Table 2.

mAP0.5:0.95 on blood cell detection test set: “mAP” denotes the mAP0.5:0.95 on clean testing samples; “PGDϵ” denotes PGD attack with noise level ϵ; “IFGSMϵ” denotes IFGSM attack with noise level ϵ; “Avg.” denotes average performance on adversarial testing samples. mAP is the higher the better.

Methods	mAP	PGD5	PGD10	PGD15	Avg.	IFGSM5	IFGSM10	IFGSM15	Avg.
TE10	0.4859	0.3117	0.1536	0.0626	0.1760	0.3109	0.1499	0.0709	0.1772
TE15	0.2026	0.1595	0.1135	0.0664	0.1131	0.1588	0.1135	0.0717	0.1146
VAT10	0.4722	0.2988	0.1869	0.0765	0.1874	0.2988	0.1868	0.0808	0.1888
VAT15	0.2565	0.2013	0.1375	0.0572	0.1320	0.2015	0.1354	0.0603	0.1324
Ours	0.5989	0.3341	0.2017	0.1428	0.2262	0.3350	0.2106	0.1511	0.2322
STD	0.5993	0.0072	0.0007	0.0005	0.0028	0.0456	0.0102	0.0082	0.0213