.13	68.32	68.75	3.95	68.57
ConvNext_tiny	SSBA	72.19	96.47	2.99	67.25	42.93	38.96	65.65	20.19	48.39	62.56	45.39	34.69	14.67	0.78	14.73	68.34	85.28	11.26	69.64	95.18	3.74	N/A	N/A	N/A	74.46	89.69	8.08	44.15	95.58	3.17	72.19	96.47	2.99	55.37	96.53	2.44	13.51	42.59	8.97	71.15	95.63	3.64	69.37	80.32	14.40	71.79	96.78	2.74
ConvNext_tiny	WaNet	60.13	93.19	5.54	65.71	14.49	56.23	62.90	2.98	57.61	65.71	25.78	49.80	64.81	8.48	57.52	55.37	11.47	46.77	68.60	80.18	15.74	N/A	N/A	N/A	68.25	0.05	68.18	48.40	67.29	22.75	60.14	93.19	5.54	48.03	93.52	4.29	18.59	22.57	17.17	59.26	89.21	8.64	63.09	26.24	47.02	60.22	88.16	9.56
ConvNext_tiny	InputAware	63.42	95.11	3.96	67.62	97.07	2.43	65.21	86.26	10.63	67.98	97.27	2.21	66.64	86.22	9.98	58.31	25.61	39.03	70.31	89.33	8.60	N/A	N/A	N/A	73.95	93.45	5.52	49.21	99.03	0.70	63.55	96.53	2.78	48.13	99.49	0.39	17.17	59.66	7.13	62.66	92.81	5.82	66.15	95.76	3.52	62.54	93.74	5.02
ConvNext_tiny	BPP	63.41	99.51	0.42	66.06	97.58	2.10	62.87	94.04	4.87	65.42	94.58	4.48	66.09	96.46	2.99	58.61	0.07	53.57	70.93	97.71	1.94	N/A	N/A	N/A	74.51	99.02	0.84	47.61	82.90	13.30	63.41	99.51	0.42	51.54	99.78	0.17	19.47	13.65	17.29	61.56	98.98	0.90	64.82	1.49	33.73	62.63	99.48	0.42
ConvNext_tiny	TrojanNN	72.95	99.97	0.03	67.47	97.61	1.94	55.75	19.31	29.47	62.98	96.14	3.29	43.25	0.21	21.51	67.29	30.54	37.55	70.69	100.00	0.00	N/A	N/A	N/A	74.83	100.00	0.00	46.97	100.00	0.00	72.96	99.97	0.03	50.68	99.99	0.01	20.56	93.46	2.45	71.55	99.65	0.30	70.29	0.10	44.41	72.40	99.97	0.03

CIFAR-100 Leaderboard