Table 5.

DNN AUC and robustness evaluated on testing dataset during adaptive training. Average and standard deviations are computed over the 10 models.

	AUC±std	SAN/Ntrain ± std (%)
		10 mAs	50 mAs	100 mAs	200 mAs	500 mAs
w/o adaptive training	0.91±0.008	61.8±5.5	44.4±6.3	34.3±7.5	25.4±6.4	19.3±5.1
1 step adaptive training	0.90±0.011	39.9± 11.6	29.8±6.3	27.8±7.5	20.7±6.5	16.5±6.7
2 steps adaptive training	0.90±0.013	33.9±8.5	25.6±5.2	21.1±2.6	12.4±5.8	16.1±5.3