BackdoorBench

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	98.60	12.69	84.54	98.51	0.49	98.16	98.45	2.21	96.09	98.50	0.53	98.08	97.48	0.00	97.49	96.79	0.00	96.72	97.05	0.09	96.98	N/A	N/A	N/A	20.92	7.69	19.05	85.74	0.00	86.17	98.52	0.77	97.71	40.32	0.00	40.51	89.07	0.00	89.16	98.12	14.95	82.84	95.99	0.09	96.02	98.53	16.59	81.60
PreActResNet-18	Blended	98.73	61.04	30.32	98.50	59.72	33.06	98.63	60.73	32.04	98.54	60.68	32.36	98.59	63.30	30.33	97.70	60.81	28.75	97.23	59.74	31.99	N/A	N/A	N/A	27.40	31.59	11.44	87.59	0.00	84.92	97.55	67.15	25.58	32.46	0.00	17.04	86.67	19.37	44.69	98.19	62.39	28.00	9.84	0.00	9.63	98.48	64.14	29.64
PreActResNet-18	LC	98.14	0.02	98.17	98.16	0.01	98.14	97.93	0.01	97.90	98.04	0.01	98.07	98.14	0.02	98.17	98.05	0.01	98.04	96.97	0.01	97.02	N/A	N/A	N/A	21.15	1.61	20.99	77.33	0.00	77.14	98.12	0.02	98.15	10.44	0.00	10.81	80.33	1.81	78.53	97.05	0.01	97.10	92.66	0.00	92.84	98.09	0.02	98.07
PreActResNet-18	SIG	98.91	54.37	35.08	98.69	56.98	35.74	98.84	56.11	35.78	98.68	56.60	36.25	98.69	58.09	35.08	91.21	33.44	45.88	96.90	56.02	31.77	N/A	N/A	N/A	48.47	3.60	16.87	83.44	0.00	76.55	98.75	57.81	34.18	21.05	0.00	10.38	87.59	0.17	21.91	98.40	58.80	31.53	94.07	0.57	30.61	98.62	58.77	34.65
PreActResNet-18	LF	98.13	78.90	17.96	98.19	75.00	21.46	98.06	76.01	19.75	98.21	77.14	19.52	97.23	0.18	87.29	92.49	11.91	57.22	97.11	72.03	21.90	N/A	N/A	N/A	21.65	36.70	9.05	83.67	0.00	83.34	97.89	72.82	23.26	25.92	0.00	14.46	86.71	21.87	67.33	96.31	80.11	16.72	95.44	29.08	45.74	98.45	74.80	21.93
PreActResNet-18	SSBA	98.73	35.12	56.65	98.52	30.22	61.78	98.73	31.50	60.45	98.57	32.25	60.19	96.42	0.50	84.25	94.11	2.00	74.07	96.78	36.33	57.30	N/A	N/A	N/A	21.92	34.29	8.29	90.78	0.00	88.15	98.54	35.05	57.33	6.74	0.00	7.26	87.95	18.23	66.30	96.30	36.70	47.60	62.64	0.00	50.06	98.73	39.61	52.34
PreActResNet-18	WaNet	97.87	0.00	97.61	98.33	0.00	98.42	97.82	0.01	97.64	98.31	0.00	98.50	97.87	0.00	97.61	97.87	0.00	97.61	96.88	0.15	96.63	N/A	N/A	N/A	9.73	19.23	7.66	90.48	0.00	90.86	97.68	0.02	97.39	70.42	0.39	70.14	88.54	0.01	88.16	97.62	0.00	97.43	96.94	0.00	96.74	97.83	0.00	97.59
PreActResNet-18	InputAware	98.09	18.88	76.98	98.53	10.29	84.22	98.17	0.78	85.43	98.36	12.35	82.56	97.30	0.28	91.20	90.90	0.46	81.52	97.58	18.48	75.88	N/A	N/A	N/A	4.89	80.19	2.35	78.00	0.00	76.70	98.54	63.10	25.25	22.26	0.00	6.33	89.13	86.10	12.98	97.85	63.12	22.16	93.93	0.01	16.98	98.35	48.52	27.57
PreActResNet-18	BPP	97.61	11.19	82.09	98.84	6.94	87.76	98.76	1.96	91.56	98.70	9.25	85.76	97.61	11.19	82.09	94.15	0.05	86.23	98.04	2.94	90.54	N/A	N/A	N/A	3.01	69.21	1.96	79.83	0.01	74.06	97.71	11.26	81.92	31.62	0.00	29.41	88.31	20.89	66.70	97.05	9.90	82.71	97.48	0.01	90.74	97.26	8.04	84.49
PreActResNet-18	TrojanNN	98.27	93.99	4.51	98.30	90.77	7.41	97.99	35.40	44.46	95.44	1.69	81.38	74.77	1.17	64.11	96.37	11.16	65.55	96.96	85.98	8.79	N/A	N/A	N/A	13.94	0.00	13.74	80.63	0.00	80.32	98.26	83.63	13.64	21.77	0.00	21.34	87.36	48.15	37.90	97.28	85.40	11.75	90.78	0.01	79.19	98.27	94.92	3.54
VGG19_BN	BadNet	97.76	2.68	94.11	97.75	0.44	95.91	98.08	0.13	96.98	97.84	1.49	95.02	97.76	2.68	94.11	95.85	0.01	95.77	95.76	0.01	95.77	N/A	N/A	N/A	13.91	0.00	14.00	52.59	0.00	52.76	N/A	N/A	N/A	5.51	0.00	5.53	77.85	0.72	78.67	97.70	3.52	93.17	95.21	0.10	92.44	97.66	3.15	93.82
VGG19_BN	Blended	97.70	64.61	31.58	98.00	61.82	33.60	97.97	59.34	35.12	97.65	63.93	32.21	97.70	64.61	31.58	95.84	44.96	43.90	96.57	56.82	35.66	N/A	N/A	N/A	14.10	0.00	10.51	53.03	0.00	50.02	N/A	N/A	N/A	0.48	100.00	0.00	88.12	56.80	33.95	97.57	71.21	26.09	93.67	50.06	29.82	97.32	64.52	31.66
VGG19_BN	LC	97.80	0.01	97.72	97.93	0.02	97.77	97.97	0.02	97.87	97.85	0.00	97.80	96.44	0.01	96.48	97.80	0.01	97.72	96.86	0.06	96.88	N/A	N/A	N/A	3.56	0.00	3.58	53.07	0.00	53.27	97.47	0.01	97.30	5.99	0.00	6.02	82.34	0.27	83.48	97.93	0.03	97.73	96.56	0.04	96.36	97.93	0.00	97.85
VGG19_BN	SIG	97.66	28.74	48.39	97.99	25.69	48.50	98.11	28.50	49.35	97.88	25.43	50.32	93.82	1.19	24.86	96.94	17.88	51.23	96.40	28.39	45.60	N/A	N/A	N/A	16.25	0.00	16.03	56.34	0.00	25.52	97.55	30.22	47.57	1.67	0.00	1.67	92.73	7.28	40.29	95.82	23.07	47.96	96.87	4.14	46.66	97.71	29.16	48.04
VGG19_BN	LF	97.64	0.06	97.63	97.75	0.02	97.74	97.86	0.01	97.85	97.64	0.02	97.63	97.64	0.06	97.63	97.64	0.06	97.63	96.25	0.11	96.24	N/A	N/A	N/A	8.38	0.00	8.42	51.87	0.00	52.05	97.46	0.04	97.45	6.63	0.00	6.67	75.48	0.48	75.43	96.80	0.29	96.79	96.21	0.01	96.24	97.71	0.04	97.70
VGG19_BN	SSBA	97.37	32.46	62.47	97.27	29.79	64.98	97.55	17.91	74.80	97.08	30.91	63.82	97.37	32.47	62.46	93.06	1.59	81.54	96.37	23.40	63.92	N/A	N/A	N/A	13.86	0.00	13.93	52.19	0.00	50.43	97.15	33.79	61.30	0.48	100.00	0.00	5.70	0.00	5.73	96.78	30.01	64.58	96.08	2.09	78.04	97.36	28.07	66.63
VGG19_BN	WaNet	96.90	0.00	96.44	98.04	0.00	97.65	98.27	0.01	97.90	97.97	0.01	97.64	96.90	0.00	96.44	96.90	0.00	96.44	96.30	0.33	95.51	N/A	N/A	N/A	3.09	0.00	3.12	53.47	0.00	53.67	96.87	0.00	96.37	3.75	0.00	3.83	76.90	0.74	76.80	96.26	0.02	95.63	96.98	0.02	96.22	96.63	0.00	96.21
VGG19_BN	InputAware	96.50	0.06	94.85	97.52	0.04	95.90	97.69	0.07	96.06	97.59	0.03	95.95	97.38	0.03	95.58	97.38	0.03	95.58	96.45	0.95	93.09	N/A	N/A	N/A	8.69	0.00	8.72	53.38	0.00	53.54	97.44	0.03	95.58	3.56	0.00	3.58	59.15	2.26	58.66	96.47	0.03	94.57	96.48	0.10	94.24	97.25	0.02	95.27
VGG19_BN	BPP	97.05	0.06	90.20	98.35	0.06	92.28	98.57	0.10	92.69	98.12	0.07	92.25	97.05	0.06	90.20	97.16	0.02	90.76	96.67	0.45	89.26	N/A	N/A	N/A	9.09	0.36	8.97	52.90	0.00	50.84	96.86	0.05	89.96	5.00	0.00	5.03	91.77	0.86	85.97	96.87	0.07	89.54	97.04	0.26	90.65	96.94	0.04	89.67
VGG19_BN	TrojanNN	97.85	62.46	34.10	97.85	66.53	30.65	97.77	61.36	34.73	97.87	64.73	32.32	95.53	0.31	79.67	97.22	8.25	76.11	96.26	31.03	52.21	N/A	N/A	N/A	10.93	0.00	10.99	52.10	0.00	51.53	97.79	64.85	32.11	5.57	0.00	5.53	83.34	89.40	7.69	96.97	65.86	30.68	82.58	1.30	50.99	97.77	63.77	33.09
ViT_b_16	BadNet	98.88	67.87	31.65	99.45	55.51	44.29	99.09	4.35	90.77	6.74	0.00	6.28	99.45	58.17	41.58	98.88	67.88	31.64	99.27	49.22	50.70	N/A	N/A	N/A	99.45	81.46	18.50	69.51	0.00	70.85	N/A	N/A	N/A	99.31	71.23	28.46	5.70	0.00	5.73	98.76	64.77	34.69	10.15	0.00	10.33	98.73	64.81	34.69
ViT_b_16	Blended	99.03	53.71	44.00	99.40	50.33	46.23	98.81	0.55	55.66	6.53	0.00	5.26	99.03	53.71	44.00	98.95	51.19	46.31	98.84	53.75	43.33	N/A	N/A	N/A	99.33	67.77	31.49	70.65	0.00	57.88	N/A	N/A	N/A	91.27	40.18	48.41	5.23	0.00	5.25	98.94	55.01	42.68	10.27	0.00	8.37	99.07	53.62	43.87
ViT_b_16	LC	99.49	0.00	99.49	99.44	0.00	99.46	98.37	0.01	98.40	4.99	0.00	5.01	99.48	0.00	99.49	99.48	0.00	99.49	99.26	0.03	99.24	N/A	N/A	N/A	99.33	0.02	99.24	62.24	0.00	62.12	99.48	0.00	99.49	99.41	0.00	99.44	5.23	0.00	5.25	99.45	0.00	99.47	10.41	0.00	10.37	99.40	0.01	99.42
ViT_b_16	SIG	99.17	2.93	60.91	99.33	2.47	60.07	98.63	0.30	55.86	89.79	0.48	43.99	99.17	2.93	60.91	98.87	2.46	59.08	99.25	3.45	55.91	N/A	N/A	N/A	99.34	1.54	66.52	25.07	0.00	19.27	99.17	2.93	60.91	5.23	0.00	5.25	5.23	0.00	5.25	98.90	4.14	57.29	10.73	0.00	10.32	99.16	3.09	59.98
ViT_b_16	LF	99.13	0.06	99.13	99.28	0.00	99.28	98.51	0.00	98.50	4.99	0.00	5.01	98.72	0.00	98.71	98.80	0.04	98.84	98.81	0.00	98.81	N/A	N/A	N/A	99.31	0.00	99.31	58.01	0.00	58.32	99.12	0.06	99.12	98.16	0.04	98.17	5.46	0.00	5.49	99.06	0.06	99.06	10.12	0.00	10.17	99.11	0.06	99.11
ViT_b_16	SSBA	97.81	39.58	53.25	98.16	33.82	58.78	97.27	9.11	68.93	92.11	1.74	72.00	97.81	39.58	53.25	95.20	32.90	54.73	98.84	23.97	73.29	N/A	N/A	N/A	98.99	34.84	62.97	67.79	0.00	64.10	97.81	39.60	53.24	97.89	41.69	52.13	4.99	0.00	5.01	97.78	40.45	52.51	95.87	1.58	79.87	92.72	42.37	51.20
ViT_b_16	WaNet	81.95	0.38	81.79	84.13	0.09	83.46	84.30	0.01	83.91	74.37	0.51	74.16	81.95	0.38	81.79	80.32	0.20	80.06	98.96	0.15	98.68	N/A	N/A	N/A	99.37	0.04	99.20	70.22	0.00	70.41	81.96	0.38	81.79	42.15	0.03	42.74	3.56	0.00	3.56	81.85	0.38	81.68	77.21	0.00	77.25	81.04	0.49	80.76
ViT_b_16	InputAware	97.89	55.51	42.92	99.08	44.36	55.37	99.22	0.60	94.42	5.70	0.00	5.84	99.28	36.07	63.31	98.33	23.40	73.94	99.06	52.31	47.18	N/A	N/A	N/A	99.32	62.82	36.71	69.45	0.00	68.27	98.25	25.04	72.19	98.65	68.95	30.46	N/A	N/A	N/A	97.84	31.59	65.54	96.20	0.08	92.61	98.12	26.98	70.15
ViT_b_16	BPP	31.75	0.02	22.95	34.05	0.00	23.37	33.62	0.00	24.40	30.48	0.00	22.31	31.75	0.02	22.95	31.75	0.02	22.95	99.28	33.81	65.21	N/A	N/A	N/A	99.27	43.38	55.74	71.83	0.00	57.75	31.75	0.02	22.95	29.68	0.00	22.08	N/A	N/A	N/A	N/A	N/A	N/A	29.18	0.06	21.43	N/A	N/A	N/A
ViT_b_16	TrojanNN	87.74	48.09	40.68	89.37	44.07	43.81	89.49	2.67	70.92	75.29	0.15	51.85	87.76	48.09	40.67	86.92	45.86	42.58	99.17	92.58	7.41	N/A	N/A	N/A	99.34	97.08	2.92	17.60	0.00	7.17	87.74	48.09	40.68	69.32	26.79	28.63	5.46	0.00	5.49	87.47	46.63	41.79	75.15	3.11	47.36	87.12	50.81	38.28
ConvNext_tiny	BadNet	97.55	42.91	56.08	97.83	13.84	84.84	98.05	0.04	97.59	98.14	17.84	80.88	98.23	3.28	95.00	96.82	4.63	91.75	98.11	0.02	98.07	N/A	N/A	N/A	76.01	0.00	76.39	80.90	0.00	81.14	N/A	N/A	N/A	94.15	36.13	61.89	3.56	0.00	3.58	97.43	43.59	55.43	97.23	12.71	85.69	96.86	35.54	63.31
ConvNext_tiny	Blended	97.79	54.84	41.14	98.09	50.10	45.22	97.74	11.74	53.52	97.69	51.06	44.44	97.79	54.84	41.14	88.79	41.03	36.49	98.15	58.67	38.45	N/A	N/A	N/A	78.15	15.18	39.09	77.38	0.00	63.13	N/A	N/A	N/A	83.25	38.91	29.24	34.63	0.00	20.72	97.91	55.12	40.91	97.34	41.85	47.41	97.24	54.61	41.11
ConvNext_tiny	LC	97.59	0.01	97.58	98.16	0.01	98.11	97.79	0.02	97.76	98.06	0.01	98.04	97.59	0.01	97.58	97.59	0.01	97.58	97.79	0.02	97.66	N/A	N/A	N/A	98.08	0.02	98.00	72.69	0.00	73.30	97.59	0.01	97.58	5.46	0.00	5.49	68.45	0.00	68.42	97.48	0.01	97.42	97.30	0.16	97.36	97.12	0.01	97.08
ConvNext_tiny	SIG	97.59	35.07	44.14	98.05	11.30	49.44	97.97	1.41	52.88	97.70	10.53	52.28	19.44	0.00	19.43	94.33	18.26	38.04	98.15	4.18	55.31	N/A	N/A	N/A	74.17	3.88	39.68	79.46	0.00	59.41	97.59	35.07	44.14	97.97	36.09	47.25	81.48	9.49	28.78	97.45	27.12	43.35	97.58	10.56	49.11	97.19	32.74	42.73
ConvNext_tiny	LF	97.17	0.01	97.15	97.53	0.02	97.52	97.62	0.03	97.61	97.70	0.01	97.69	95.64	0.13	95.62	97.17	0.01	97.15	98.04	0.04	98.04	N/A	N/A	N/A	79.71	0.02	80.02	78.87	0.00	79.23	97.17	0.01	97.15	57.85	0.00	58.12	5.70	0.00	5.73	97.14	0.02	97.13	96.99	0.03	96.98	97.15	0.02	97.14
ConvNext_tiny	SSBA	98.12	42.28	54.30	98.32	31.77	63.93	97.95	1.62	81.90	97.53	41.48	54.31	95.87	2.31	82.63	92.01	20.82	65.37	95.95	29.97	63.06	N/A	N/A	N/A	76.29	0.37	60.41	74.67	0.00	70.56	98.12	42.28	54.30	84.09	26.99	55.82	5.70	0.00	5.73	98.07	38.97	57.61	97.68	10.75	69.22	97.77	42.66	54.14
ConvNext_tiny	WaNet	97.56	0.02	96.82	98.54	0.01	98.41	98.27	0.00	98.15	98.73	0.00	98.52	97.56	0.02	96.82	97.25	0.01	96.60	97.93	0.14	97.27	N/A	N/A	N/A	75.89	0.00	74.89	82.02	0.00	82.29	97.56	0.02	96.82	68.14	0.00	67.53	77.59	2.64	76.94	97.48	0.03	97.01	98.27	0.02	97.95	97.40	0.01	96.60
ConvNext_tiny	InputAware	96.47	6.10	87.56	98.03	1.30	93.58	97.97	0.21	94.53	98.16	2.82	92.32	97.70	6.63	88.89	96.73	1.33	92.26	98.02	16.47	79.99	N/A	N/A	N/A	57.53	0.24	55.13	77.38	0.00	76.34	97.70	6.63	88.89	78.76	3.25	72.09	77.79	0.03	73.05	97.54	6.81	88.66	97.82	0.05	93.77	97.44	7.19	87.95
ConvNext_tiny	BPP	97.97	2.86	91.34	98.41	0.15	92.63	98.23	0.02	91.85	98.35	0.71	92.28	97.97	2.86	91.34	95.94	2.83	88.68	98.08	0.46	92.72	N/A	N/A	N/A	98.07	3.09	91.77	79.69	0.00	72.14	97.97	2.86	91.34	76.83	0.79	67.61	5.94	0.00	5.97	97.95	3.23	91.10	97.42	0.00	90.56	98.00	3.03	91.01
ConvNext_tiny	TrojanNN	97.59	80.87	17.65	97.95	62.20	35.80	97.91	4.87	78.27	97.85	75.00	23.99	94.51	2.98	77.49	88.06	7.80	57.96	98.08	71.49	25.39	N/A	N/A	N/A	98.24	87.72	11.76	70.27	0.00	64.87	97.59	80.87	17.65	40.25	4.88	25.16	84.56	0.29	65.96	97.22	78.57	19.65	97.75	33.60	58.47	97.05	79.96	18.13

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	98.70	44.63	31.13	98.72	6.31	93.15	98.77	5.05	92.97	98.80	1.66	97.41	98.54	0.01	98.54	95.32	0.00	95.78	96.82	43.02	55.71	N/A	N/A	N/A	0.48	98.36	0.00	81.18	0.00	81.56	98.75	52.45	47.38	37.08	0.00	36.92	89.03	0.00	89.53	97.86	6.74	91.54	93.29	0.00	93.52	98.75	64.42	35.47
PreActResNet-18	Blended	98.95	90.32	7.23	98.76	88.55	9.76	98.74	87.67	9.75	98.74	89.67	8.85	97.67	14.57	55.82	96.00	70.48	17.14	96.99	85.06	12.98	N/A	N/A	N/A	25.66	0.18	5.93	79.20	0.00	77.83	98.42	92.74	5.96	34.47	0.00	22.24	84.09	10.98	44.28	97.50	95.31	3.75	91.96	46.68	17.53	98.69	93.79	5.00
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	98.08	92.63	6.77	98.22	90.87	8.26	97.98	91.79	7.22	98.25	92.09	7.22	97.79	0.27	88.58	88.82	47.49	31.54	97.06	90.64	7.96	N/A	N/A	N/A	15.60	0.09	7.52	79.31	0.00	79.05	97.86	97.14	2.57	29.46	23.95	14.78	85.92	55.96	38.19	97.84	97.01	2.67	93.54	44.67	22.16	98.32	89.17	9.89
PreActResNet-18	SSBA	98.58	85.76	13.17	98.57	78.04	20.68	98.71	78.41	18.50	98.59	81.79	17.17	97.40	0.05	90.21	92.77	9.90	60.60	97.37	69.83	28.16	N/A	N/A	N/A	8.28	96.75	0.01	73.02	0.00	71.91	98.27	83.96	14.92	5.69	0.00	6.03	86.39	53.68	38.61	97.37	87.45	11.11	96.89	6.68	56.42	98.54	85.86	13.04
PreActResNet-18	WaNet	98.67	60.37	39.00	99.32	43.52	55.97	98.84	18.04	78.36	99.25	48.87	50.61	99.35	15.66	83.60	93.31	0.00	92.98	96.48	1.49	95.23	N/A	N/A	N/A	0.64	97.53	0.03	79.99	0.00	80.37	75.64	85.79	13.40	86.02	55.91	37.89	88.73	3.59	85.50	98.20	57.79	41.03	98.61	0.00	97.72	98.64	26.17	72.44
PreActResNet-18	InputAware	97.78	73.84	26.07	97.93	57.46	42.20	97.72	7.28	85.31	97.89	64.37	35.29	96.08	0.08	93.37	95.11	0.01	90.31	97.51	55.96	41.85	N/A	N/A	N/A	16.07	93.03	2.32	78.14	0.00	77.83	98.19	0.01	83.46	84.01	89.13	9.72	87.80	72.80	23.83	98.03	34.18	62.69	97.76	1.20	83.73	98.32	0.02	83.99
PreActResNet-18	BPP	98.32	60.75	38.16	98.90	66.87	32.41	98.92	10.66	73.95	98.78	71.64	27.79	98.32	60.75	38.16	94.77	0.00	88.15	97.67	29.08	66.71	N/A	N/A	N/A	12.26	7.06	10.88	80.55	0.00	75.22	98.17	48.22	50.34	79.78	25.09	49.48	88.42	46.93	45.89	98.09	0.03	89.87	96.63	0.03	89.45	98.13	0.05	90.64
PreActResNet-18	TrojanNN	98.67	99.85	0.15	98.65	99.55	0.45	98.08	78.47	16.98	97.59	1.28	84.12	85.97	0.50	76.79	96.39	88.97	9.59	96.88	99.62	0.25	N/A	N/A	N/A	16.08	0.00	15.39	79.38	0.00	78.64	97.34	97.40	2.35	33.10	0.00	29.86	86.38	84.29	14.60	97.16	98.35	1.48	93.55	0.09	80.88	97.37	99.91	0.09
VGG19_BN	BadNet	97.76	82.86	16.73	98.04	78.06	21.17	98.08	58.21	36.98	97.86	80.53	18.96	97.85	74.75	24.03	96.56	0.00	96.60	96.05	71.08	27.26	N/A	N/A	N/A	3.09	0.00	3.10	52.92	0.00	53.22	N/A	N/A	N/A	4.73	0.00	4.73	70.94	2.92	71.79	97.61	39.24	58.97	95.61	2.30	83.79	97.78	82.80	16.79
VGG19_BN	Blended	97.40	91.90	7.18	97.44	90.86	8.03	97.60	89.32	9.16	97.44	91.67	7.34	95.47	58.89	30.51	93.66	60.61	28.51	96.97	87.20	11.19	N/A	N/A	N/A	25.83	0.00	11.30	51.44	0.00	12.94	N/A	N/A	N/A	0.48	100.00	0.00	80.15	89.51	7.83	97.09	94.21	4.89	32.76	0.45	10.84	97.32	88.47	9.83
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	96.98	0.43	96.97	97.28	0.02	97.27	97.35	0.02	97.33	97.34	0.02	97.33	96.98	0.43	96.97	96.73	0.17	96.71	95.92	0.23	95.90	N/A	N/A	N/A	7.73	0.00	7.76	54.96	0.00	55.16	97.07	0.45	97.06	4.99	0.00	5.01	84.80	0.39	84.73	96.83	0.69	96.82	95.04	0.00	95.02	96.67	0.51	96.66
VGG19_BN	SSBA	97.34	86.17	12.41	97.43	84.30	14.14	97.63	71.38	25.59	97.36	86.39	12.24	95.37	21.95	50.80	96.98	16.42	71.90	96.75	70.82	24.18	N/A	N/A	N/A	5.70	0.00	5.73	52.53	0.00	51.66	97.07	72.73	24.97	1.02	0.00	0.98	82.73	66.50	19.13	96.86	86.60	11.79	96.10	23.09	46.65	97.15	86.71	11.96
VGG19_BN	WaNet	97.99	0.03	97.20	98.65	0.01	98.29	98.56	0.02	98.08	98.63	0.00	98.16	97.99	0.03	97.20	97.47	0.00	97.11	96.26	1.96	93.61	N/A	N/A	N/A	8.57	0.00	8.59	52.66	0.00	52.90	98.11	0.02	97.42	0.48	100.00	0.00	95.61	0.53	94.17	97.17	0.02	95.64	95.93	0.00	94.91	97.66	0.02	96.67
VGG19_BN	InputAware	97.32	16.79	75.51	97.74	20.45	66.09	97.98	5.89	79.22	97.82	21.11	64.69	97.53	0.02	95.50	91.45	0.18	85.00	95.87	11.96	80.95	N/A	N/A	N/A	10.47	0.00	10.12	53.38	0.00	53.46	96.11	42.50	49.64	3.71	0.00	3.75	83.69	0.10	82.51	95.13	43.52	49.27	95.79	0.58	89.17	95.69	41.59	47.39
VGG19_BN	BPP	96.83	0.12	91.24	98.14	0.00	92.87	98.16	0.00	92.80	97.86	0.00	92.74	96.83	0.12	91.24	96.52	0.02	91.41	96.44	9.40	83.32	N/A	N/A	N/A	0.48	100.00	0.00	53.35	0.00	51.22	96.79	0.13	91.20	5.91	0.00	5.78	94.01	13.96	78.80	96.48	0.26	90.66	96.88	0.00	92.11	96.48	0.14	90.80
VGG19_BN	TrojanNN	98.13	97.88	1.69	98.04	97.86	1.73	98.27	96.86	2.23	98.10	97.80	1.72	95.48	0.07	81.86	97.40	11.92	71.00	96.60	93.68	4.59	N/A	N/A	N/A	3.09	0.00	3.10	51.66	0.00	48.15	98.14	84.07	13.09	0.48	100.00	0.00	75.05	94.31	1.00	97.32	91.19	6.40	3.56	0.00	3.58	98.08	97.92	1.63
ViT_b_16	BadNet	98.96	86.40	13.51	99.36	82.65	17.26	99.45	81.61	18.35	93.33	0.00	93.48	99.32	82.99	16.91	98.96	86.42	13.49	99.05	84.57	15.35	N/A	N/A	N/A	99.25	86.01	13.88	62.18	0.00	62.53	N/A	N/A	N/A	65.44	57.76	18.51	5.23	0.00	5.25	98.73	86.68	13.22	10.80	0.00	10.86	98.92	86.51	13.40
ViT_b_16	Blended	94.23	51.17	37.18	95.98	56.45	37.13	95.38	33.29	45.93	84.19	5.88	44.92	95.51	59.57	35.19	94.23	51.15	37.21	99.14	87.70	12.07	N/A	N/A	N/A	99.34	92.22	7.76	69.44	0.00	56.77	N/A	N/A	N/A	44.92	3.29	10.13	3.56	0.00	3.58	93.10	52.13	36.75	87.44	13.21	48.33	93.49	53.10	36.59
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	36.73	0.05	36.91	39.02	0.43	39.19	37.45	0.19	37.63	30.84	0.01	30.99	36.73	0.05	36.91	36.73	0.05	36.91	99.05	0.01	99.10	N/A	N/A	N/A	99.22	0.02	99.23	69.90	0.00	70.21	36.73	0.05	36.91	20.25	0.14	20.34	5.23	0.00	5.25	36.96	0.06	37.14	31.05	0.80	31.17	36.46	0.10	36.63
ViT_b_16	SSBA	97.02	72.66	26.05	98.09	60.93	37.00	97.94	20.35	68.58	85.46	1.33	74.49	95.85	43.06	49.90	94.77	67.30	29.30	98.62	82.32	17.34	N/A	N/A	N/A	98.93	90.02	9.69	20.26	0.00	18.13	97.01	72.65	26.05	72.34	25.81	49.04	5.46	0.00	5.49	96.06	72.49	25.58	89.69	13.73	63.99	96.66	74.01	24.67
ViT_b_16	WaNet	99.39	0.35	98.93	99.49	0.00	99.36	99.26	0.00	99.17	94.26	0.02	93.66	99.39	0.35	98.93	98.76	0.14	98.74	98.78	22.69	75.79	N/A	N/A	N/A	99.25	32.63	66.40	70.81	0.00	70.96	99.39	0.35	98.93	99.23	7.09	92.28	5.70	0.00	5.72	99.37	0.38	98.93	97.61	0.02	97.26	99.37	0.32	98.93
ViT_b_16	InputAware	94.73	49.86	47.69	99.22	39.16	60.76	98.92	0.14	77.50	6.52	0.00	6.55	99.22	40.27	59.66	98.46	40.28	59.58	99.09	65.13	34.53	N/A	N/A	N/A	99.35	53.39	46.40	72.58	0.00	72.76	98.47	46.79	53.07	99.15	71.84	28.07	N/A	N/A	N/A	97.71	49.68	49.90	86.02	0.01	85.53	98.43	46.30	53.56
ViT_b_16	BPP	86.60	29.96	57.39	99.47	65.35	34.32	99.51	30.19	68.92	86.71	0.05	76.86	86.60	29.96	57.39	86.84	28.22	58.71	99.32	87.34	12.54	N/A	N/A	N/A	99.45	92.53	7.44	N/A	N/A	N/A	86.60	29.96	57.39	43.59	19.66	25.47	N/A	N/A	N/A	N/A	N/A	N/A	95.74	0.02	87.66	N/A	N/A	N/A
ViT_b_16	TrojanNN	96.03	94.46	4.84	97.01	92.70	6.72	96.39	8.58	51.69	86.85	0.26	66.86	96.65	93.48	5.99	94.18	83.79	13.74	99.12	99.54	0.46	N/A	N/A	N/A	99.52	99.71	0.29	46.13	0.00	18.16	96.03	94.46	4.84	96.52	95.60	4.12	3.09	0.00	3.10	95.30	94.31	4.69	85.59	7.18	61.50	95.82	94.85	4.53
ConvNext_tiny	BadNet	97.45	69.22	30.14	98.10	54.38	45.04	97.99	0.02	97.50	97.94	72.51	26.95	98.10	0.55	97.56	94.62	2.13	92.54	98.04	77.95	21.52	N/A	N/A	N/A	44.05	0.81	44.26	76.89	0.00	77.20	N/A	N/A	N/A	97.49	72.70	26.56	5.23	0.00	5.25	97.40	67.41	31.85	97.15	36.92	62.17	97.07	56.37	42.83
ConvNext_tiny	Blended	97.72	84.35	15.16	98.28	77.53	21.19	97.94	26.64	43.41	97.41	76.03	22.02	93.33	29.93	51.32	89.90	45.66	34.47	98.48	83.92	15.31	N/A	N/A	N/A	76.14	53.34	34.89	79.31	0.00	62.30	N/A	N/A	N/A	97.85	85.53	13.80	5.23	0.00	5.25	97.46	84.57	14.84	97.95	0.08	43.75	96.82	84.08	15.32
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	97.69	0.02	97.68	98.15	0.01	98.14	98.04	0.00	98.03	97.49	0.03	97.48	41.73	0.14	41.93	97.69	0.02	97.68	97.62	0.21	97.61	N/A	N/A	N/A	68.54	0.00	68.86	82.95	0.00	83.35	97.69	0.02	97.68	98.06	0.15	98.05	82.62	0.02	83.02	97.60	0.02	97.59	97.28	0.02	97.27	97.21	0.04	97.19
ConvNext_tiny	SSBA	97.99	84.95	14.39	98.16	63.44	34.73	97.66	17.37	66.79	97.78	72.98	25.57	96.02	29.97	60.91	95.55	50.00	43.99	98.18	72.42	26.51	N/A	N/A	N/A	73.42	8.12	52.89	79.73	0.00	72.98	97.99	84.95	14.39	77.62	50.77	32.28	84.84	2.28	55.46	97.74	83.42	15.99	97.23	3.52	69.08	97.40	85.42	13.80
ConvNext_tiny	WaNet	97.62	0.10	97.25	98.37	0.00	98.19	98.19	0.00	97.97	97.87	0.00	97.77	97.62	0.10	97.25	96.84	0.05	96.54	97.36	3.08	94.39	N/A	N/A	N/A	61.41	0.00	58.18	81.44	0.00	81.97	97.62	0.10	97.25	74.18	3.16	74.47	78.94	2.05	77.86	97.18	0.10	96.91	97.81	0.00	97.45	97.23	0.09	96.94
ConvNext_tiny	InputAware	97.08	43.72	55.05	97.94	12.45	85.47	97.87	0.26	90.39	97.69	16.97	80.82	97.94	0.06	89.53	91.86	0.13	87.06	98.15	52.35	46.25	N/A	N/A	N/A	27.67	0.00	26.44	81.07	0.00	79.84	97.51	45.88	52.99	97.13	60.01	39.40	3.09	0.00	3.10	97.47	43.17	55.50	97.70	0.14	89.55	97.46	45.31	53.63
ConvNext_tiny	BPP	97.87	39.55	58.77	98.55	2.76	91.39	98.32	0.02	92.40	98.41	8.74	87.00	98.51	0.08	92.69	91.23	1.08	85.25	97.70	11.96	84.16	N/A	N/A	N/A	97.79	47.70	50.76	74.63	0.00	68.75	97.87	39.55	58.77	73.46	4.46	64.30	80.48	0.02	73.64	97.67	39.05	59.04	98.03	0.01	90.15	97.55	36.66	61.29
ConvNext_tiny	TrojanNN	97.53	99.51	0.49	98.19	94.64	5.27	98.27	7.53	70.56	97.54	98.60	1.40	32.28	0.07	29.68	89.94	17.70	50.81	97.93	98.41	1.57	N/A	N/A	N/A	98.06	99.56	0.41	78.11	70.10	25.03	97.53	99.51	0.49	82.17	93.18	5.40	5.94	0.00	5.97	97.05	99.56	0.43	97.14	6.11	44.21	97.28	99.40	0.59

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	98.35	50.26	20.64	98.52	0.38	98.33	98.48	0.01	94.45	98.27	1.48	97.36	97.20	0.00	97.14	93.99	0.00	94.50	98.42	81.73	18.11	N/A	N/A	N/A	0.48	100.00	0.00	84.29	0.00	84.70	97.34	30.97	67.88	54.47	0.00	53.77	86.74	0.02	86.98	96.80	0.02	96.81	93.80	0.02	93.86	98.38	76.07	23.77
PreActResNet-18	Blended	98.80	95.67	2.89	98.76	94.79	4.88	98.71	95.87	3.62	98.73	95.77	4.00	97.00	10.88	59.61	92.78	79.88	10.55	97.10	94.34	4.19	N/A	N/A	N/A	28.22	2.27	5.73	83.40	99.97	0.02	97.81	95.92	3.41	21.89	0.00	13.29	89.45	67.26	24.87	98.22	97.79	2.13	93.98	27.85	21.90	98.69	97.53	2.36
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	98.52	94.72	4.83	98.58	93.78	5.74	98.46	93.42	5.79	98.55	95.02	4.53	97.43	0.80	88.49	97.24	0.62	80.85	96.98	94.74	4.65	N/A	N/A	N/A	24.27	76.49	3.02	78.24	0.00	77.99	97.85	96.26	3.24	13.48	9.73	3.42	86.95	61.94	33.83	97.65	95.97	3.53	96.70	68.50	20.33	98.06	96.20	3.34
PreActResNet-18	SSBA	98.75	94.54	5.04	98.80	88.77	10.37	98.78	91.38	7.37	98.80	91.42	7.93	97.51	0.12	88.89	89.87	0.02	62.37	96.83	86.50	11.81	N/A	N/A	N/A	4.12	68.09	0.43	88.60	0.00	87.78	98.91	93.60	5.94	41.26	0.00	39.73	87.69	68.38	27.58	97.62	96.88	2.79	86.37	0.96	63.35	98.61	96.31	3.51
PreActResNet-18	WaNet	97.08	62.24	36.81	98.67	29.96	68.91	98.08	1.14	65.48	98.58	38.54	60.38	98.88	9.67	89.29	97.66	0.00	97.03	96.48	4.14	92.23	N/A	N/A	N/A	29.75	33.21	24.22	87.15	0.00	87.59	95.25	2.16	87.10	81.20	71.16	15.61	89.15	8.18	81.78	96.62	0.12	89.16	96.27	0.00	95.66	96.76	0.11	85.47
PreActResNet-18	InputAware	98.11	54.93	44.43	98.42	32.32	66.88	98.35	0.91	93.89	98.39	43.18	56.21	98.34	0.00	96.85	98.08	0.00	96.25	97.21	62.59	35.92	N/A	N/A	N/A	16.51	70.76	4.88	74.69	0.00	74.46	98.62	0.21	77.28	75.77	84.73	13.10	86.74	85.89	13.17	98.53	8.04	74.15	97.87	0.00	72.32	98.75	0.20	78.35
PreActResNet-18	BPP	98.26	62.21	36.91	98.88	60.96	38.21	99.18	7.37	72.01	98.72	57.55	41.52	98.26	62.21	36.91	98.31	0.02	84.89	97.11	40.91	56.02	N/A	N/A	N/A	6.41	20.48	6.24	78.41	0.00	72.09	98.24	10.30	85.01	70.02	63.49	26.19	90.63	79.17	18.91	97.45	0.05	87.16	97.80	0.21	89.69	98.15	0.07	90.63
PreActResNet-18	TrojanNN	98.17	100.00	0.00	98.09	100.00	0.00	97.47	70.52	18.70	96.37	0.14	88.42	50.01	0.37	45.97	95.06	3.18	79.70	97.38	100.00	0.00	N/A	N/A	N/A	21.69	0.00	3.30	81.74	0.00	80.58	97.90	100.00	0.00	11.08	0.00	10.29	88.32	79.04	19.24	97.13	0.01	91.23	88.02	0.00	71.15	97.89	100.00	0.00
VGG19_BN	BadNet	97.35	86.83	12.76	97.20	80.14	19.32	97.33	68.19	29.60	97.28	82.56	16.98	97.31	80.15	19.30	90.13	0.00	90.52	96.12	82.12	17.32	N/A	N/A	N/A	10.81	0.00	6.68	55.25	0.00	55.54	N/A	N/A	N/A	5.56	0.00	5.58	77.29	7.76	73.31	97.28	65.89	33.40	95.14	0.00	76.63	97.38	86.91	12.69
VGG19_BN	Blended	97.71	96.07	3.33	97.93	96.06	3.44	98.03	95.00	4.31	97.92	96.23	3.26	95.28	10.96	42.14	96.29	77.26	19.48	97.20	92.42	6.49	N/A	N/A	N/A	18.50	0.00	14.30	51.49	0.00	23.12	N/A	N/A	N/A	5.15	0.00	5.13	85.72	93.87	3.90	97.12	97.36	2.38	96.06	72.44	12.55	97.70	96.83	2.71
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	97.74	0.36	97.72	98.00	0.01	97.99	97.89	0.02	97.88	97.87	0.02	97.86	97.74	0.36	97.72	91.96	0.10	92.12	95.57	0.59	95.56	N/A	N/A	N/A	9.16	0.00	9.20	52.51	0.00	52.79	97.16	0.43	97.14	5.70	0.00	5.73	82.54	0.76	82.66	97.42	0.30	97.41	95.88	0.01	95.93	97.42	0.32	97.47
VGG19_BN	SSBA	97.61	94.28	5.01	97.59	93.83	5.33	97.66	87.77	10.75	97.69	94.73	4.56	94.46	41.26	44.75	97.13	17.37	68.83	95.87	83.95	14.42	N/A	N/A	N/A	8.21	0.00	7.93	53.63	0.00	53.13	97.62	92.55	6.64	5.70	0.00	5.73	93.51	85.80	11.03	97.05	95.90	3.44	10.36	0.00	7.45	97.61	94.03	5.27
VGG19_BN	WaNet	97.94	1.47	95.47	98.35	0.00	97.84	98.14	0.00	97.59	98.38	0.00	97.87	97.94	1.47	95.47	96.96	0.00	96.55	95.68	5.76	89.73	N/A	N/A	N/A	29.95	0.00	29.20	52.05	0.00	52.30	97.92	0.99	95.83	0.48	100.00	0.00	83.29	4.85	81.27	97.37	2.82	92.82	97.26	0.08	95.76	96.81	3.21	91.80
VGG19_BN	InputAware	95.95	52.49	44.54	97.21	32.32	62.66	97.26	0.32	78.11	97.01	41.16	54.44	97.04	34.19	58.84	95.52	0.00	91.24	96.18	36.26	58.14	N/A	N/A	N/A	9.69	0.00	9.48	51.39	0.00	46.88	95.04	2.66	87.20	5.46	0.00	5.33	81.15	24.91	43.90	95.08	4.11	83.19	95.69	0.05	63.50	94.99	24.38	71.51
VGG19_BN	BPP	97.78	18.41	77.56	98.27	14.03	81.39	98.51	0.11	89.79	98.13	13.62	81.73	98.23	0.02	92.14	97.53	0.01	91.98	95.92	8.45	84.23	N/A	N/A	N/A	0.48	100.00	0.00	52.95	0.00	50.65	97.59	7.43	86.85	0.48	100.00	0.00	77.32	1.70	70.72	97.73	15.10	80.12	96.75	0.05	88.13	97.97	12.32	82.98
VGG19_BN	TrojanNN	97.93	99.78	0.21	98.04	99.82	0.17	98.09	99.74	0.23	97.98	99.83	0.16	94.10	55.18	29.05	94.80	1.11	70.14	97.05	99.87	0.13	N/A	N/A	N/A	13.23	0.00	7.72	54.04	0.00	53.88	97.86	99.81	0.17	0.48	100.00	0.00	73.68	47.63	1.30	96.67	99.42	0.53	21.73	0.00	7.86	97.79	99.76	0.22
ViT_b_16	BadNet	99.11	89.80	10.13	99.54	87.56	12.43	99.63	82.61	17.37	93.84	0.01	93.80	99.49	86.60	13.36	98.19	89.37	10.57	99.01	87.10	12.75	N/A	N/A	N/A	2.14	0.00	2.15	66.80	0.00	65.94	N/A	N/A	N/A	98.91	87.53	12.39	5.23	0.00	5.25	98.67	90.21	9.62	11.54	0.00	11.71	98.97	88.91	11.02
ViT_b_16	Blended	95.71	93.42	6.32	96.74	88.81	10.76	95.87	49.25	41.48	88.33	5.93	52.71	96.25	86.95	12.49	95.57	92.64	7.00	99.09	93.38	6.50	N/A	N/A	N/A	99.11	99.01	0.99	62.08	98.58	0.96	N/A	N/A	N/A	45.95	15.26	6.05	5.23	0.00	5.25	95.70	93.27	6.48	89.80	13.02	50.95	95.72	94.57	5.24
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	98.76	0.17	98.75	99.20	0.00	99.20	99.37	0.00	99.36	6.47	0.00	6.50	98.76	0.17	98.75	98.57	0.12	98.56	98.76	0.02	98.77	N/A	N/A	N/A	0.48	100.00	0.00	41.26	0.00	41.49	98.76	0.17	98.75	89.54	0.04	89.51	3.56	0.00	3.58	98.47	0.30	98.46	10.29	0.00	10.34	98.67	0.21	98.66
ViT_b_16	SSBA	98.08	97.76	2.10	98.66	96.64	3.18	97.94	6.36	45.09	7.87	0.00	7.92	98.53	64.72	33.59	98.23	94.86	4.95	98.42	95.30	4.60	N/A	N/A	N/A	85.13	0.00	84.46	23.16	0.00	22.78	98.08	97.76	2.10	4.94	0.00	5.09	5.46	0.00	5.49	97.97	98.05	1.86	10.68	0.00	10.88	98.04	97.17	2.67
ViT_b_16	WaNet	97.07	1.23	96.47	98.40	0.00	98.24	98.31	0.00	98.17	94.16	0.01	93.97	98.22	0.00	98.05	97.27	0.02	97.41	99.03	41.64	57.49	N/A	N/A	N/A	99.47	48.56	50.96	66.11	0.00	65.97	97.07	1.23	96.47	74.01	1.30	73.83	3.33	0.00	3.32	97.08	1.20	96.48	97.92	0.01	97.89	97.07	1.10	96.51
ViT_b_16	InputAware	97.60	56.65	42.56	99.27	47.41	52.32	98.95	6.66	83.11	94.20	0.20	91.89	99.07	2.49	96.48	98.72	76.60	23.12	99.25	78.06	21.79	N/A	N/A	N/A	99.42	79.75	20.10	72.87	0.00	72.94	98.72	76.60	23.13	95.60	94.76	5.17	N/A	N/A	N/A	98.13	76.81	22.90	96.99	1.50	94.39	98.61	72.87	26.84
ViT_b_16	BPP	91.69	4.04	77.67	94.95	1.10	83.04	95.35	0.53	83.93	83.67	1.00	70.56	91.69	4.04	77.67	91.69	4.04	77.67	99.49	94.60	5.39	N/A	N/A	N/A	99.34	88.58	11.20	70.55	0.00	55.07	91.69	4.04	77.67	87.97	10.90	71.69	N/A	N/A	N/A	N/A	N/A	N/A	91.54	0.29	79.18	N/A	N/A	N/A
ViT_b_16	TrojanNN	99.37	99.92	0.08	99.46	99.94	0.06	98.57	0.53	7.45	4.99	0.00	5.01	99.49	99.90	0.10	97.70	97.57	2.39	99.18	99.71	0.29	N/A	N/A	N/A	99.50	99.94	0.06	61.80	98.76	0.91	99.37	99.92	0.08	99.45	99.97	0.03	5.23	0.00	5.25	99.22	99.84	0.16	13.75	0.00	15.30	99.27	99.91	0.09
ConvNext_tiny	BadNet	97.43	81.85	17.65	98.20	57.49	41.98	98.00	0.01	97.47	97.26	70.87	28.39	98.21	1.89	96.60	90.94	3.97	86.76	98.23	85.89	13.95	N/A	N/A	N/A	85.22	0.02	85.23	74.14	0.00	74.52	N/A	N/A	N/A	68.00	57.76	14.75	84.89	1.02	85.29	96.90	82.24	17.14	97.85	48.92	50.38	97.42	80.13	19.33
ConvNext_tiny	Blended	97.83	93.72	6.14	98.35	85.58	13.68	98.00	1.11	36.44	98.12	93.90	5.86	95.66	23.02	52.86	91.67	48.70	34.01	98.09	94.80	5.11	N/A	N/A	N/A	77.51	63.67	25.27	78.54	97.47	2.13	N/A	N/A	N/A	98.08	94.06	5.78	87.52	50.76	37.45	97.70	94.00	5.89	97.54	0.00	36.45	97.14	94.29	5.58
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	97.38	0.18	97.37	98.04	0.01	98.04	97.89	0.03	97.88	97.37	0.01	97.36	94.94	0.01	94.92	97.39	0.14	97.37	97.23	0.25	97.22	N/A	N/A	N/A	15.08	0.00	15.16	81.36	0.00	81.69	97.38	0.18	97.37	97.26	0.25	97.27	81.56	0.53	81.83	97.17	0.19	97.16	97.00	0.02	96.98	97.41	0.15	97.40
ConvNext_tiny	SSBA	97.82	92.51	7.20	98.29	78.19	20.93	97.70	17.29	65.44	97.57	80.61	18.39	94.64	15.56	68.22	90.39	44.52	45.54	97.72	91.47	8.18	N/A	N/A	N/A	80.40	21.47	51.13	76.42	50.10	40.07	97.82	92.51	7.20	98.16	86.87	12.57	80.10	59.44	31.76	97.73	92.60	7.15	97.38	5.25	60.21	97.61	90.88	8.68
ConvNext_tiny	WaNet	97.27	0.43	96.58	98.40	0.00	98.15	98.42	0.00	98.21	98.11	0.00	97.96	97.27	0.43	96.58	96.99	0.22	96.44	97.39	7.97	89.64	N/A	N/A	N/A	81.23	0.00	81.43	85.01	0.00	85.39	97.27	0.43	96.58	57.18	42.60	54.62	81.47	0.02	80.64	97.15	0.42	96.48	97.41	0.00	97.12	96.38	0.38	95.92
ConvNext_tiny	InputAware	97.31	49.09	49.27	98.16	30.18	67.72	97.78	0.25	91.74	97.92	39.86	57.88	98.11	32.65	65.10	95.34	0.06	92.48	98.19	56.07	42.99	N/A	N/A	N/A	63.33	0.05	59.74	77.75	0.00	76.99	97.85	50.05	48.18	52.45	10.56	48.87	3.56	0.00	3.58	97.79	40.76	57.14	97.59	0.08	84.81	97.48	53.79	44.50
ConvNext_tiny	BPP	97.65	57.29	42.03	98.65	10.25	86.21	98.61	0.01	92.48	98.64	13.74	83.37	98.61	14.50	82.46	90.04	1.30	83.63	98.32	40.19	57.85	N/A	N/A	N/A	97.85	80.59	18.90	87.26	0.00	74.36	97.65	57.29	42.03	58.57	38.13	54.07	82.65	2.14	75.90	97.74	22.04	74.84	98.68	0.00	85.97	97.34	53.20	45.94
ConvNext_tiny	TrojanNN	97.71	98.90	1.08	98.08	95.92	4.07	98.12	34.49	49.93	97.54	95.82	4.06	98.30	98.41	1.58	88.56	4.14	57.30	97.98	99.94	0.06	N/A	N/A	N/A	98.27	99.86	0.14	73.60	87.59	11.16	97.71	98.90	1.08	97.80	80.81	18.04	85.47	45.79	44.63	97.60	98.68	1.30	97.99	30.95	39.35	97.53	98.54	1.43

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	97.30	57.95	6.89	98.26	3.55	95.38	97.86	2.11	92.42	97.99	7.77	91.28	97.09	0.00	97.11	92.72	0.00	92.52	97.55	84.67	15.09	N/A	N/A	N/A	95.80	0.00	96.28	78.76	0.00	78.66	97.11	51.91	47.38	40.48	1.41	40.62	87.68	30.43	64.76	96.06	2.13	94.01	14.43	0.00	14.73	97.93	93.06	6.83
PreActResNet-18	Blended	98.84	99.93	0.04	98.81	99.75	0.21	98.75	99.93	0.06	98.82	99.91	0.07	96.64	3.14	58.33	93.92	68.09	19.37	97.48	99.73	0.23	N/A	N/A	N/A	44.18	0.00	23.91	83.08	100.00	0.00	96.49	96.71	2.67	42.45	26.72	19.32	87.99	96.95	2.46	98.21	99.95	0.02	84.63	0.00	30.35	98.75	99.98	0.01
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	97.49	98.62	1.18	97.85	97.76	1.85	97.70	98.03	1.44	97.78	98.52	1.19	97.77	0.09	90.03	96.84	20.50	52.43	97.08	99.12	0.83	N/A	N/A	N/A	16.83	59.33	1.30	83.17	0.00	82.83	97.24	98.82	1.06	7.72	84.39	2.00	84.70	91.50	7.39	97.72	98.58	1.18	87.54	1.40	23.59	97.81	98.93	0.99
PreActResNet-18	SSBA	98.11	99.34	0.63	97.93	98.66	1.10	98.12	99.12	0.74	97.97	99.03	0.82	97.03	0.33	89.04	90.29	6.09	56.31	97.16	98.30	1.43	N/A	N/A	N/A	80.20	0.01	77.17	81.57	99.96	0.04	97.93	99.24	0.64	0.66	98.40	0.18	88.13	97.76	1.87	97.34	91.17	7.13	6.12	0.00	5.20	97.81	99.30	0.62
PreActResNet-18	WaNet	97.42	92.85	6.84	98.76	6.20	92.52	98.00	12.24	12.31	98.63	1.18	97.02	97.42	92.85	6.84	97.09	0.00	95.23	95.91	54.10	43.56	N/A	N/A	N/A	1.45	99.40	0.01	84.09	0.01	84.14	92.49	95.17	4.61	83.21	93.51	4.42	89.75	53.85	40.74	97.32	0.02	94.08	97.93	0.25	97.37	97.32	91.06	8.66
PreActResNet-18	InputAware	97.04	93.17	6.76	98.59	70.10	29.69	98.23	11.42	85.97	98.43	75.01	24.76	97.04	93.17	6.76	97.08	0.40	94.30	97.13	64.65	33.91	N/A	N/A	N/A	1.83	95.67	0.02	79.61	0.02	79.15	98.76	3.78	94.39	84.96	84.77	11.16	80.77	48.93	41.46	98.66	0.03	97.41	98.82	0.01	96.53	98.66	0.01	96.83
PreActResNet-18	BPP	98.21	98.97	1.00	98.95	0.32	94.03	99.26	12.49	79.84	98.99	0.00	94.29	98.90	56.62	42.10	98.12	0.00	92.12	97.64	83.67	15.91	N/A	N/A	N/A	12.77	100.00	0.00	82.52	0.00	74.23	97.61	9.62	86.13	71.42	98.96	0.72	89.06	94.57	4.75	97.83	0.00	91.85	97.99	0.08	91.74	98.15	64.93	34.08
PreActResNet-18	TrojanNN	98.55	100.00	0.00	98.74	99.94	0.06	97.81	28.87	25.47	98.00	29.43	61.25	81.98	0.69	73.59	92.58	0.00	81.12	97.00	100.00	0.00	N/A	N/A	N/A	83.42	0.00	76.20	73.17	0.01	72.87	98.26	81.63	17.00	7.77	0.00	7.72	86.85	99.94	0.05	97.97	0.06	89.37	90.44	0.00	70.58	98.62	100.00	0.00
VGG19_BN	BadNet	97.55	93.29	6.56	97.87	87.88	11.81	97.69	0.00	32.59	97.81	90.50	9.28	97.19	0.00	96.95	95.87	0.09	95.64	95.54	91.69	7.88	N/A	N/A	N/A	5.23	0.00	5.25	55.35	0.00	55.56	N/A	N/A	N/A	0.48	100.00	0.00	77.61	3.07	72.23	97.43	24.90	74.02	96.47	0.09	77.92	97.40	93.40	6.44
VGG19_BN	Blended	97.68	99.72	0.20	98.14	99.63	0.29	98.33	99.67	0.29	97.91	99.79	0.14	94.16	70.28	19.51	95.08	47.07	36.48	96.19	99.93	0.07	N/A	N/A	N/A	16.04	75.33	0.62	49.67	100.00	0.00	N/A	N/A	N/A	5.07	0.00	5.07	84.73	23.82	18.20	96.83	99.66	0.25	95.83	52.84	30.53	97.72	99.72	0.21
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	96.87	0.59	96.86	97.24	0.00	97.22	97.58	0.02	97.57	97.29	0.02	97.28	95.65	0.02	95.62	97.06	0.48	97.05	93.87	3.25	93.87	N/A	N/A	N/A	10.77	0.00	10.82	54.12	0.00	54.33	96.73	0.55	96.71	5.94	0.00	5.97	88.99	5.25	88.94	95.03	0.80	95.00	95.94	0.07	95.95	96.63	0.64	96.61
VGG19_BN	SSBA	97.79	98.61	0.96	97.77	99.09	0.65	97.85	97.65	1.77	97.70	99.28	0.53	95.38	43.47	40.76	96.22	0.06	77.20	96.37	97.89	1.65	N/A	N/A	N/A	4.58	0.00	3.95	54.98	0.00	54.81	97.79	98.60	0.98	5.57	0.00	5.74	85.46	87.41	3.94	97.43	99.27	0.51	95.92	15.71	55.82	97.87	97.58	1.80
VGG19_BN	WaNet	91.30	96.76	3.19	98.35	17.93	78.67	98.42	63.62	35.54	98.35	42.08	54.55	96.02	37.07	56.86	97.24	0.00	96.64	95.34	47.56	49.80	N/A	N/A	N/A	7.92	0.00	7.92	55.91	0.00	56.15	11.54	99.47	0.52	0.48	100.00	0.00	82.91	28.91	59.44	94.05	92.90	6.96	97.50	0.40	92.03	83.82	84.71	14.90
VGG19_BN	InputAware	97.29	64.69	34.53	97.70	82.01	17.46	97.81	21.93	73.71	97.55	84.30	15.21	96.98	0.41	89.63	96.83	0.00	94.65	96.34	53.50	43.47	N/A	N/A	N/A	7.06	30.80	3.86	54.99	0.00	54.99	96.90	4.97	90.76	0.48	100.00	0.00	90.06	37.51	56.87	96.68	0.00	94.29	97.40	0.01	93.94	96.60	0.04	93.72
VGG19_BN	BPP	98.23	79.92	19.66	98.88	0.01	90.63	98.84	17.73	57.39	98.76	0.01	88.62	97.95	0.02	86.72	97.90	0.00	92.98	95.75	61.69	36.45	N/A	N/A	N/A	5.46	7.67	5.07	54.58	0.00	52.75	97.36	0.17	91.30	5.78	0.00	5.84	87.49	86.81	11.65	98.12	0.00	90.10	97.28	0.05	88.42	98.04	0.01	89.21
VGG19_BN	TrojanNN	98.16	100.00	0.00	98.32	100.00	0.00	98.56	100.00	0.00	98.27	100.00	0.00	95.65	0.01	42.29	97.52	0.00	84.35	96.48	100.00	0.00	N/A	N/A	N/A	0.71	0.00	0.72	55.26	0.00	38.60	97.75	40.44	47.80	0.55	99.61	0.00	53.41	0.14	33.73	98.22	26.44	49.44	95.30	2.60	52.94	98.18	99.98	0.02
ViT_b_16	BadNet	98.90	94.66	5.33	99.49	89.43	10.55	99.42	87.92	12.06	4.99	0.00	5.01	99.46	88.53	11.44	98.90	94.66	5.33	98.96	94.12	5.77	N/A	N/A	N/A	0.48	100.00	0.00	19.61	15.94	15.98	N/A	N/A	N/A	98.65	0.00	77.44	1.66	0.00	1.67	98.12	95.16	4.82	9.75	0.00	9.77	98.83	94.84	5.15
ViT_b_16	Blended	48.21	85.53	8.52	52.07	59.59	18.17	50.58	33.19	24.86	45.03	14.71	21.54	48.22	85.53	8.52	48.22	85.53	8.52	99.11	99.52	0.48	N/A	N/A	N/A	99.22	100.00	0.00	10.36	70.67	4.25	N/A	N/A	N/A	20.52	0.00	4.38	1.66	0.00	1.67	47.90	87.15	7.46	43.63	10.40	18.68	42.77	87.26	6.75
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	97.53	1.30	97.53	98.99	0.00	99.01	99.16	0.00	99.16	6.80	0.00	6.83	97.77	0.00	97.78	97.81	0.88	97.81	98.17	0.28	98.19	N/A	N/A	N/A	0.48	100.00	0.00	71.35	0.00	71.68	97.52	1.30	97.52	94.22	0.76	94.19	3.56	0.00	3.58	96.67	2.00	96.67	11.10	0.00	11.15	97.19	1.63	97.18
ViT_b_16	SSBA	98.89	99.60	0.39	99.07	99.61	0.37	98.95	24.67	34.18	4.99	0.00	5.01	98.60	86.58	12.55	98.61	99.12	0.82	98.56	99.63	0.36	N/A	N/A	N/A	98.74	99.85	0.14	50.62	72.12	16.78	98.89	99.60	0.39	98.97	99.55	0.43	5.23	0.00	5.25	98.48	99.71	0.27	11.24	0.00	11.30	98.77	99.44	0.56
ViT_b_16	WaNet	97.75	88.67	11.27	99.39	40.79	58.74	99.41	2.03	97.38	96.41	0.30	96.18	99.33	16.11	83.30	98.27	65.09	34.68	98.61	76.03	23.57	N/A	N/A	N/A	72.73	97.92	2.07	29.48	0.00	29.30	97.75	88.68	11.26	1.12	93.66	0.75	5.23	0.00	5.24	97.37	91.18	8.78	99.01	0.01	98.77	97.72	89.35	10.60
ViT_b_16	InputAware	98.08	96.88	3.09	99.23	96.11	3.87	99.53	32.78	67.08	99.31	94.22	5.77	99.26	2.59	96.51	97.92	97.87	2.12	99.01	83.52	16.38	N/A	N/A	N/A	99.08	77.86	22.05	68.74	0.00	68.92	97.94	98.20	1.78	96.03	43.28	53.76	N/A	N/A	N/A	97.24	97.43	2.54	93.47	1.55	90.37	97.83	98.35	1.64
ViT_b_16	BPP	98.88	99.51	0.49	99.49	98.66	1.34	99.15	26.55	62.25	96.88	0.62	89.69	99.53	95.34	4.62	98.73	99.32	0.68	99.23	99.15	0.85	N/A	N/A	N/A	99.43	99.87	0.13	77.42	43.64	43.34	98.88	99.51	0.49	99.42	99.45	0.55	N/A	N/A	N/A	N/A	N/A	N/A	98.35	0.06	92.72	N/A	N/A	N/A
ViT_b_16	TrojanNN	12.49	0.41	12.01	11.76	0.00	10.39	11.18	0.00	10.76	12.31	0.00	10.95	12.49	0.41	12.01	11.57	0.00	11.20	99.03	99.99	0.01	N/A	N/A	N/A	99.28	100.00	0.00	28.21	98.11	0.50	12.49	0.41	12.01	7.42	0.00	6.13	3.56	0.00	3.58	12.27	2.52	11.77	11.15	0.00	10.50	12.40	0.00	12.41
ConvNext_tiny	BadNet	97.52	92.23	7.52	98.20	8.02	90.74	98.20	0.01	98.07	97.77	82.79	16.87	98.08	1.46	96.82	94.22	8.05	88.84	97.73	93.55	6.28	N/A	N/A	N/A	97.58	94.69	5.25	78.70	0.00	79.10	N/A	N/A	N/A	5.94	0.00	5.97	5.94	0.00	5.97	97.23	92.34	7.37	97.59	0.36	95.46	97.53	89.79	9.91
ConvNext_tiny	Blended	97.17	99.98	0.02	98.04	97.01	2.91	98.23	65.23	24.37	97.49	99.18	0.79	95.49	55.01	36.67	91.92	90.96	8.15	97.88	99.75	0.25	N/A	N/A	N/A	N/A	N/A	N/A	74.84	99.99	0.01	N/A	N/A	N/A	97.66	99.87	0.12	83.17	86.38	11.24	96.95	99.97	0.03	97.44	0.00	28.87	96.78	99.98	0.02
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	97.34	0.96	97.33	98.09	0.00	98.09	98.10	0.01	98.10	97.55	0.00	97.54	96.74	0.00	96.77	97.40	0.94	97.38	96.42	1.33	96.40	N/A	N/A	N/A	33.20	0.00	33.36	79.26	0.00	79.60	97.34	0.96	97.33	37.97	0.18	38.15	75.23	6.36	75.46	96.86	1.45	96.85	97.51	0.00	97.49	97.18	0.94	97.17
ConvNext_tiny	SSBA	97.54	99.51	0.49	98.09	93.36	6.47	98.00	30.02	55.55	97.84	97.02	2.95	93.64	22.55	63.75	91.28	79.04	19.63	97.72	98.59	1.30	N/A	N/A	N/A	43.29	90.69	5.22	81.05	98.96	1.00	97.54	99.51	0.49	81.98	96.06	3.64	5.46	0.00	5.49	95.65	99.67	0.33	97.83	0.21	48.70	97.14	99.27	0.73
ConvNext_tiny	WaNet	96.22	56.64	42.25	98.18	0.42	97.50	98.31	0.02	98.00	98.19	1.12	96.97	96.22	56.63	42.25	89.08	2.93	83.44	96.64	55.55	43.01	N/A	N/A	N/A	39.18	0.00	39.86	81.59	0.00	82.13	96.22	56.64	42.25	89.18	45.00	46.19	0.48	100.00	0.00	96.03	55.35	43.36	97.64	1.10	96.52	96.20	51.60	46.90
ConvNext_tiny	InputAware	97.01	71.72	27.24	97.93	54.35	44.83	98.04	0.07	95.37	98.00	65.45	33.91	97.95	55.38	43.86	89.57	0.89	84.78	97.70	75.16	24.33	N/A	N/A	N/A	98.04	69.79	29.51	80.25	0.00	79.81	96.83	89.94	9.84	91.43	92.80	7.01	70.08	18.57	59.15	96.54	89.48	10.18	97.62	13.68	82.28	96.75	85.35	14.23
ConvNext_tiny	BPP	98.42	98.26	1.74	98.67	86.97	12.85	98.50	0.87	89.40	98.25	77.49	22.20	98.50	0.00	78.85	93.82	8.43	84.07	98.19	76.40	22.95	N/A	N/A	N/A	98.27	89.48	10.21	81.05	0.00	64.98	98.42	98.26	1.74	31.65	71.56	7.54	33.56	5.26	31.33	98.18	98.23	1.77	98.33	30.81	52.74	98.19	98.78	1.22
ConvNext_tiny	TrojanNN	97.51	99.98	0.02	98.32	99.89	0.11	98.02	81.68	12.77	97.77	99.99	0.01	98.04	0.03	86.09	91.69	8.46	66.46	98.04	99.98	0.02	N/A	N/A	N/A	98.07	100.00	0.00	76.31	100.00	0.00	97.51	99.98	0.02	5.46	0.00	5.49	82.54	98.20	1.44	97.37	99.98	0.02	97.68	51.03	24.12	97.23	99.98	0.02

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	97.24	59.25	4.42	98.73	5.09	94.00	98.21	0.09	70.93	98.69	0.63	98.00	97.48	0.01	97.45	95.86	0.00	95.51	95.53	95.94	3.95	N/A	N/A	N/A	93.82	0.00	94.21	82.75	0.00	83.13	97.67	66.85	33.04	36.11	20.06	33.56	84.06	85.76	13.00	97.69	10.95	88.21	96.47	0.02	96.46	97.28	95.23	4.67
PreActResNet-18	Blended	98.58	99.99	0.00	98.57	100.00	0.00	98.38	100.00	0.00	98.61	100.00	0.00	97.76	8.03	59.74	95.85	42.80	27.65	98.61	100.00	0.00	N/A	N/A	N/A	32.99	0.00	17.56	81.73	99.97	0.03	98.48	100.00	0.00	2.64	63.33	1.77	85.83	99.65	0.29	97.90	100.00	0.00	92.35	86.35	8.59	98.14	100.00	0.00
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	97.93	99.57	0.42	98.01	79.98	17.08	97.59	99.70	0.27	98.14	51.83	40.02	97.97	1.34	77.37	94.20	0.01	50.72	96.89	99.28	0.64	N/A	N/A	N/A	6.76	70.73	0.08	84.67	0.00	84.41	97.70	99.50	0.49	0.70	82.74	0.13	84.11	94.95	4.18	97.59	99.20	0.72	95.78	16.15	31.00	97.81	99.42	0.57
PreActResNet-18	SSBA	97.98	99.56	0.49	97.92	99.10	0.86	97.75	99.46	0.45	97.95	99.39	0.59	97.72	0.29	87.30	88.47	0.00	52.78	96.60	99.47	0.38	N/A	N/A	N/A	63.21	0.58	60.45	91.11	99.94	0.02	98.08	99.24	0.67	5.41	39.31	4.45	85.16	98.96	0.62	97.66	98.66	1.13	96.14	1.88	57.06	97.93	99.50	0.47
PreActResNet-18	WaNet	97.74	94.25	5.59	98.54	0.29	97.89	97.62	88.07	8.71	98.61	0.56	97.63	98.25	0.00	98.03	97.08	0.00	96.39	96.36	72.65	26.09	N/A	N/A	N/A	21.35	84.09	5.31	84.03	0.00	84.44	7.16	100.00	0.00	68.77	94.66	3.08	87.47	69.98	27.03	96.96	8.97	82.93	96.72	0.00	96.70	97.66	0.04	96.41
PreActResNet-18	InputAware	97.26	92.74	7.23	98.40	29.81	69.45	98.08	2.32	88.91	98.27	40.65	58.68	98.55	0.01	96.71	96.67	0.00	93.75	96.68	67.40	30.88	N/A	N/A	N/A	13.51	88.23	2.28	84.96	0.00	85.35	98.64	96.01	3.85	38.26	78.27	1.24	87.02	66.75	30.53	98.50	49.50	49.49	97.09	0.52	92.15	98.84	0.06	96.89
PreActResNet-18	BPP	97.43	99.90	0.10	98.99	0.01	92.59	99.14	1.54	45.58	98.76	0.00	93.91	98.93	0.11	91.11	98.30	0.00	87.74	97.43	88.69	10.56	N/A	N/A	N/A	10.51	99.94	0.00	86.47	100.00	0.00	97.47	83.33	16.31	5.84	19.53	5.38	84.40	96.77	2.62	97.14	0.03	87.78	97.70	1.27	89.06	97.45	0.00	89.19
PreActResNet-18	TrojanNN	98.57	100.00	0.00	98.54	0.02	91.59	98.31	71.07	16.01	98.20	0.11	91.11	87.53	0.83	76.06	98.08	0.00	91.50	96.76	100.00	0.00	N/A	N/A	N/A	78.19	0.00	74.77	87.09	100.00	0.00	98.17	95.20	4.31	19.13	99.79	0.21	87.41	99.99	0.01	98.27	0.00	86.75	95.98	0.02	85.19	98.51	100.00	0.00
VGG19_BN	BadNet	97.28	93.44	6.30	97.60	46.39	51.70	97.66	0.00	74.21	97.41	89.80	9.82	97.17	0.00	97.11	96.91	0.00	96.85	96.02	93.75	6.02	N/A	N/A	N/A	12.36	0.49	9.40	58.46	0.00	58.77	N/A	N/A	N/A	0.48	100.00	0.00	79.45	8.61	56.19	96.02	0.03	96.00	96.37	3.41	85.95	97.02	93.54	6.20
VGG19_BN	Blended	97.74	100.00	0.00	98.08	100.00	0.00	97.85	100.00	0.00	97.54	99.63	0.27	94.99	2.60	48.28	95.67	0.68	48.51	96.48	99.84	0.14	N/A	N/A	N/A	0.48	100.00	0.00	47.85	100.00	0.00	N/A	N/A	N/A	0.48	100.00	0.00	91.70	87.82	4.18	96.83	99.99	0.01	96.27	91.94	3.98	97.79	97.84	1.62
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	97.25	0.42	97.24	96.81	0.01	96.83	97.53	0.00	97.53	97.52	0.02	97.52	94.77	0.00	94.75	97.25	0.42	97.24	89.87	7.48	89.90	N/A	N/A	N/A	3.09	0.00	3.10	60.36	0.00	60.61	96.88	0.76	96.87	97.51	0.22	97.50	69.33	9.30	69.55	96.03	1.06	96.01	95.84	0.01	95.85	97.10	0.37	97.09
VGG19_BN	SSBA	97.85	99.43	0.53	97.95	99.41	0.56	97.93	98.85	0.91	97.74	98.58	1.31	94.40	68.74	20.83	96.94	0.26	66.09	95.97	98.93	0.79	N/A	N/A	N/A	0.48	100.00	0.00	48.81	99.92	0.01	97.64	98.21	1.42	6.48	0.00	6.46	86.90	83.16	3.55	97.61	98.95	0.85	43.97	0.00	15.83	97.74	98.21	1.45
VGG19_BN	WaNet	94.76	98.32	1.67	98.44	0.42	94.30	98.79	2.42	83.13	98.37	0.20	92.01	94.76	98.32	1.67	98.17	0.00	96.88	94.05	69.65	28.33	N/A	N/A	N/A	8.18	0.00	8.15	57.04	0.00	57.38	28.03	99.86	0.14	4.99	0.00	5.04	73.38	46.19	36.05	97.99	60.37	37.42	97.49	0.82	92.36	27.91	99.82	0.18
VGG19_BN	InputAware	96.32	85.03	14.34	97.37	4.69	91.45	97.74	0.56	93.26	97.09	1.69	93.79	97.57	0.06	39.10	97.02	0.00	96.22	95.51	64.80	33.38	N/A	N/A	N/A	36.76	73.92	11.65	57.69	0.00	57.89	96.87	46.13	51.68	1.12	90.60	0.66	74.61	12.16	64.92	96.65	0.02	95.19	95.75	7.91	83.93	96.89	1.03	93.16
VGG19_BN	BPP	97.47	98.65	1.08	98.32	0.00	26.02	98.53	28.56	50.24	98.36	0.00	73.91	98.19	0.03	92.06	97.51	0.00	91.93	95.80	88.04	11.49	N/A	N/A	N/A	6.83	96.74	0.49	56.43	0.00	53.59	97.74	1.72	91.44	5.42	0.06	5.27	89.61	90.41	5.88	96.46	0.00	89.30	98.11	6.91	80.16	97.60	0.00	91.83
VGG19_BN	TrojanNN	97.77	100.00	0.00	97.79	100.00	0.00	97.88	99.55	0.00	97.59	99.99	0.01	95.29	0.02	83.17	97.63	0.00	89.62	97.01	100.00	0.00	N/A	N/A	N/A	5.70	0.00	5.73	56.77	0.00	50.36	97.66	99.46	0.41	0.48	100.00	0.00	78.03	3.25	40.02	97.60	1.41	78.96	94.40	0.00	71.72	97.78	58.53	34.81
ViT_b_16	BadNet	97.37	95.89	4.08	99.44	90.72	9.23	99.54	87.74	12.22	6.47	0.00	6.40	99.51	66.97	32.99	97.36	95.89	4.08	98.57	94.85	5.05	N/A	N/A	N/A	0.48	100.00	0.00	75.22	0.00	75.55	N/A	N/A	N/A	71.66	77.76	7.49	5.46	0.00	5.49	95.48	96.70	3.30	10.47	0.00	10.52	97.21	96.04	3.93
ViT_b_16	Blended	99.08	99.92	0.08	99.44	99.82	0.18	98.56	0.02	37.58	4.99	0.00	5.01	99.40	99.86	0.14	99.08	99.92	0.08	99.03	99.89	0.11	N/A	N/A	N/A	99.22	100.00	0.00	61.62	99.98	0.02	N/A	N/A	N/A	98.54	100.00	0.00	5.46	0.00	5.49	98.89	99.86	0.14	9.05	0.00	6.34	99.05	99.90	0.10
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	97.28	1.67	97.27	99.06	0.00	99.05	99.38	0.00	99.38	5.46	0.00	5.48	97.78	0.01	97.80	97.36	0.70	97.40	97.06	1.62	97.05	N/A	N/A	N/A	0.48	100.00	0.00	75.81	0.00	76.17	97.28	1.67	97.27	90.48	3.48	90.50	5.46	0.00	5.49	96.14	2.90	96.13	10.18	0.00	10.23	96.49	2.64	96.48
ViT_b_16	SSBA	79.96	91.76	5.54	94.40	40.58	50.20	94.96	21.22	63.88	84.85	2.97	72.33	89.31	47.84	41.42	77.46	72.54	19.51	98.36	99.76	0.23	N/A	N/A	N/A	98.64	99.90	0.10	59.37	99.59	0.19	79.96	91.76	5.54	41.69	93.52	3.59	1.19	0.00	1.19	78.64	91.57	5.65	85.63	0.78	71.14	78.12	91.49	5.39
ViT_b_16	WaNet	98.00	96.61	3.29	99.45	66.95	32.71	99.39	2.51	96.83	97.09	13.18	84.28	98.00	96.61	3.29	98.52	94.11	5.77	98.60	84.65	15.03	N/A	N/A	N/A	98.94	85.72	13.98	26.25	0.00	26.53	98.00	96.61	3.29	98.38	96.34	3.59	5.23	0.00	5.24	97.97	96.42	3.47	99.37	0.32	98.99	97.96	96.37	3.52
ViT_b_16	InputAware	97.73	95.37	4.59	99.28	95.33	4.66	98.72	10.46	86.95	97.38	0.32	95.07	99.23	95.97	4.03	98.61	97.15	2.85	98.42	72.55	26.86	N/A	N/A	N/A	98.70	64.59	35.02	76.64	0.00	76.49	98.61	97.15	2.85	86.40	97.47	2.53	N/A	N/A	N/A	98.21	95.46	4.54	95.83	2.66	91.74	98.47	97.25	2.75
ViT_b_16	BPP	98.54	99.82	0.18	99.44	99.74	0.26	98.85	0.50	9.94	96.40	0.88	88.74	98.54	99.82	0.18	98.54	99.82	0.18	99.36	99.63	0.37	N/A	N/A	N/A	99.36	99.82	0.18	11.63	54.36	7.20	98.54	99.82	0.18	99.21	99.76	0.24	N/A	N/A	N/A	N/A	N/A	N/A	98.51	0.39	92.24	N/A	N/A	N/A
ViT_b_16	TrojanNN	98.95	99.94	0.05	99.19	100.00	0.00	97.89	0.46	18.81	8.31	0.00	8.46	99.05	100.00	0.00	98.95	99.94	0.05	99.05	99.98	0.02	N/A	N/A	N/A	99.41	100.00	0.00	14.98	95.47	0.76	98.95	99.94	0.05	98.94	99.94	0.06	5.46	0.00	5.49	98.44	99.98	0.02	88.84	2.01	71.04	98.77	99.94	0.05
ConvNext_tiny	BadNet	97.05	94.95	4.92	98.14	48.20	51.20	98.13	0.00	97.37	97.47	82.87	16.32	97.97	42.25	57.07	93.63	23.87	73.93	97.30	94.81	5.04	N/A	N/A	N/A	96.67	96.29	3.63	71.27	90.26	8.35	N/A	N/A	N/A	96.16	94.36	5.41	72.98	2.74	73.50	96.82	94.88	5.00	96.88	0.00	96.30	96.86	93.54	6.22
ConvNext_tiny	Blended	96.73	99.92	0.07	98.04	98.62	1.29	97.66	5.14	23.29	97.70	99.71	0.28	95.42	2.04	54.23	87.68	53.77	28.69	97.62	100.00	0.00	N/A	N/A	N/A	98.01	100.00	0.00	79.13	99.93	0.06	N/A	N/A	N/A	74.25	93.29	5.10	5.46	0.00	5.49	96.76	99.90	0.09	97.00	0.10	17.89	96.69	99.94	0.05
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	96.57	1.38	96.56	98.02	0.01	98.01	98.12	0.00	98.11	97.27	0.02	97.26	95.89	0.04	95.89	96.60	1.19	96.59	94.09	3.80	94.06	N/A	N/A	N/A	78.19	0.21	78.56	79.50	0.00	79.83	96.57	1.38	96.56	95.01	1.33	95.00	61.27	9.48	61.51	96.43	1.44	96.41	97.65	0.02	97.64	96.55	1.30	96.53
ConvNext_tiny	SSBA	97.67	99.25	0.74	98.23	95.67	4.19	98.31	32.61	57.78	97.86	97.66	2.24	60.12	0.99	51.30	89.56	83.32	15.61	97.78	99.33	0.67	N/A	N/A	N/A	0.93	100.00	0.00	81.04	98.75	1.24	97.67	99.25	0.74	92.86	80.01	16.91	78.94	96.48	1.83	97.52	99.11	0.89	97.92	0.29	50.19	97.44	99.09	0.91
ConvNext_tiny	WaNet	91.87	92.02	7.86	98.12	0.27	97.69	98.20	0.01	98.01	98.17	0.27	97.65	97.74	1.09	96.13	89.94	15.30	78.73	96.06	66.51	32.44	N/A	N/A	N/A	55.99	0.02	56.09	79.81	0.00	80.12	91.87	92.02	7.86	94.13	91.77	8.03	76.98	7.74	74.51	91.05	92.13	7.72	97.94	0.38	97.24	91.75	92.22	7.66
ConvNext_tiny	InputAware	97.81	90.52	9.32	98.28	72.98	26.91	98.48	0.25	95.39	97.93	84.52	15.43	98.23	75.70	24.19	92.45	0.77	88.70	97.21	71.54	27.51	N/A	N/A	N/A	97.72	67.06	32.28	79.53	0.00	79.30	97.41	90.22	9.71	0.48	99.88	0.00	73.71	29.39	50.85	97.43	91.99	7.96	97.74	7.12	87.48	97.02	87.24	12.61
ConvNext_tiny	BPP	97.64	99.84	0.16	98.36	94.46	5.46	98.33	3.83	83.69	97.92	95.42	4.49	98.47	93.99	5.96	90.97	1.25	83.58	96.38	73.99	24.70	N/A	N/A	N/A	0.48	100.00	0.00	79.44	32.82	54.41	97.64	99.84	0.16	95.84	99.49	0.44	5.70	0.00	5.73	97.57	99.33	0.67	98.23	0.00	68.17	96.92	99.67	0.32
ConvNext_tiny	TrojanNN	97.22	99.99	0.01	98.23	99.64	0.36	96.06	1.19	71.77	97.97	99.97	0.03	70.97	0.16	51.41	89.14	3.95	64.03	97.71	99.99	0.01	N/A	N/A	N/A	98.27	100.00	0.00	76.65	100.00	0.00	97.22	99.99	0.01	97.86	99.99	0.01	21.66	25.33	13.05	97.21	99.96	0.04	97.29	0.00	19.74	97.21	99.99	0.01

GTSRB Leaderboard