VarDefense: Variance-Based Defense against Poison Attack

Table 3

The performance of VarDefense over different .

	MNIST		Fashion-MNIST		CIFAR-10		CIFAR-100
	ACC	ASR	ACC	ASR	ACC	ASR	ACC	ASR
0.0001	95.96	0.22	95.96	0.19	76.47	4.50	45.96	0.50
0.001	96.15	0.28	96.15	0.21	80.25	4.90	46.04	0.94
0.01	97.37	0.28	96.37	0.22	80.27	5.80	46.05	1.01
0.1	97.85	0.39	96.85	0.38	80.29	7.59	46.05	1.19
1	98.30	0.57	97.25	0.58	80.41	8.46	46.23	2.14
10	97.43	0.59	97.47	0.56	80.97	12.50	46.29	3.03
100	97.52	0.63	97.79	0.67	81.03	15.53	46.80	3.73
1000	97.95	0.69	97.88	0.63	81.04	16.85	46.92	5.07
10000	98.06	0.77	98.02	0.83	81.59	17.50	47.97	5.65
100000	98.19	1.92	98.07	1.87	81.72	19.41	48.27	5.84

The numbers in bold mean that this method is the best compared with other methods, under the corresponding experiment settings.