BackdoorBench

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	57.51	33.53	42.12	56.87	24.71	45.73	55.23	16.80	46.05	46.32	4.61	43.94	52.44	16.10	45.95	57.46	33.53	42.12	50.44	0.31	50.50	N/A	N/A	N/A	50.86	11.69	46.14	47.96	0.26	47.36	57.47	33.53	42.12	33.97	29.91	26.61	12.44	0.02	12.24	56.29	30.02	43.33	55.30	10.65	50.77	56.25	31.94	42.15
PreActResNet-18	Blended	57.58	65.19	14.66	56.95	63.90	14.92	55.27	53.39	16.62	48.19	48.67	16.25	54.07	61.92	15.06	53.99	64.03	13.80	51.17	55.77	16.38	N/A	N/A	N/A	52.72	51.44	15.69	48.33	0.07	34.20	57.39	65.17	14.66	1.38	21.88	0.88	12.53	0.07	7.27	56.41	59.99	15.85	55.83	54.57	17.15	56.40	65.45	13.35
PreActResNet-18	LC	57.31	5.61	51.38	56.78	5.52	51.24	51.42	1.82	48.43	49.73	1.63	46.72	53.78	1.38	51.09	54.29	4.70	49.18	50.72	0.58	48.93	N/A	N/A	N/A	52.61	0.83	48.31	47.66	30.93	38.39	57.30	5.61	51.38	32.13	2.31	29.77	11.41	0.01	10.49	56.20	4.39	50.94	55.84	7.39	49.39	57.30	5.61	51.38
PreActResNet-18	SIG	57.03	44.93	14.57	56.51	49.17	13.16	55.21	50.02	12.64	48.02	31.89	8.46	53.84	47.66	11.70	53.17	39.76	12.02	51.36	29.93	12.88	N/A	N/A	N/A	52.27	9.13	17.58	47.72	50.97	18.67	57.09	44.94	14.57	39.53	18.62	11.36	12.25	3.49	3.02	55.74	42.38	14.22	54.47	38.47	14.04	55.40	37.59	15.10
PreActResNet-18	LF	56.97	19.49	38.95	56.69	19.73	38.34	54.85	12.14	38.94	47.59	6.64	34.79	55.32	18.65	36.69	54.10	9.25	37.05	50.80	21.45	31.80	N/A	N/A	N/A	52.42	9.85	35.30	47.67	0.09	43.29	57.06	23.40	37.22	14.02	11.84	9.91	11.56	0.00	11.26	56.59	19.42	37.60	55.40	17.63	37.67	57.13	22.48	37.49
PreActResNet-18	SSBA	57.20	13.28	41.54	57.06	9.92	41.87	55.30	6.82	41.21	48.23	1.90	37.77	54.67	11.21	38.90	56.85	13.23	41.33	50.52	5.24	38.42	N/A	N/A	N/A	51.52	4.46	40.77	47.74	0.04	40.36	56.82	13.39	41.07	40.33	17.67	26.34	12.34	0.00	8.42	55.39	14.84	39.05	55.23	6.71	41.51	55.74	13.36	40.17
PreActResNet-18	WaNet	57.27	5.39	55.35	57.26	1.68	54.41	55.25	0.56	53.15	47.50	0.73	43.25	55.81	1.50	52.90	55.22	3.62	53.51	50.71	1.81	42.89	N/A	N/A	N/A	52.67	1.80	43.51	47.82	0.57	42.52	57.14	67.08	22.80	0.68	78.61	0.33	13.88	0.00	14.13	57.02	51.74	30.82	53.89	19.08	40.69	56.51	69.42	21.20
PreActResNet-18	InputAware	57.96	63.80	20.83	57.87	56.74	23.75	56.14	26.55	29.78	46.66	21.85	25.08	54.67	6.74	39.81	56.83	63.48	20.36	50.82	32.57	24.30	N/A	N/A	N/A	51.53	15.38	28.28	47.68	0.28	36.37	58.28	45.55	5.20	1.27	56.16	0.36	12.43	0.45	1.77	57.96	31.70	5.71	53.20	21.95	4.89	58.17	37.32	5.69
PreActResNet-18	BPP	58.43	91.76	5.71	57.56	83.87	10.89	51.95	67.66	17.29	46.64	2.28	42.08	53.06	0.99	46.05	54.63	86.29	8.78	51.25	0.78	46.53	N/A	N/A	N/A	52.37	2.35	47.28	47.62	0.34	42.90	58.43	31.46	40.26	39.40	5.37	34.74	18.70	1.17	17.43	56.96	0.00	45.95	55.62	87.33	8.37	57.20	87.60	8.26
PreActResNet-18	TrojanNN	57.11	68.69	18.06	56.91	78.90	12.77	52.14	40.11	25.42	50.58	27.81	30.46	55.25	9.35	43.25	54.33	52.42	23.60	51.49	74.56	12.40	N/A	N/A	N/A	37.63	89.65	4.18	47.03	0.26	42.24	56.53	67.15	18.66	34.64	60.22	12.34	20.55	0.01	17.57	56.63	55.22	24.59	52.84	62.80	19.31	56.94	58.53	23.22
VGG19_BN	BadNet	54.14	48.83	29.59	54.00	43.04	32.20	53.21	38.93	33.60	42.94	7.05	37.65	53.05	46.20	30.65	51.87	26.95	39.03	43.28	0.64	42.29	N/A	N/A	N/A	37.15	1.73	35.29	39.50	0.14	39.28	N/A	N/A	N/A	54.24	49.25	29.42	29.91	0.14	29.17	52.71	48.99	29.28	46.36	23.64	35.61	53.60	49.85	29.06
VGG19_BN	Blended	53.12	70.26	11.62	53.31	70.44	11.48	52.39	64.28	12.81	42.86	39.59	13.44	49.70	67.34	11.27	53.12	70.26	11.62	44.40	41.97	17.33	N/A	N/A	N/A	N/A	N/A	N/A	40.54	0.11	32.74	N/A	N/A	N/A	0.50	0.00	0.50	27.83	39.68	8.45	52.84	71.93	10.94	44.54	53.73	11.79	51.68	68.33	11.49
VGG19_BN	LC	54.06	25.98	34.34	53.97	22.85	35.67	53.20	21.33	35.13	43.58	5.70	35.65	51.70	14.96	37.54	53.40	8.99	44.68	43.56	2.96	37.95	N/A	N/A	N/A	39.97	4.32	30.72	37.42	57.89	15.58	54.23	9.01	44.71	54.21	25.87	34.62	11.22	0.56	10.19	53.66	23.76	35.64	47.64	8.36	35.70	54.00	25.72	34.32
VGG19_BN	SIG	44.66	19.90	18.04	50.79	24.31	18.99	50.44	19.03	20.53	51.02	22.79	19.39	49.92	22.68	18.90	44.66	19.90	18.04	43.82	10.10	20.68	N/A	N/A	N/A	32.55	25.30	9.78	39.73	34.51	19.65	44.83	21.40	18.33	0.50	100.00	0.00	24.65	41.97	4.07	44.02	19.39	17.90	46.78	13.96	20.50	44.37	19.80	17.85
VGG19_BN	LF	52.80	0.13	52.66	52.75	0.07	52.62	52.07	0.12	51.92	52.67	0.07	52.54	52.80	0.13	52.66	51.73	0.03	51.64	44.04	0.23	43.84	N/A	N/A	N/A	28.98	0.20	28.87	41.17	0.10	41.37	52.91	0.15	52.77	53.03	0.14	52.86	23.52	0.00	23.64	52.07	0.09	51.92	46.46	0.21	46.26	52.75	0.15	52.62
VGG19_BN	SSBA	54.35	6.95	40.77	54.12	5.23	41.03	53.51	3.22	40.42	54.30	3.78	41.60	51.87	2.94	39.60	52.36	6.50	39.21	43.25	2.42	33.40	N/A	N/A	N/A	26.58	0.50	21.36	36.30	0.00	31.38	54.40	7.05	40.67	54.36	7.17	40.48	22.67	0.00	17.09	53.62	5.69	40.25	46.69	1.04	39.06	53.41	7.04	39.63
VGG19_BN	WaNet	54.22	43.86	30.55	54.94	8.90	41.68	54.38	3.89	42.75	54.69	17.78	38.88	53.60	3.78	42.60	50.38	2.29	44.42	44.28	1.14	37.43	N/A	N/A	N/A	23.40	6.72	18.28	37.08	0.79	33.39	54.53	42.84	30.95	42.34	14.08	28.57	23.21	0.03	24.08	54.17	35.59	34.89	47.81	2.60	37.76	54.36	44.64	30.20
VGG19_BN	InputAware	54.09	85.44	9.25	54.30	78.03	12.67	53.33	39.71	22.41	43.39	35.31	17.12	53.77	72.28	14.91	50.03	42.34	22.71	44.23	25.69	22.89	N/A	N/A	N/A	35.99	15.20	20.84	38.36	0.45	30.92	54.22	82.36	10.84	54.44	79.40	12.35	3.35	0.00	2.97	53.93	83.88	9.99	44.96	56.72	13.39	54.28	83.42	10.37
VGG19_BN	BPP	55.30	24.27	39.71	55.64	2.39	45.90	54.51	0.71	47.14	39.29	0.18	37.75	53.13	0.03	49.95	50.62	11.98	45.48	44.46	0.26	41.81	N/A	N/A	N/A	39.88	0.29	37.98	37.76	0.23	36.51	55.01	16.18	45.12	0.50	100.00	0.00	23.98	3.41	22.27	54.26	25.06	38.14	47.63	0.78	42.75	54.85	25.44	39.13
VGG19_BN	TrojanNN	53.73	79.86	10.53	53.91	84.67	8.46	52.93	71.15	13.32	53.84	81.65	9.77	52.34	52.89	21.01	53.58	79.51	11.05	44.24	53.55	16.83	N/A	N/A	N/A	23.60	96.91	1.26	39.44	0.10	32.03	53.96	83.14	9.19	48.44	69.28	11.96	26.02	0.00	21.54	53.58	80.20	10.10	46.52	83.77	7.74	53.30	71.46	14.18
ViT_b_16	BadNet	76.67	54.03	38.43	75.83	35.59	51.73	66.60	8.36	61.16	46.00	1.20	45.43	75.19	32.04	54.32	76.68	54.04	38.42	76.50	24.15	61.86	N/A	N/A	N/A	78.44	75.04	22.96	30.84	0.54	30.45	N/A	N/A	N/A	75.40	44.38	45.61	0.50	0.00	0.50	76.54	50.60	41.14	50.76	0.22	50.62	76.30	54.75	37.73
ViT_b_16	Blended	76.75	81.95	13.69	75.47	79.53	15.10	65.21	46.88	22.30	47.28	13.41	23.67	76.76	81.95	13.69	76.76	81.95	13.69	77.61	76.90	16.74	N/A	N/A	N/A	78.81	86.27	10.91	N/A	N/A	N/A	N/A	N/A	N/A	75.95	81.62	13.72	0.50	0.00	0.50	76.45	82.09	13.46	51.09	12.78	20.37	76.33	82.31	13.46
ViT_b_16	LC	77.02	2.87	73.16	76.25	2.29	72.93	66.56	0.60	53.64	2.52	6.04	2.49	77.02	2.87	73.16	77.02	2.87	73.16	76.50	2.23	72.70	N/A	N/A	N/A	78.64	10.01	70.69	N/A	N/A	N/A	77.02	2.87	73.16	58.78	2.77	54.63	0.50	0.00	0.50	76.78	2.67	72.99	47.06	0.81	42.15	77.02	3.23	72.80
ViT_b_16	SIG	75.86	9.10	46.62	75.15	10.05	44.46	64.80	2.07	28.48	42.13	0.39	25.69	73.91	11.82	43.27	75.86	9.10	46.62	78.01	8.52	49.71	N/A	N/A	N/A	78.61	12.42	48.39	N/A	N/A	N/A	75.87	9.10	46.62	75.16	8.50	46.10	0.50	0.00	0.50	75.49	8.22	46.18	55.18	0.35	33.26	75.84	9.57	46.47
ViT_b_16	LF	76.12	0.06	76.02	74.83	0.06	74.72	65.90	0.07	65.81	42.85	0.13	42.73	76.12	0.06	76.02	75.51	0.03	75.42	76.92	0.03	76.83	N/A	N/A	N/A	78.56	0.09	78.46	37.12	0.26	37.14	76.14	0.06	76.04	1.88	1.59	1.80	0.50	0.00	0.50	75.82	0.09	75.72	53.30	0.13	53.18	76.12	0.05	76.02
ViT_b_16	SSBA	75.76	28.29	51.50	74.74	23.56	52.57	64.77	5.92	47.60	41.63	0.32	33.67	75.76	28.29	51.50	75.75	28.18	51.53	77.89	20.68	57.51	N/A	N/A	N/A	78.33	26.99	54.97	37.86	0.16	31.56	75.76	28.30	51.49	1.09	0.00	1.11	0.50	0.00	0.50	75.62	29.71	50.56	49.19	0.23	41.66	75.67	28.29	51.35
ViT_b_16	WaNet	61.70	51.33	34.83	62.77	18.14	51.58	54.73	0.35	47.37	6.87	1.67	6.72	11.11	0.36	9.02	56.38	23.56	45.45	75.65	2.77	70.71	N/A	N/A	N/A	78.17	2.53	73.23	5.70	2.82	5.60	61.70	51.35	34.83	2.38	0.84	2.36	0.50	0.00	0.50	61.60	50.82	35.09	5.64	0.63	5.55	61.40	50.15	35.40
ViT_b_16	InputAware	63.94	60.20	28.84	63.79	44.35	36.84	52.93	4.82	40.56	18.65	0.32	13.54	60.37	0.32	48.28	63.72	70.43	21.92	77.98	52.25	39.07	N/A	N/A	N/A	78.32	51.36	40.38	N/A	N/A	N/A	63.74	70.39	21.93	2.60	2.44	2.60	N/A	N/A	N/A	63.59	71.57	20.97	31.78	0.11	24.14	63.37	70.83	21.60
ViT_b_16	BPP	62.89	69.14	23.10	63.35	40.23	40.61	54.66	1.52	49.79	6.35	1.94	6.25	62.65	0.08	59.22	62.89	69.14	23.10	76.79	3.55	72.23	N/A	N/A	N/A	78.45	4.31	73.74	34.64	0.48	31.95	62.89	69.14	23.10	0.46	0.00	0.47	N/A	N/A	N/A	N/A	N/A	N/A	5.79	0.41	5.48	N/A	N/A	N/A
ViT_b_16	TrojanNN	76.27	88.97	9.96	75.07	76.63	19.56	64.66	2.57	33.09	44.35	0.46	27.38	75.46	78.95	18.04	76.14	88.70	10.17	76.59	85.70	12.91	N/A	N/A	N/A	78.28	91.95	7.43	N/A	N/A	N/A	76.27	88.97	9.96	75.80	86.18	12.29	0.50	0.00	0.50	76.02	88.77	10.08	50.51	5.25	27.63	76.30	89.16	9.79
ConvNext_tiny	BadNet	69.18	4.89	66.02	65.40	1.10	64.14	60.37	0.20	59.42	52.90	0.37	52.39	69.08	4.88	66.00	63.43	1.92	62.26	73.37	0.16	72.45	N/A	N/A	N/A	77.03	35.19	53.13	38.18	0.70	37.91	N/A	N/A	N/A	28.51	0.64	27.27	5.13	0.01	4.93	68.92	4.66	65.95	66.60	1.39	65.21	69.22	4.82	66.02
ConvNext_tiny	Blended	67.44	76.58	16.26	64.48	64.79	21.20	56.45	29.32	25.47	53.75	46.81	22.31	67.44	76.58	16.26	67.18	75.73	16.85	73.97	60.89	25.30	N/A	N/A	N/A	77.01	75.69	17.16	38.82	0.05	32.59	N/A	N/A	N/A	29.22	28.83	14.52	5.88	0.08	4.37	67.22	76.19	16.39	64.46	64.74	20.53	67.43	75.73	16.61
ConvNext_tiny	LC	68.72	2.59	62.69	65.31	1.97	59.82	58.14	1.21	53.43	55.69	2.16	51.14	60.51	0.74	56.26	63.28	0.75	58.54	73.43	0.98	67.82	N/A	N/A	N/A	76.74	0.91	71.32	38.18	9.68	33.38	68.72	2.59	62.69	47.71	1.77	45.36	6.79	0.00	6.47	67.61	2.11	61.78	65.74	1.32	61.99	68.58	2.56	62.57
ConvNext_tiny	SIG	69.09	14.17	43.30	66.04	7.21	42.07	58.24	4.10	34.80	64.38	5.08	40.87	66.07	8.22	42.57	62.99	11.18	38.43	73.22	8.42	46.42	N/A	N/A	N/A	69.32	2.61	45.95	39.92	42.14	19.74	69.09	14.17	43.30	42.69	13.21	21.33	10.40	13.43	4.15	68.08	13.21	43.11	66.40	11.87	41.37	68.83	13.95	43.57
ConvNext_tiny	LF	68.13	0.17	68.03	64.38	0.14	64.28	54.20	0.17	54.01	63.13	0.14	63.01	65.13	0.09	65.01	66.26	0.14	66.16	73.91	0.02	73.79	N/A	N/A	N/A	69.08	0.37	68.93	38.63	0.19	38.64	68.13	0.17	68.03	42.90	0.23	42.67	9.19	0.22	9.14	67.77	0.19	67.66	65.19	0.13	65.09	67.99	0.18	67.89
ConvNext_tiny	SSBA	67.79	27.48	48.12	64.93	16.15	50.59	58.52	2.65	48.33	57.26	4.86	46.04	67.78	27.48	48.12	63.19	11.44	51.89	73.68	4.14	62.16	N/A	N/A	N/A	76.66	18.07	59.11	40.09	0.22	33.85	67.79	27.48	48.12	13.78	28.51	10.54	0.56	0.00	0.55	67.34	26.47	48.35	65.75	23.39	47.91	67.55	27.48	48.06
ConvNext_tiny	WaNet	56.93	70.48	21.15	2.26	0.00	2.32	30.85	1.08	28.11	3.02	1.37	3.06	10.39	0.79	8.44	55.08	65.70	23.98	73.90	0.59	69.96	N/A	N/A	N/A	67.59	1.59	63.84	39.43	0.88	36.96	56.93	70.48	21.15	35.23	44.35	20.95	9.28	0.86	9.91	56.15	71.53	20.64	56.68	28.12	42.93	56.83	68.70	22.33
ConvNext_tiny	InputAware	57.93	85.03	11.60	15.81	9.55	9.39	3.63	0.51	3.34	14.87	0.08	8.36	4.73	0.18	4.50	54.50	3.07	40.61	73.89	37.92	41.05	N/A	N/A	N/A	76.83	44.92	40.27	38.25	0.43	30.54	56.75	75.18	17.05	2.47	1.86	2.26	10.12	0.21	8.73	56.41	72.31	18.45	56.56	41.98	33.04	56.80	75.36	16.99
ConvNext_tiny	BPP	57.48	37.10	42.62	5.33	2.17	5.41	33.73	0.72	31.50	2.64	3.12	2.62	6.27	0.25	6.04	51.98	3.19	48.07	72.89	0.29	69.93	N/A	N/A	N/A	76.19	0.38	72.92	38.93	0.16	38.32	57.48	37.10	42.62	0.50	0.00	0.50	9.91	1.13	9.11	57.27	36.21	42.64	56.66	12.30	50.44	57.46	37.17	42.52
ConvNext_tiny	TrojanNN	67.01	90.99	7.08	64.07	80.72	13.85	57.75	24.42	31.03	63.11	79.17	14.63	52.21	0.09	42.53	63.24	77.22	15.75	74.10	91.59	7.40	N/A	N/A	N/A	76.76	93.55	5.77	38.84	0.31	30.25	67.01	90.99	7.08	0.93	0.00	0.92	7.80	0.24	6.05	66.92	91.64	6.60	65.15	83.97	11.85	66.96	90.92	7.21

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	57.49	91.27	7.58	57.03	88.37	10.13	55.20	82.43	14.16	46.36	2.96	44.78	52.36	0.19	51.64	52.03	88.81	8.58	51.10	69.48	21.05	N/A	N/A	N/A	51.84	57.16	26.39	42.99	0.17	42.46	57.35	91.74	7.18	11.11	69.03	5.32	11.60	0.00	11.45	56.47	2.21	54.66	54.76	76.37	18.48	57.49	91.27	7.58
PreActResNet-18	Blended	56.77	91.45	5.32	56.27	89.97	5.70	54.88	86.54	6.57	46.31	46.45	14.51	53.89	87.47	6.61	52.18	85.79	6.22	51.20	87.42	6.36	N/A	N/A	N/A	50.49	0.48	21.56	42.70	89.79	6.33	56.78	91.70	5.09	0.71	0.00	0.54	13.62	4.71	6.52	56.05	86.83	7.16	53.33	88.39	5.77	56.77	91.44	5.33
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	57.38	70.69	16.32	56.60	68.06	17.49	55.10	63.73	18.13	49.02	37.28	26.61	53.85	55.18	21.88	54.34	62.49	18.18	50.67	68.57	14.75	N/A	N/A	N/A	52.56	66.63	16.12	48.12	0.18	42.65	56.79	71.29	16.49	35.01	74.81	7.34	12.48	0.77	11.77	56.55	64.42	19.50	53.54	56.95	22.31	56.79	71.29	16.49
PreActResNet-18	SSBA	57.25	62.14	21.27	56.68	51.27	26.03	55.34	37.88	28.71	47.41	11.06	35.22	55.27	0.06	43.00	54.97	46.74	26.02	50.27	47.02	24.35	N/A	N/A	N/A	52.02	18.65	35.58	43.11	0.05	34.81	56.10	60.59	21.52	31.45	35.76	17.71	12.57	0.18	8.60	55.57	60.08	20.93	55.66	43.61	29.05	57.25	62.15	21.26
PreActResNet-18	WaNet	56.70	56.75	30.80	56.99	29.56	42.20	54.92	35.09	34.62	47.02	2.57	40.43	56.26	0.32	53.63	54.31	43.38	35.70	50.78	13.50	39.27	N/A	N/A	N/A	52.08	6.92	41.29	47.68	0.31	41.61	56.68	2.77	55.28	0.59	31.71	0.56	11.99	0.32	12.62	55.94	54.79	31.27	54.79	7.39	50.61	56.64	3.40	55.17
PreActResNet-18	InputAware	57.56	93.12	5.18	57.73	98.17	1.43	55.66	91.32	6.25	50.50	88.45	7.17	54.91	45.85	32.16	55.26	0.38	46.11	50.79	77.55	11.96	N/A	N/A	N/A	51.76	51.60	21.70	48.59	0.33	44.79	56.83	3.23	49.97	0.93	88.80	0.36	12.24	0.02	10.27	57.35	0.12	48.77	56.21	54.54	28.09	57.92	94.20	4.14
PreActResNet-18	BPP	58.46	98.93	0.79	58.19	99.81	0.13	51.78	98.17	1.07	48.28	0.90	43.99	57.93	12.14	48.33	57.74	92.68	4.76	50.88	36.67	33.42	N/A	N/A	N/A	52.31	25.10	37.96	47.85	0.23	43.65	58.46	0.33	51.02	0.61	0.50	0.61	19.40	51.42	11.77	58.00	0.23	46.34	56.83	52.13	28.82	57.70	91.73	5.25
PreActResNet-18	TrojanNN	56.97	94.22	4.58	56.62	93.85	4.98	51.88	78.08	13.59	50.78	42.65	26.26	56.97	94.22	4.58	54.60	93.10	5.12	51.43	95.12	3.39	N/A	N/A	N/A	29.55	99.99	0.01	46.73	0.12	41.59	57.11	70.43	18.20	7.63	42.74	3.74	21.97	90.36	3.63	56.15	31.99	36.00	55.52	94.05	4.67	56.55	92.95	5.33
VGG19_BN	BadNet	53.73	98.14	1.55	53.56	98.05	1.63	52.64	94.59	4.14	43.48	64.12	18.86	53.31	0.05	52.35	53.76	98.14	1.55	43.69	78.42	11.92	N/A	N/A	N/A	N/A	N/A	N/A	39.69	0.17	39.72	N/A	N/A	N/A	53.64	98.19	1.51	28.23	0.06	27.72	53.10	97.68	1.97	46.00	92.57	5.30	53.21	98.24	1.48
VGG19_BN	Blended	54.00	91.81	4.18	53.87	91.80	4.09	53.15	88.76	4.98	40.22	47.87	10.30	54.00	91.81	4.18	49.08	89.95	4.54	44.05	81.96	6.86	N/A	N/A	N/A	N/A	N/A	N/A	40.43	91.37	4.14	N/A	N/A	N/A	53.78	91.42	4.35	28.12	91.04	1.75	53.54	91.38	4.29	45.30	86.65	4.46	53.35	92.07	3.95
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	54.11	0.24	53.95	53.66	0.04	53.57	53.17	0.06	53.04	53.56	0.05	53.47	51.18	0.12	51.06	52.74	0.01	52.65	43.69	0.37	43.52	N/A	N/A	N/A	31.42	0.18	31.31	38.90	0.14	38.85	54.07	0.31	53.91	54.11	0.22	53.96	21.54	0.00	21.65	52.59	0.19	52.45	46.56	0.14	46.43	52.74	0.19	52.61
VGG19_BN	SSBA	53.68	71.30	14.22	53.77	60.19	19.04	52.38	66.60	15.79	53.72	65.20	17.32	51.93	0.01	39.45	48.91	54.59	19.98	43.72	36.76	23.17	N/A	N/A	N/A	26.73	49.63	11.15	38.30	0.16	33.05	53.90	46.70	24.90	53.67	72.15	13.84	21.74	65.42	5.29	52.81	65.12	16.74	44.52	37.58	21.50	53.29	72.16	13.23
VGG19_BN	WaNet	54.62	95.60	3.12	54.48	88.22	7.41	54.19	11.21	30.47	39.91	2.25	34.56	50.34	0.23	27.73	52.10	18.53	39.89	43.78	9.03	34.04	N/A	N/A	N/A	30.46	3.77	23.13	36.84	0.00	34.76	54.81	94.85	3.62	0.50	100.00	0.00	23.43	0.00	24.31	54.68	6.37	35.79	49.24	39.86	27.85	54.43	95.82	2.97
VGG19_BN	InputAware	54.05	72.94	14.71	54.59	76.82	12.67	53.34	2.34	41.63	41.74	0.58	32.22	54.10	88.50	6.70	53.81	0.10	43.44	44.33	46.64	18.43	N/A	N/A	N/A	41.81	27.47	20.70	37.22	93.43	3.92	54.07	0.59	45.59	53.43	40.99	28.53	28.48	5.46	15.60	54.03	0.50	45.44	46.23	38.43	26.21	54.25	88.50	6.70
VGG19_BN	BPP	54.65	86.91	8.28	54.77	71.87	16.39	54.59	22.03	25.89	35.84	0.86	33.74	53.83	31.19	35.87	52.72	0.21	49.09	43.44	0.66	41.66	N/A	N/A	N/A	41.66	0.57	39.71	38.21	0.15	36.47	53.78	0.27	50.79	0.49	0.00	0.50	21.84	0.00	20.57	54.32	0.06	46.78	48.19	33.44	29.38	54.53	15.15	22.78
VGG19_BN	TrojanNN	45.18	95.25	2.44	50.71	98.12	1.32	51.17	95.94	2.58	50.53	98.39	1.17	50.08	61.38	18.00	45.22	95.24	2.52	43.83	95.80	1.76	N/A	N/A	N/A	24.16	99.95	0.03	37.39	98.87	1.05	45.08	73.05	11.42	0.50	100.00	0.00	24.35	0.00	1.58	43.77	92.20	3.72	46.07	96.76	1.92	43.67	78.41	8.48
ViT_b_16	BadNet	76.73	94.79	4.52	75.52	81.58	15.35	65.80	20.20	30.88	42.25	0.12	41.69	75.61	85.31	12.35	76.72	94.79	4.52	76.36	89.39	9.21	N/A	N/A	N/A	78.53	96.29	3.52	N/A	N/A	N/A	76.72	94.79	4.52	8.71	17.64	7.61	0.50	0.00	0.50	N/A	N/A	N/A	14.03	0.29	13.20	N/A	N/A	N/A
ViT_b_16	Blended	76.12	95.68	3.60	74.73	93.52	5.10	65.17	67.06	13.85	44.17	14.62	21.75	76.12	95.68	3.60	76.12	95.68	3.60	77.02	95.64	3.62	N/A	N/A	N/A	78.52	96.93	2.52	35.41	0.32	27.90	76.12	95.68	3.60	4.53	59.75	2.43	0.50	0.00	0.50	N/A	N/A	N/A	50.08	12.33	25.99	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	76.19	0.09	76.10	75.12	0.05	75.03	66.33	0.07	66.23	43.57	0.32	43.39	75.36	0.07	75.27	76.19	0.09	76.10	77.82	0.09	77.73	N/A	N/A	N/A	78.44	0.05	78.36	37.43	0.43	37.33	76.20	0.09	76.11	75.65	0.21	75.56	0.50	0.00	0.50	75.91	0.07	75.82	50.47	0.10	50.32	76.04	0.08	75.95
ViT_b_16	SSBA	75.23	78.13	16.56	73.90	66.81	22.97	63.65	40.63	30.74	41.44	1.32	32.42	73.62	73.84	18.73	73.57	71.77	20.26	76.21	71.72	21.90	N/A	N/A	N/A	78.28	63.90	27.72	N/A	N/A	N/A	75.23	78.13	16.55	74.48	75.86	17.87	0.50	100.00	0.00	75.10	79.02	15.83	47.85	4.47	38.46	75.24	78.07	16.50
ViT_b_16	WaNet	62.12	95.29	3.69	63.16	73.92	18.02	54.41	12.84	41.26	5.28	2.82	5.08	12.97	0.62	10.15	57.36	74.22	16.95	77.00	21.81	60.95	N/A	N/A	N/A	78.29	21.26	61.99	N/A	N/A	N/A	62.11	95.30	3.68	1.45	37.49	1.20	0.50	0.00	0.50	62.06	95.47	3.53	6.65	0.64	6.46	61.58	95.51	3.51
ViT_b_16	InputAware	63.71	74.70	16.12	63.32	55.44	28.42	54.66	3.18	45.43	13.47	1.20	9.30	62.91	0.11	58.80	64.62	65.72	21.98	77.50	68.58	28.27	N/A	N/A	N/A	78.36	72.96	24.83	N/A	N/A	N/A	64.62	65.72	21.98	1.46	15.27	1.39	N/A	N/A	N/A	64.42	66.46	21.43	11.63	0.36	7.50	64.22	65.49	21.98
ViT_b_16	BPP	62.91	88.89	8.16	1.23	0.00	1.21	37.51	0.26	34.87	7.24	1.81	6.83	6.21	0.48	6.04	62.91	88.89	8.16	75.63	48.43	40.29	N/A	N/A	N/A	78.70	54.78	36.71	N/A	N/A	N/A	62.91	88.89	8.16	1.57	33.79	1.42	N/A	N/A	N/A	N/A	N/A	N/A	6.49	0.83	6.07	N/A	N/A	N/A
ViT_b_16	TrojanNN	76.83	97.88	2.01	75.69	92.89	6.40	65.54	15.24	18.11	45.79	1.33	27.82	75.41	0.37	65.66	75.86	96.96	2.81	77.16	98.50	1.42	N/A	N/A	N/A	78.38	99.29	0.63	N/A	N/A	N/A	76.83	97.88	2.01	76.12	97.38	2.44	0.50	0.00	0.50	76.64	97.89	1.97	50.31	10.80	30.50	76.82	97.83	2.01
ConvNext_tiny	BadNet	68.14	96.41	3.21	65.16	86.37	11.58	55.86	1.08	54.13	55.07	37.37	39.13	54.57	3.67	52.81	62.97	59.93	28.54	73.56	93.49	5.89	N/A	N/A	N/A	N/A	N/A	N/A	38.26	0.26	38.04	N/A	N/A	N/A	1.66	11.74	1.46	10.10	0.76	9.90	67.67	96.54	3.07	64.86	76.83	19.42	67.97	96.48	3.14
ConvNext_tiny	Blended	69.19	94.15	4.71	65.48	88.45	8.54	58.69	64.53	17.91	56.97	80.59	11.98	65.26	90.45	7.27	67.78	93.14	5.41	72.87	93.91	4.85	N/A	N/A	N/A	N/A	N/A	N/A	38.09	96.80	2.32	N/A	N/A	N/A	30.45	65.95	9.07	9.96	0.33	6.80	68.89	94.31	4.57	65.21	88.44	8.19	69.19	94.12	4.74
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	67.90	0.25	67.80	65.27	0.14	65.15	58.29	0.09	58.16	55.23	0.11	55.11	64.59	0.09	64.49	66.47	0.19	66.37	73.93	0.14	73.84	N/A	N/A	N/A	76.22	0.12	76.12	39.02	0.24	39.06	67.90	0.25	67.80	49.64	0.74	49.45	10.00	0.58	9.97	67.71	0.23	67.61	64.32	0.09	64.22	67.73	0.26	67.63
ConvNext_tiny	SSBA	69.37	80.43	14.76	65.56	57.73	28.74	61.08	30.93	40.16	55.29	37.25	34.57	69.37	80.43	14.76	62.63	45.66	33.88	74.09	70.55	22.59	N/A	N/A	N/A	76.56	74.87	19.96	39.75	0.16	34.13	69.37	80.43	14.76	53.11	67.61	19.48	10.57	0.08	7.93	68.52	78.91	15.59	65.56	65.16	24.43	69.30	80.56	14.74
ConvNext_tiny	WaNet	55.68	94.12	4.67	6.58	2.15	6.25	42.82	10.38	35.01	2.85	0.83	2.85	6.50	0.48	6.23	52.84	74.99	18.44	74.21	20.46	59.78	N/A	N/A	N/A	76.43	34.50	52.02	39.22	1.43	36.73	55.70	94.13	4.66	1.37	3.75	1.35	6.99	1.31	7.47	55.53	94.22	4.53	55.99	75.35	16.11	55.72	94.37	4.45
ConvNext_tiny	InputAware	57.16	92.01	6.20	46.15	11.11	36.62	2.61	0.06	2.52	10.78	0.24	8.90	13.58	0.09	11.30	52.24	85.49	10.25	73.11	62.23	29.21	N/A	N/A	N/A	76.98	60.46	31.51	38.18	0.09	33.04	56.49	99.21	0.68	1.60	0.00	1.64	10.04	1.15	8.17	56.34	99.16	0.74	56.58	74.60	17.32	56.44	99.20	0.69
ConvNext_tiny	BPP	55.94	95.31	3.55	6.78	1.07	6.91	46.09	1.54	42.00	6.44	0.43	6.13	11.02	0.47	10.69	50.40	39.10	33.37	72.05	5.94	66.93	N/A	N/A	N/A	76.45	15.39	65.14	38.07	0.17	36.13	55.94	95.31	3.55	0.71	0.00	0.78	0.50	0.00	0.50	55.78	95.04	3.74	53.73	96.39	2.75	55.83	95.40	3.49
ConvNext_tiny	TrojanNN	68.49	98.99	0.88	64.94	95.75	3.50	58.64	79.80	12.60	64.18	96.64	2.76	50.91	0.09	39.98	63.73	90.23	7.07	74.07	98.46	1.45	N/A	N/A	N/A	76.78	99.03	0.89	38.62	2.95	29.22	68.49	98.99	0.88	43.87	81.81	9.99	6.53	0.60	5.42	68.27	99.11	0.77	64.67	95.95	3.35	68.46	98.97	0.89

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	57.51	33.53	42.12	57.14	92.24	7.02	55.35	81.28	15.43	46.37	7.30	43.35	54.32	64.86	26.83	52.35	89.77	8.60	50.08	90.35	7.60	N/A	N/A	N/A	49.50	0.02	51.64	43.05	0.11	42.51	57.19	95.02	4.58	26.60	97.50	1.28	13.10	1.60	13.15	55.49	0.28	54.79	55.71	85.68	12.32	56.68	94.69	4.83
PreActResNet-18	Blended	57.58	65.19	14.66	56.89	93.73	4.25	54.83	91.74	5.21	46.73	64.22	12.46	56.31	91.88	5.06	54.81	95.15	3.10	50.64	91.67	4.62	N/A	N/A	N/A	49.17	0.09	27.50	46.93	95.35	3.91	57.17	95.31	3.18	0.56	0.22	0.54	13.24	61.56	4.34	56.63	95.78	2.84	54.52	94.21	3.51	55.47	94.74	3.21
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	56.47	83.03	10.45	56.18	80.35	11.86	54.50	75.14	13.33	46.36	48.37	20.91	52.58	66.79	17.05	50.99	77.26	12.16	50.81	82.07	8.61	N/A	N/A	N/A	50.91	0.23	42.71	47.17	0.18	41.81	57.03	83.64	9.78	6.30	92.86	0.69	12.39	4.21	11.34	56.13	76.74	13.33	55.29	64.49	18.39	56.87	83.59	9.77
PreActResNet-18	SSBA	57.20	13.28	41.54	56.75	75.32	15.13	54.95	53.98	23.38	46.92	16.92	32.43	54.42	0.17	41.19	51.91	50.68	22.64	50.49	66.40	17.09	N/A	N/A	N/A	51.44	13.89	36.53	48.34	0.11	40.67	56.80	80.43	12.32	38.06	74.90	9.66	11.98	51.26	4.87	55.84	80.81	11.82	54.63	66.62	18.88	54.79	80.63	10.97
PreActResNet-18	WaNet	56.97	86.98	10.05	57.39	54.61	29.87	55.17	44.74	30.95	47.71	6.90	40.56	53.92	1.06	50.58	52.90	25.22	39.51	50.23	30.98	33.40	N/A	N/A	N/A	50.96	17.56	38.09	47.47	0.81	42.68	57.97	49.42	31.29	0.62	97.50	0.14	12.38	0.15	12.53	57.46	1.80	44.34	56.11	74.92	16.59	57.35	0.96	43.62
PreActResNet-18	InputAware	57.75	85.12	10.50	57.84	76.17	15.19	55.78	95.76	2.87	48.35	61.19	19.27	55.80	5.83	47.59	57.62	0.00	48.06	50.32	84.73	9.03	N/A	N/A	N/A	50.96	25.41	31.90	47.88	0.11	45.11	57.62	0.16	39.65	0.50	80.05	0.02	11.78	97.01	0.21	57.44	0.22	28.66	55.96	13.44	34.35	57.71	0.00	33.88
PreActResNet-18	BPP	58.25	97.96	1.30	57.93	58.92	25.37	51.50	63.18	18.64	47.03	0.52	44.00	55.77	0.24	51.49	58.24	82.55	8.67	50.74	60.91	22.20	N/A	N/A	N/A	52.14	0.01	48.37	47.25	0.31	43.43	57.64	0.28	54.77	0.64	17.17	0.54	19.28	78.51	6.33	57.28	0.15	48.87	56.25	52.31	27.21	57.84	96.83	2.00
PreActResNet-18	TrojanNN	57.18	98.02	1.81	56.80	97.93	1.86	51.43	87.99	8.85	51.08	74.30	14.68	53.59	0.04	47.60	54.04	96.53	3.02	50.56	96.64	2.41	N/A	N/A	N/A	47.64	0.01	41.80	46.80	98.72	1.20	57.17	40.46	32.95	32.40	98.63	0.61	22.20	98.00	1.09	55.93	1.49	46.59	54.34	96.35	3.08	57.18	98.02	1.81
VGG19_BN	BadNet	53.90	99.04	0.83	53.56	99.02	0.86	52.64	96.59	2.77	44.22	5.66	38.18	51.39	30.63	38.82	53.97	99.04	0.83	44.39	96.08	2.67	N/A	N/A	N/A	N/A	N/A	N/A	33.63	99.98	0.02	N/A	N/A	N/A	47.86	97.74	1.81	23.71	0.00	22.99	53.52	91.71	6.84	46.81	98.03	1.66	53.76	99.04	0.85
VGG19_BN	Blended	53.99	95.24	2.84	54.02	92.24	4.21	53.00	91.93	4.18	44.74	72.84	9.48	53.55	91.97	4.45	53.06	94.84	2.86	43.24	90.10	3.99	N/A	N/A	N/A	N/A	N/A	N/A	37.88	96.16	2.03	N/A	N/A	N/A	45.84	93.41	2.70	29.59	94.66	1.21	53.32	94.86	2.86	48.43	93.56	3.27	53.34	95.36	2.63
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	52.40	0.50	52.26	52.53	0.12	52.43	51.29	0.06	51.17	44.78	0.20	44.61	52.41	0.50	52.27	52.28	0.02	52.27	44.31	0.54	44.13	N/A	N/A	N/A	38.48	0.27	38.39	38.16	0.21	37.94	52.34	0.51	52.22	0.63	1.08	0.63	23.02	0.06	22.89	52.09	0.53	51.95	48.32	0.33	48.17	51.59	0.53	51.45
VGG19_BN	SSBA	53.67	85.09	8.33	53.68	85.58	8.06	52.73	78.19	10.92	43.92	57.74	17.34	52.24	0.02	34.48	52.86	84.48	8.38	44.09	72.22	11.02	N/A	N/A	N/A	38.19	11.50	31.52	39.25	92.62	3.68	53.77	84.49	8.61	0.52	0.00	0.51	22.90	82.57	3.40	53.62	80.35	10.55	49.89	77.07	11.10	53.45	85.14	8.20
VGG19_BN	WaNet	55.12	91.23	5.51	54.70	84.49	9.10	54.25	0.15	25.54	38.60	0.99	30.44	54.16	64.98	18.21	51.98	0.58	47.95	43.61	20.33	30.55	N/A	N/A	N/A	38.26	19.81	23.58	39.99	1.14	36.22	55.30	44.54	28.86	0.50	100.00	0.00	20.93	1.45	20.75	53.91	1.01	43.35	46.57	23.71	27.16	54.78	92.01	5.04
VGG19_BN	InputAware	53.98	82.68	10.74	54.07	0.06	47.50	53.05	0.01	35.06	39.08	0.27	29.98	51.81	0.03	45.92	53.74	0.09	46.20	44.00	70.82	11.67	N/A	N/A	N/A	39.91	56.97	12.62	39.20	94.97	3.61	53.86	0.46	43.20	7.11	16.37	5.59	29.44	28.26	7.78	52.73	0.57	43.63	45.61	31.29	30.40	53.80	80.23	11.99
VGG19_BN	BPP	55.36	81.07	11.61	55.19	64.49	20.52	54.50	0.02	23.15	39.53	0.15	37.57	54.15	0.38	42.40	49.85	0.79	31.82	44.12	1.52	41.52	N/A	N/A	N/A	39.61	1.99	36.95	38.53	0.37	37.32	54.79	0.11	52.59	0.50	100.00	0.00	23.93	2.38	22.06	55.00	0.37	49.03	49.58	70.07	15.48	54.95	0.63	36.48
VGG19_BN	TrojanNN	53.30	97.43	1.81	53.06	97.59	1.64	52.41	92.43	4.69	46.09	82.52	8.46	50.65	5.27	37.54	53.30	97.43	1.81	43.44	97.54	1.39	N/A	N/A	N/A	39.64	0.00	28.21	40.08	99.94	0.05	52.94	69.90	16.76	0.52	0.25	0.53	25.39	98.47	0.44	53.14	97.53	1.78	46.46	93.98	3.47	52.32	97.08	1.99
ViT_b_16	BadNet	76.98	97.45	2.27	75.80	94.24	5.14	65.66	31.38	22.49	46.51	0.13	45.85	75.70	93.07	6.16	76.97	97.45	2.27	77.31	97.67	2.09	N/A	N/A	N/A	78.50	98.45	1.44	N/A	N/A	N/A	76.97	97.45	2.27	76.41	95.16	4.24	0.50	0.00	0.50	N/A	N/A	N/A	9.50	0.51	9.39	N/A	N/A	N/A
ViT_b_16	Blended	77.39	98.03	1.73	76.10	96.70	2.78	66.51	71.92	10.86	42.08	10.32	21.66	76.33	96.50	2.97	77.39	98.03	1.73	75.68	97.34	2.25	N/A	N/A	N/A	78.60	98.77	1.06	N/A	N/A	N/A	77.39	98.03	1.73	74.70	96.75	2.64	0.50	0.00	0.50	N/A	N/A	N/A	51.19	15.12	23.22	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	74.17	0.19	74.06	72.86	0.08	72.74	64.12	0.14	63.99	42.85	0.16	42.72	72.66	0.10	72.54	74.17	0.19	74.06	76.03	0.14	75.92	N/A	N/A	N/A	78.66	0.10	78.57	36.60	0.35	36.63	74.16	0.19	74.05	73.21	0.22	73.10	0.50	0.00	0.50	73.89	0.16	73.78	50.00	0.11	49.86	74.14	0.17	74.03
ViT_b_16	SSBA	76.05	88.96	8.67	74.87	79.84	15.17	64.90	47.54	26.80	41.86	0.76	34.15	74.68	84.55	11.61	73.65	86.71	10.09	76.03	86.91	10.30	N/A	N/A	N/A	78.68	88.54	9.40	N/A	N/A	N/A	76.05	88.96	8.67	56.18	91.22	6.28	0.50	0.00	0.50	75.92	89.20	8.42	49.43	6.83	37.43	75.81	88.99	8.62
ViT_b_16	WaNet	63.40	95.86	3.20	8.91	0.63	8.59	54.94	22.15	36.24	6.30	2.41	6.07	62.93	63.90	26.01	58.41	82.10	12.24	77.98	31.58	54.31	N/A	N/A	N/A	78.35	36.86	50.77	36.80	0.63	34.60	63.42	95.87	3.20	1.39	12.90	1.27	0.50	0.00	0.50	63.38	95.88	3.19	6.21	0.79	5.65	62.86	95.93	3.11
ViT_b_16	InputAware	63.72	85.48	11.85	63.70	81.58	15.40	54.33	0.76	44.82	6.39	3.63	4.19	63.65	75.28	20.55	63.91	92.02	6.73	76.11	75.10	22.53	N/A	N/A	N/A	78.31	81.39	16.83	N/A	N/A	N/A	64.15	92.23	6.43	1.69	38.22	1.54	N/A	N/A	N/A	64.14	91.91	6.65	9.70	2.05	6.44	63.83	91.90	6.70
ViT_b_16	BPP	62.98	94.21	4.49	64.00	90.45	7.11	53.99	36.74	31.57	6.07	1.76	5.90	6.11	0.61	5.91	62.98	94.21	4.49	76.88	68.83	25.48	N/A	N/A	N/A	78.51	26.76	56.82	35.61	0.35	33.11	62.98	94.21	4.49	0.55	10.35	0.48	N/A	N/A	N/A	N/A	N/A	N/A	7.28	0.89	6.86	N/A	N/A	N/A
ViT_b_16	TrojanNN	77.15	99.08	0.89	75.94	97.69	2.13	65.75	0.57	10.51	43.16	0.25	24.23	75.93	96.27	3.38	77.28	99.08	0.89	76.42	98.83	1.15	N/A	N/A	N/A	78.37	99.67	0.33	N/A	N/A	N/A	77.28	99.08	0.89	76.13	99.01	0.96	0.50	0.00	0.50	76.96	98.93	1.03	53.90	37.07	27.36	77.01	99.18	0.80
ConvNext_tiny	BadNet	67.41	99.23	0.68	64.32	95.50	3.86	58.75	48.51	34.99	54.13	31.43	42.09	63.67	80.84	15.84	62.44	75.65	18.24	73.10	98.70	1.17	N/A	N/A	N/A	N/A	N/A	N/A	38.50	0.44	38.03	N/A	N/A	N/A	0.50	0.00	0.50	9.93	1.50	9.92	67.21	99.20	0.70	63.96	81.35	15.56	67.40	99.23	0.68
ConvNext_tiny	Blended	68.14	97.32	2.29	64.72	93.81	4.62	59.20	83.76	10.20	56.16	82.17	10.48	55.58	2.89	31.07	67.95	97.15	2.42	73.06	96.95	2.51	N/A	N/A	N/A	N/A	N/A	N/A	37.73	99.43	0.42	N/A	N/A	N/A	42.07	94.27	3.62	9.70	1.39	6.47	67.90	97.35	2.27	64.75	94.00	4.56	68.09	97.31	2.29
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	67.73	0.42	67.60	63.79	0.06	63.68	56.73	0.05	56.56	56.92	0.14	56.78	64.79	0.04	64.70	62.17	0.30	62.03	73.44	0.31	73.37	N/A	N/A	N/A	76.42	0.31	76.34	39.77	0.59	39.62	67.74	0.42	67.61	20.48	11.65	20.42	10.43	1.12	10.35	67.42	0.42	67.29	65.83	0.09	65.74	67.51	0.38	67.39
ConvNext_tiny	SSBA	67.07	88.88	8.36	63.84	75.97	17.10	56.80	48.08	29.38	56.10	55.18	26.86	67.07	88.88	8.36	60.78	70.32	19.06	74.69	86.56	10.90	N/A	N/A	N/A	76.59	89.38	8.84	38.02	0.33	33.03	67.07	88.88	8.36	42.84	86.91	7.91	7.02	9.55	4.99	66.57	87.73	9.35	63.59	74.86	17.43	66.95	89.06	8.28
ConvNext_tiny	WaNet	56.21	92.86	5.32	4.79	3.09	4.68	44.66	18.80	33.55	0.50	0.00	0.50	6.51	0.53	6.39	50.64	58.97	25.21	73.47	38.13	47.81	N/A	N/A	N/A	76.50	43.97	44.80	39.51	1.00	36.69	56.23	92.85	5.32	0.70	57.41	0.49	2.98	0.54	3.06	55.68	93.01	5.15	55.67	79.12	14.02	55.86	92.20	5.76
ConvNext_tiny	InputAware	57.25	73.18	16.66	54.50	59.13	25.81	42.85	3.33	34.91	12.50	0.80	8.37	5.99	0.30	5.22	51.60	9.02	38.17	73.04	72.02	22.48	N/A	N/A	N/A	76.52	76.49	20.02	39.85	0.91	35.11	56.68	82.68	10.79	6.03	10.30	5.09	9.73	0.51	8.49	56.54	79.05	12.96	55.75	77.70	14.43	56.70	82.36	10.86
ConvNext_tiny	BPP	57.37	99.23	0.56	46.39	0.39	44.17	40.72	0.93	35.79	20.97	0.04	19.84	13.32	0.46	12.53	54.56	78.77	14.68	73.04	21.53	59.06	N/A	N/A	N/A	76.62	36.36	50.33	39.90	0.24	38.78	57.37	99.23	0.56	1.68	0.00	1.76	0.50	0.00	0.50	56.08	98.92	0.70	55.20	9.30	30.51	57.21	99.21	0.57
ConvNext_tiny	TrojanNN	66.75	99.41	0.53	63.36	97.22	2.22	58.21	88.43	8.05	50.73	38.49	24.93	51.77	6.21	33.63	60.49	96.05	2.68	74.16	99.08	0.81	N/A	N/A	N/A	76.65	99.58	0.39	38.88	99.31	0.59	66.75	99.41	0.53	12.71	90.98	2.37	9.89	12.69	7.62	66.75	99.41	0.52	63.23	97.43	2.07	66.52	99.39	0.55

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	56.36	99.86	0.13	55.35	99.55	0.44	53.00	96.83	2.86	45.51	34.63	34.01	52.97	65.94	25.45	51.50	17.65	43.87	97.55	84.67	15.09	N/A	N/A	N/A	95.80	0.00	96.28	78.76	0.00	78.66	56.30	99.84	0.15	0.59	87.81	0.13	10.69	22.42	10.51	54.77	0.21	54.36	53.99	98.88	1.06	56.27	99.86	0.13
PreActResNet-18	Blended	56.69	98.75	0.94	55.98	97.49	1.81	52.96	94.47	3.21	46.72	88.89	4.96	53.63	96.52	2.21	51.04	75.18	9.36	97.48	99.73	0.23	N/A	N/A	N/A	44.18	0.00	23.91	83.08	100.00	0.00	56.69	98.75	0.94	9.45	87.46	1.51	12.20	99.05	0.31	56.33	90.51	5.81	50.99	93.85	3.81	56.69	98.75	0.94
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	56.67	95.99	2.75	55.76	90.68	6.00	53.11	86.80	6.47	46.93	63.90	14.66	51.49	67.51	16.57	56.67	95.99	2.75	49.83	96.08	2.25	N/A	N/A	N/A	49.05	0.09	48.26	45.85	97.44	1.85	56.71	96.22	2.46	0.47	0.07	0.43	10.50	88.45	3.29	56.06	86.92	8.39	54.80	90.47	5.87	56.57	96.20	2.52
PreActResNet-18	SSBA	56.86	95.69	3.05	55.95	89.71	6.75	53.26	79.97	10.63	46.65	42.45	24.65	54.04	0.04	38.80	55.93	93.52	4.36	97.16	98.30	1.43	N/A	N/A	N/A	80.20	0.01	77.17	81.57	99.96	0.04	56.63	95.23	3.37	0.72	96.95	0.27	11.51	97.96	0.43	56.09	74.98	15.24	53.42	90.06	6.22	56.35	89.05	7.36
PreActResNet-18	WaNet	56.83	98.36	1.21	56.68	0.23	53.72	54.18	93.36	2.09	46.81	2.44	39.54	53.02	0.27	50.56	54.83	1.20	50.75	95.91	54.10	43.56	N/A	N/A	N/A	1.45	99.40	0.01	84.09	0.01	84.14	1.93	98.74	0.61	35.67	98.41	0.58	11.57	2.39	11.83	55.14	0.17	53.84	53.97	81.82	13.42	56.76	0.31	55.42
PreActResNet-18	InputAware	57.87	98.25	1.51	57.91	0.40	55.79	56.27	89.87	6.52	48.72	1.04	45.83	56.48	0.49	53.17	55.70	0.12	52.16	50.70	95.75	3.12	N/A	N/A	N/A	50.59	0.01	47.19	45.75	99.30	0.61	58.20	4.81	52.97	0.67	99.41	0.18	12.02	84.44	2.73	57.78	0.73	52.18	55.72	36.29	40.62	57.97	0.36	55.08
PreActResNet-18	BPP	58.54	99.98	0.02	57.93	49.75	27.69	51.36	1.22	40.20	48.01	0.51	45.40	50.47	0.24	47.56	55.73	99.74	0.17	50.65	96.58	2.51	N/A	N/A	N/A	47.94	0.00	46.15	46.05	99.98	0.00	58.35	0.24	54.73	0.58	98.54	0.05	18.52	98.17	0.82	58.38	0.11	50.51	56.00	98.70	0.93	58.16	0.03	35.79
PreActResNet-18	TrojanNN	57.09	99.88	0.09	56.18	99.91	0.07	51.27	88.16	8.30	49.85	50.03	23.86	54.44	0.19	46.78	53.79	97.25	2.30	50.62	99.71	0.25	N/A	N/A	N/A	45.97	0.00	40.97	45.48	99.69	0.29	57.05	96.75	2.64	0.49	98.38	0.01	19.62	99.95	0.05	56.18	0.11	46.41	55.44	99.04	0.84	57.09	99.88	0.09
VGG19_BN	BadNet	53.09	99.85	0.15	52.35	98.56	1.23	52.02	93.64	5.64	45.37	0.72	43.29	51.53	99.93	0.07	49.55	99.46	0.49	43.42	99.78	0.20	N/A	N/A	N/A	N/A	N/A	N/A	37.74	100.00	0.00	N/A	N/A	N/A	53.01	99.85	0.15	26.88	0.09	26.65	51.47	0.16	50.57	48.31	99.10	0.87	52.94	99.32	0.67
VGG19_BN	Blended	42.61	98.54	0.87	49.12	97.72	1.30	49.90	98.03	1.26	44.56	88.38	5.18	49.19	0.05	19.80	40.51	97.08	1.27	42.76	98.23	0.96	N/A	N/A	N/A	N/A	N/A	N/A	37.55	99.89	0.07	N/A	N/A	N/A	0.50	100.00	0.00	3.29	0.01	1.49	41.88	0.20	16.65	44.90	94.78	2.52	42.06	98.51	0.83
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	51.57	2.32	51.46	52.20	0.03	52.14	51.58	0.02	51.50	40.87	0.17	40.71	49.02	0.03	48.99	51.42	0.00	51.48	41.38	3.84	41.21	N/A	N/A	N/A	36.53	4.53	36.39	37.09	17.68	36.88	51.63	2.40	51.51	51.76	2.25	51.64	21.94	0.00	22.05	51.13	2.41	51.02	46.59	0.03	46.50	47.09	2.18	46.98
VGG19_BN	SSBA	52.49	95.32	2.86	52.25	89.50	6.13	51.00	86.91	7.39	45.55	68.37	14.14	49.29	0.02	34.75	52.14	93.84	3.77	43.38	94.70	2.21	N/A	N/A	N/A	40.08	0.10	35.84	35.96	99.55	0.19	52.66	95.03	2.99	0.50	100.00	0.00	24.97	96.51	0.85	51.52	0.40	34.79	48.33	86.10	7.53	52.45	94.88	3.06
VGG19_BN	WaNet	55.14	99.99	0.00	55.03	0.29	48.16	54.22	56.92	16.44	36.68	0.44	31.65	52.16	0.25	36.19	51.49	5.15	35.67	42.20	89.58	5.14	N/A	N/A	N/A	42.20	1.68	36.97	37.27	97.83	1.04	53.98	99.88	0.10	0.50	100.00	0.00	21.00	39.91	9.84	53.54	0.15	48.05	47.76	98.28	1.12	54.84	100.00	0.00
VGG19_BN	InputAware	53.68	99.83	0.11	53.20	0.03	49.06	53.56	3.10	38.67	40.07	0.13	31.10	52.86	0.14	47.92	53.72	0.00	47.03	43.05	95.49	2.49	N/A	N/A	N/A	40.97	24.60	23.20	29.56	93.57	2.92	53.51	5.77	43.50	0.52	0.00	0.52	23.58	92.58	0.51	53.02	0.07	46.09	49.81	1.95	45.29	53.26	0.03	49.17
VGG19_BN	BPP	55.53	99.88	0.12	54.96	0.10	52.98	54.39	0.17	51.26	37.54	0.32	35.89	54.49	0.09	52.38	55.36	0.00	31.58	42.82	83.12	9.99	N/A	N/A	N/A	41.62	0.25	40.15	36.45	87.47	0.52	55.60	0.16	53.87	43.80	97.12	1.77	20.04	98.72	0.12	54.77	0.14	52.35	46.28	3.38	41.27	55.10	15.56	35.95
VGG19_BN	TrojanNN	52.11	99.78	0.20	51.37	65.81	18.03	51.16	85.73	7.99	43.96	55.29	17.93	44.96	0.67	35.84	47.52	97.47	1.96	42.83	99.74	0.19	N/A	N/A	N/A	37.98	0.00	27.91	37.10	100.00	0.00	52.02	55.13	22.31	52.16	99.75	0.23	24.51	99.97	0.01	51.59	0.13	38.12	45.22	99.44	0.50	51.81	95.04	3.61
ViT_b_16	BadNet	76.15	99.72	0.28	74.68	98.62	1.18	66.47	29.15	8.51	46.06	0.30	45.31	74.66	98.42	1.37	76.15	99.72	0.28	75.66	99.49	0.46	N/A	N/A	N/A	78.19	99.79	0.20	2.55	86.47	1.86	76.15	99.72	0.28	74.09	99.48	0.49	0.50	0.00	0.50	N/A	N/A	N/A	51.45	26.41	42.60	N/A	N/A	N/A
ViT_b_16	Blended	76.00	99.83	0.15	75.19	99.37	0.54	65.25	83.34	3.50	41.67	0.50	23.03	74.67	99.51	0.43	76.00	99.82	0.16	77.58	99.77	0.20	N/A	N/A	N/A	78.17	99.93	0.07	35.12	99.76	0.20	75.99	99.83	0.15	0.68	58.97	0.21	0.50	0.00	0.50	N/A	N/A	N/A	7.45	0.37	5.84	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	59.84	1.41	59.71	58.95	0.11	58.85	53.56	0.18	53.40	39.33	0.22	39.19	58.71	0.06	58.60	59.84	1.41	59.71	71.61	0.76	71.50	N/A	N/A	N/A	76.72	1.63	76.62	36.52	0.43	36.48	59.85	1.41	59.72	59.65	1.37	59.52	0.50	0.00	0.50	59.83	1.40	59.70	57.10	0.10	56.96	59.71	1.24	59.58
ViT_b_16	SSBA	75.30	98.86	0.92	73.64	96.61	2.62	64.57	80.03	9.39	45.21	1.26	35.03	73.84	77.94	15.96	73.38	98.66	1.07	76.91	98.67	1.13	N/A	N/A	N/A	78.40	99.59	0.36	N/A	N/A	N/A	75.30	98.86	0.92	0.71	95.90	0.21	0.50	0.00	0.50	74.87	98.77	0.97	50.52	22.63	34.03	75.05	98.75	1.01
ViT_b_16	WaNet	60.90	99.74	0.20	63.22	94.31	4.35	53.50	70.99	15.58	6.58	1.62	6.31	13.20	0.64	9.86	55.48	90.60	5.26	75.77	93.54	5.47	N/A	N/A	N/A	77.62	95.37	4.05	N/A	N/A	N/A	60.91	99.74	0.20	0.47	48.10	0.21	0.50	0.00	0.50	60.90	99.76	0.20	8.05	1.72	5.87	60.90	99.74	0.20
ViT_b_16	InputAware	63.82	96.88	2.42	63.43	98.08	1.62	54.51	39.10	37.10	5.79	3.02	4.19	64.07	50.21	35.13	62.24	98.43	1.37	76.72	94.98	4.45	N/A	N/A	N/A	78.20	96.78	2.92	N/A	N/A	N/A	63.54	99.12	0.75	0.79	92.33	0.25	N/A	N/A	N/A	63.50	99.08	0.79	11.92	0.44	8.59	63.15	99.07	0.79
ViT_b_16	BPP	63.08	99.69	0.21	9.07	0.44	8.33	39.29	0.25	36.47	6.01	3.62	5.52	6.95	0.48	6.50	63.08	99.69	0.21	76.89	95.23	4.03	N/A	N/A	N/A	78.19	96.55	2.98	N/A	N/A	N/A	63.08	99.69	0.21	0.49	99.89	0.00	N/A	N/A	N/A	N/A	N/A	N/A	7.41	1.19	7.09	N/A	N/A	N/A
ViT_b_16	TrojanNN	74.98	99.77	0.22	74.25	98.86	1.11	64.25	26.69	8.81	42.43	5.32	24.78	73.26	0.09	66.23	75.01	99.75	0.24	77.94	99.78	0.21	N/A	N/A	N/A	78.40	99.92	0.07	N/A	N/A	N/A	74.98	99.77	0.22	74.41	99.80	0.19	0.50	0.00	0.50	74.70	99.61	0.38	47.39	36.25	28.12	75.06	99.80	0.19
ConvNext_tiny	BadNet	65.74	99.87	0.13	61.88	98.71	1.22	55.85	42.57	35.71	50.85	26.59	40.55	65.42	99.87	0.13	59.27	88.33	8.76	73.49	99.95	0.05	N/A	N/A	N/A	76.55	99.99	0.01	36.34	99.98	0.02	N/A	N/A	N/A	41.75	97.31	2.03	5.80	2.30	5.36	65.21	99.86	0.14	62.70	98.25	1.67	65.31	99.86	0.14
ConvNext_tiny	Blended	68.48	99.56	0.38	65.23	99.01	0.82	59.37	93.99	3.99	56.62	92.24	5.24	64.96	98.24	1.39	67.23	99.38	0.50	73.43	99.54	0.41	N/A	N/A	N/A	76.24	99.77	0.20	39.77	100.00	0.00	N/A	N/A	N/A	1.60	95.99	0.40	9.67	51.33	3.97	67.83	99.50	0.42	66.04	99.48	0.41	68.38	99.57	0.37
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	54.65	2.52	54.51	53.26	0.14	53.14	48.77	0.21	48.61	47.38	0.25	47.22	26.71	0.38	26.59	54.83	0.45	54.77	71.06	1.70	70.95	N/A	N/A	N/A	74.82	1.34	74.72	38.05	1.59	38.13	54.67	2.52	54.53	0.51	99.99	0.01	8.96	10.83	8.93	55.22	0.30	55.16	54.47	0.18	54.32	54.49	2.60	54.36
ConvNext_tiny	SSBA	68.44	97.17	2.25	64.77	89.54	7.97	57.13	55.66	25.15	56.62	69.39	19.53	64.74	89.53	7.88	63.99	78.55	14.58	73.36	97.38	2.24	N/A	N/A	N/A	76.06	98.59	1.29	37.54	98.69	0.72	68.44	97.17	2.25	24.59	86.41	5.45	8.94	52.25	3.57	68.01	97.15	2.25	65.51	94.84	3.81	68.47	97.14	2.30
ConvNext_tiny	WaNet	55.15	99.40	0.50	46.78	17.56	38.49	46.17	22.28	35.17	9.97	0.53	10.74	6.61	0.49	5.92	49.67	53.02	29.04	72.61	86.95	10.80	N/A	N/A	N/A	75.94	89.15	9.25	35.91	88.42	6.30	55.14	99.40	0.50	32.75	98.60	0.89	0.50	100.00	0.00	54.91	99.42	0.48	55.30	90.87	6.41	54.81	99.46	0.44
ConvNext_tiny	InputAware	56.98	98.84	0.88	54.76	70.61	20.99	40.13	0.40	36.19	37.90	0.20	32.05	14.99	0.38	11.98	54.86	0.48	45.99	71.54	89.12	9.40	N/A	N/A	N/A	75.90	94.89	4.49	37.49	99.32	0.57	57.52	99.58	0.34	0.50	100.00	0.00	8.98	3.55	8.07	57.32	99.51	0.41	56.93	98.52	1.26	57.30	99.60	0.33
ConvNext_tiny	BPP	56.76	99.61	0.28	29.52	36.98	18.99	42.00	0.33	39.10	7.87	0.75	6.56	11.91	0.36	11.44	52.54	13.59	46.26	42.67	14.58	37.75	N/A	N/A	N/A	76.03	91.49	7.27	37.73	61.38	21.02	56.76	99.61	0.28	0.94	100.00	0.00	8.37	2.26	8.05	56.54	99.61	0.30	55.88	99.62	0.27	56.21	99.65	0.26
ConvNext_tiny	TrojanNN	67.14	99.95	0.04	63.15	99.22	0.63	59.02	95.80	3.04	51.03	62.52	17.22	48.23	0.23	37.74	61.18	98.92	0.74	72.62	99.91	0.07	N/A	N/A	N/A	76.39	99.98	0.02	39.10	100.00	0.00	67.14	99.95	0.04	6.50	75.79	3.66	9.63	99.18	0.21	67.02	99.95	0.04	64.66	99.82	0.16	67.06	99.95	0.04

Targeted Model	Defense→	No Defense			FT			FP			NAD			NC			ANP			AC			SS			ABL			DBD			CLP			D-BR			D-ST			DDE			i-BAU			MBNS
Targeted Model	Attack↓	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)	CA(%)	ASR(%)	RA(%)
PreActResNet-18	BadNet	56.23	100.00	0.00	55.18	0.09	54.43	51.73	99.99	0.01	46.37	0.27	45.61	51.52	0.10	50.82	50.55	7.74	47.60	49.57	99.87	0.12	N/A	N/A	N/A	49.73	0.00	51.21	44.12	98.89	0.95	55.94	100.00	0.00	16.17	99.60	0.14	7.28	43.89	6.95	54.08	0.03	53.91	51.48	97.36	2.44	55.61	100.00	0.00
PreActResNet-18	Blended	56.03	99.71	0.22	55.04	97.73	1.70	51.89	95.94	2.10	46.89	94.99	2.63	52.55	93.21	3.96	54.99	84.61	7.80	49.92	99.53	0.27	N/A	N/A	N/A	44.63	0.05	30.19	44.51	100.00	0.00	55.70	99.68	0.24	0.49	0.03	0.43	10.81	99.04	0.16	54.96	76.59	10.00	53.03	91.90	4.48	54.74	99.78	0.17
PreActResNet-18	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
PreActResNet-18	LF	55.97	98.57	0.97	54.80	94.87	3.49	51.44	95.25	2.42	45.45	50.49	20.21	52.99	85.56	8.07	54.66	95.39	3.06	49.28	98.28	0.95	N/A	N/A	N/A	48.35	0.31	46.43	43.80	98.67	0.98	55.61	98.49	1.02	0.52	67.06	0.19	9.86	92.52	2.01	55.11	85.92	8.48	51.13	85.32	8.02	55.44	98.58	0.98
PreActResNet-18	SSBA	55.22	97.71	1.68	54.80	91.57	5.66	50.47	88.87	6.26	45.32	57.32	19.44	52.47	53.47	23.17	52.83	91.44	5.96	49.38	97.50	1.55	N/A	N/A	N/A	47.96	0.40	43.29	44.40	99.85	0.12	55.17	97.65	1.72	0.62	0.54	0.62	11.22	96.57	0.63	54.18	57.74	22.40	49.86	81.90	9.78	54.70	97.80	1.62
PreActResNet-18	WaNet	56.78	99.49	0.36	56.74	0.19	54.97	53.84	3.94	2.38	46.98	0.43	43.99	53.33	0.23	51.63	53.87	0.75	48.07	49.87	99.46	0.31	N/A	N/A	N/A	49.78	0.82	48.96	44.00	99.71	0.25	56.21	98.50	1.12	0.53	99.25	0.03	9.82	30.99	8.07	56.17	0.22	55.35	53.71	75.23	17.81	56.40	99.46	0.35
PreActResNet-18	InputAware	57.45	98.85	1.06	57.45	1.65	53.62	55.28	62.92	24.70	47.91	1.86	43.13	56.20	0.09	52.19	53.17	0.17	48.87	49.30	98.38	1.25	N/A	N/A	N/A	50.86	0.04	45.34	45.42	99.73	0.22	57.75	99.58	0.33	0.51	69.30	0.09	7.79	99.94	0.01	57.54	0.24	33.57	52.48	72.98	18.14	57.72	99.58	0.35
PreActResNet-18	BPP	58.14	100.00	0.00	57.35	0.43	52.52	50.86	0.51	38.34	45.72	0.38	42.72	53.58	0.18	50.85	52.39	1.74	29.89	50.90	99.32	0.48	N/A	N/A	N/A	47.39	0.00	45.16	43.99	99.99	0.00	57.01	0.28	54.29	0.71	97.79	0.28	18.26	99.53	0.34	56.89	0.08	44.86	56.13	99.65	0.28	57.65	99.99	0.00
PreActResNet-18	TrojanNN	55.89	99.98	0.01	55.42	0.50	45.47	50.28	13.55	34.42	48.48	0.83	38.57	52.69	0.15	45.55	50.37	1.40	33.22	49.02	99.96	0.04	N/A	N/A	N/A	44.90	0.00	40.88	43.85	99.93	0.07	55.86	8.39	42.74	0.64	76.20	0.16	19.40	99.89	0.10	55.01	0.08	45.06	52.65	98.49	1.40	55.89	99.98	0.01
VGG19_BN	BadNet	43.56	99.96	0.03	49.76	33.88	36.04	50.03	96.57	3.02	44.00	0.19	42.50	43.42	99.96	0.03	41.67	0.00	38.50	43.18	99.98	0.01	N/A	N/A	N/A	N/A	N/A	N/A	35.27	100.00	0.00	N/A	N/A	N/A	0.50	100.00	0.00	32.92	0.02	32.77	42.25	0.03	42.01	44.65	99.21	0.78	43.42	99.96	0.03
VGG19_BN	Blended	51.21	99.33	0.42	50.65	99.23	0.44	50.20	89.75	5.21	42.84	77.91	7.80	49.52	98.93	0.55	47.63	98.61	0.69	42.56	99.34	0.34	N/A	N/A	N/A	N/A	N/A	N/A	31.51	91.38	0.09	N/A	N/A	N/A	0.50	100.00	0.00	30.54	96.71	0.64	50.50	5.15	18.44	45.25	97.62	1.28	50.15	98.18	0.95
VGG19_BN	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
VGG19_BN	LF	48.92	7.73	48.79	50.38	0.04	50.35	50.45	0.02	50.40	36.58	0.18	36.40	46.73	0.04	46.71	50.03	0.02	50.11	39.32	10.20	39.15	N/A	N/A	N/A	35.84	7.28	35.66	24.19	49.81	24.17	49.05	7.64	48.92	48.74	7.63	48.61	18.53	0.00	18.62	48.53	7.20	48.41	42.24	0.29	42.05	48.44	7.96	48.31
VGG19_BN	SSBA	51.39	97.92	1.33	50.53	94.75	3.29	50.18	37.12	23.97	39.96	30.02	23.97	50.05	81.53	10.28	46.57	76.35	10.88	41.83	97.31	1.23	N/A	N/A	N/A	39.67	0.05	35.47	35.65	99.36	0.12	51.49	98.36	1.18	0.50	100.00	0.00	24.52	96.34	0.88	50.96	0.80	34.44	47.02	92.19	4.45	49.64	97.95	1.19
VGG19_BN	WaNet	54.11	99.98	0.01	53.77	0.14	49.34	53.40	26.48	30.34	35.26	1.10	29.04	53.93	0.13	48.90	51.95	0.11	40.46	40.98	96.81	1.60	N/A	N/A	N/A	38.59	0.22	37.70	35.67	99.34	0.48	53.52	99.99	0.00	0.50	100.00	0.00	28.08	73.46	6.83	53.65	0.11	47.90	48.66	88.51	6.24	54.01	99.99	0.01
VGG19_BN	InputAware	53.20	99.84	0.13	53.48	0.10	51.79	53.31	1.98	47.53	36.60	0.46	32.10	53.60	0.10	51.17	53.32	0.00	47.19	41.13	98.52	0.85	N/A	N/A	N/A	41.32	0.79	35.12	34.58	99.10	0.60	53.42	0.34	50.90	0.50	100.00	0.00	18.62	86.78	0.78	53.21	0.08	50.13	47.27	7.70	42.94	53.63	0.07	51.97
VGG19_BN	BPP	55.36	99.96	0.04	55.20	0.05	53.20	54.24	0.17	51.79	36.79	0.21	35.63	53.86	0.02	47.72	55.20	0.00	26.48	43.64	98.32	1.18	N/A	N/A	N/A	42.36	9.63	37.30	37.83	96.93	0.07	55.23	0.17	52.89	0.50	100.00	0.00	21.21	99.28	0.20	54.83	0.05	51.83	49.21	27.19	31.72	55.24	99.96	0.04
VGG19_BN	TrojanNN	52.00	99.97	0.03	50.72	8.61	36.10	51.04	41.65	21.72	40.74	2.76	27.42	49.31	0.04	39.28	48.20	62.37	18.84	43.17	99.92	0.06	N/A	N/A	N/A	35.01	0.00	25.38	36.19	42.65	0.29	51.97	37.24	29.28	0.55	9.55	0.45	20.87	99.95	0.00	50.94	0.22	40.14	45.25	98.91	0.93	52.00	99.97	0.03
ViT_b_16	BadNet	73.96	99.79	0.18	72.22	99.33	0.61	62.88	85.38	7.52	45.31	0.37	44.94	72.10	97.87	1.87	73.95	99.79	0.18	75.51	99.81	0.18	N/A	N/A	N/A	78.14	99.93	0.07	N/A	N/A	N/A	73.95	99.79	0.18	73.35	99.75	0.23	0.50	0.00	0.50	N/A	N/A	N/A	47.57	22.17	39.07	N/A	N/A	N/A
ViT_b_16	Blended	75.28	99.93	0.05	73.45	99.61	0.30	64.38	90.37	2.52	40.32	0.49	24.52	72.95	99.34	0.54	75.26	99.93	0.05	77.47	99.88	0.11	N/A	N/A	N/A	77.88	99.98	0.02	N/A	N/A	N/A	75.26	99.93	0.05	56.17	100.00	0.00	0.50	0.00	0.50	N/A	N/A	N/A	45.12	5.96	20.99	N/A	N/A	N/A
ViT_b_16	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ViT_b_16	LF	59.72	3.82	59.59	59.98	0.14	59.86	54.91	0.29	54.76	42.08	0.19	41.94	59.31	0.09	59.20	54.15	0.50	54.13	67.18	3.59	67.07	N/A	N/A	N/A	2.85	97.57	2.36	27.56	43.88	27.33	59.70	3.82	59.57	59.40	3.73	59.27	0.50	0.00	0.50	59.66	3.78	59.53	55.68	0.28	55.54	59.55	3.56	59.42
ViT_b_16	SSBA	76.37	99.28	0.63	74.68	98.04	1.52	65.82	75.77	10.02	41.30	1.11	31.23	74.19	74.76	17.73	71.87	98.74	0.99	76.85	99.26	0.61	N/A	N/A	N/A	77.57	99.64	0.30	N/A	N/A	N/A	76.37	99.28	0.63	0.61	91.05	0.10	0.50	100.00	0.00	75.92	99.32	0.58	49.01	15.07	35.53	76.14	99.27	0.62
ViT_b_16	WaNet	62.68	99.61	0.30	62.71	94.92	4.05	53.77	62.65	19.81	7.24	2.88	7.06	15.83	0.77	11.89	57.31	90.20	5.85	74.45	98.06	1.65	N/A	N/A	N/A	77.21	98.47	1.36	N/A	N/A	N/A	62.67	99.61	0.30	0.73	95.59	0.29	0.50	100.00	0.00	62.24	99.65	0.29	8.90	1.20	6.60	62.28	99.62	0.26
ViT_b_16	InputAware	63.86	98.82	1.04	63.61	99.91	0.09	54.75	39.07	35.34	8.74	1.26	6.16	63.71	96.94	2.63	64.74	99.91	0.09	76.77	98.83	1.10	N/A	N/A	N/A	77.69	99.35	0.59	N/A	N/A	N/A	64.73	99.91	0.09	0.64	7.79	0.67	N/A	N/A	N/A	64.67	99.91	0.08	11.55	0.48	8.13	64.71	99.91	0.09
ViT_b_16	BPP	61.81	99.82	0.13	63.10	99.37	0.44	8.63	1.09	8.35	5.96	2.76	5.64	62.85	1.66	58.79	61.81	99.82	0.13	77.23	98.75	1.03	N/A	N/A	N/A	77.70	99.05	0.80	N/A	N/A	N/A	61.81	99.82	0.13	1.60	88.58	1.15	N/A	N/A	N/A	N/A	N/A	N/A	8.57	1.21	8.22	N/A	N/A	N/A
ViT_b_16	TrojanNN	75.16	99.86	0.13	74.02	99.63	0.33	64.33	60.91	4.55	42.97	4.47	27.78	73.58	8.01	54.78	75.35	99.86	0.13	77.27	99.92	0.08	N/A	N/A	N/A	78.10	99.97	0.03	N/A	N/A	N/A	75.35	99.86	0.13	73.88	99.96	0.04	0.50	0.00	0.50	74.58	99.82	0.17	51.41	43.28	21.92	75.19	99.85	0.14
ConvNext_tiny	BadNet	66.31	99.99	0.01	59.50	95.85	3.64	55.95	45.55	31.48	52.96	60.04	28.04	44.27	1.07	42.93	60.65	94.98	3.96	72.61	100.00	0.00	N/A	N/A	N/A	42.49	99.97	0.02	35.61	100.00	0.00	N/A	N/A	N/A	41.63	98.99	0.44	9.12	1.03	9.03	65.78	99.99	0.01	63.51	99.93	0.07	65.83	99.99	0.01
ConvNext_tiny	Blended	65.62	99.85	0.12	56.74	97.28	2.02	54.54	95.03	3.32	48.49	82.40	8.26	14.15	0.26	8.98	64.56	99.76	0.20	72.96	99.80	0.17	N/A	N/A	N/A	76.66	99.91	0.08	36.33	100.00	0.00	N/A	N/A	N/A	44.22	99.69	0.24	7.84	95.28	0.50	65.19	99.82	0.15	62.33	99.56	0.31	65.57	99.85	0.12
ConvNext_tiny	LC	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	SIG	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	LF	52.83	6.81	52.69	53.34	0.18	53.22	48.62	0.12	48.46	46.11	0.16	46.00	32.32	0.32	32.16	54.23	0.46	54.25	68.83	4.52	68.70	N/A	N/A	N/A	72.35	4.30	72.23	29.72	40.65	29.61	52.83	6.81	52.69	27.65	28.10	27.39	2.82	8.40	2.82	54.69	0.64	54.64	54.44	0.11	54.33	52.70	6.95	52.56
ConvNext_tiny	SSBA	67.77	98.45	1.35	62.13	83.72	11.67	54.81	51.09	24.74	54.23	70.88	17.96	48.32	0.58	37.71	62.87	67.71	21.45	72.11	98.62	1.14	N/A	N/A	N/A	76.31	98.90	0.97	37.00	99.17	0.44	67.77	98.45	1.35	42.05	98.12	1.20	9.44	89.57	0.98	67.63	97.93	1.73	65.30	95.27	3.51	67.70	98.37	1.39
ConvNext_tiny	WaNet	55.46	99.61	0.31	47.26	6.40	41.76	43.81	4.10	38.98	8.14	0.48	7.96	9.14	0.93	7.87	50.97	79.37	15.88	71.99	95.82	3.67	N/A	N/A	N/A	74.95	97.01	2.63	34.29	93.47	3.56	55.46	99.61	0.31	0.50	100.00	0.00	5.94	5.46	6.70	55.17	99.56	0.37	55.67	89.95	7.12	54.84	99.61	0.31
ConvNext_tiny	InputAware	0.50	100.00	0.00	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	0.50	100.00	0.00	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	76.16	100.00	0.00	30.41	100.00	0.00	N/A	N/A	N/A	0.50	100.00	0.00	0.50	100.00	0.00	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
ConvNext_tiny	BPP	56.59	99.90	0.08	6.47	1.56	6.45	43.19	2.27	38.43	5.96	0.30	5.30	42.48	2.46	38.85	53.39	90.59	8.00	72.84	97.99	1.80	N/A	N/A	N/A	75.90	99.10	0.82	35.83	97.95	0.33	56.59	99.90	0.08	0.50	100.00	0.00	7.65	26.05	6.80	56.11	99.88	0.09	55.36	99.80	0.15	56.38	99.90	0.07
ConvNext_tiny	TrojanNN	66.50	99.97	0.02	62.15	99.57	0.34	53.69	74.23	13.68	54.41	77.53	12.24	45.70	0.14	36.67	60.98	90.30	6.17	72.20	99.96	0.03	N/A	N/A	N/A	76.30	99.99	0.01	38.04	99.98	0.01	66.50	99.97	0.02	43.44	99.99	0.00	6.63	81.84	1.61	65.26	99.96	0.03	63.55	99.94	0.05	66.43	99.97	0.02

Tiny ImageNet Leaderboard