Table 4.

DNN AUC and robustness evaluated on training dataset during adaptive training. Average and standard deviations are computed over the 10 models.

	AUC±std	SAN/Ntrain ± std (%)
		10 mAs	50 mAs	100 mAs	200 mAs	500 mAs
w/o adaptive training	0.97±0.004	59.2±6.3	34.7±6.3	23.4±6.6	13.6±6.5	6.6±4.2
1 step adaptive training	0.98±0.003	37.0±6.7	20.3±2.2	15.2±2.5	10.4±2.4	6.4±1.4
2 steps adaptive training	0.99±0.008	33.5±7.6	17.4±2.2	10.8±1.7	7.7±1.8	4.7±1.2