DeepDefense: A Steganalysis-Based Backdoor Detecting and Mitigating Protocol in Deep Neural Networks for AI Security

Table 4

Attack success rate (ASR) and clean accuracy (CA) of various backdoor attacks on classification tasks.

Task	Backdoored model (ASR %/CA %)			Clean model (CA %)
	BadNets	Blend Attack	SSBA
CIFAR10	99.64/93.02	100/93.67	99.91/93.08	92.40
VGGFace2	99.40/87.80	99.98/87.84	99.67/88.59	91.31