Table 4.

Ablation study with different variations of model on IID and Non-IID dataset.

Models	Data distribution	Accuracy
		Vanilla avg.	Weighted avg.
VGG16 (5 blocks)	IID	0.94	0.95
	Non-IID	0.93	0.94
	Poisoned	0.71	0.92
ResNet50	IID	0.91	0.93
	Non-IID	0.89	0.92
	Poisoned	0.68	0.89
Inception V3	IID	0.92	0.93
	Non-IID	0.92	0.93
	Poisoned	0.74	0.90