Skip to main content
. 2022 Jan 13;22(1):8. doi: 10.1167/jov.22.1.8

Table 2.

Robust error values, in percentages, when using FGSM perturbations for all Cifar-10 models and different ε values. We report the mean values averaged over five different training runs.

Model; ε= 1/255 2/255 4/255 8/255 16/255
FP-net (N=3) 58.460 72.766 82.036 86.180 86.444
FP-net (basic) (N=3) 56.662 73.634 82.296 86.406 89.108
PyrBlockNet (N=3) 60.458 75.566 83.992 88.150 89.762
ResNet (N=3) 57.284 71.912 80.378 84.338 88.016
FP-net (N=5) 53.634 70.694 81.088 85.020 88.152
FP-net (basic) (N=5) 51.112 68.510 79.036 84.034 86.830
PyrBlockNet (N=5) 54.620 70.018 79.748 84.392 87.666
ResNet (N=5) 52.434 69.652 79.678 84.166 86.956
FP-net (N=7) 51.082 67.468 78.728 83.510 86.814
FP-net (basic) (N=7) 48.360 66.104 77.236 82.486 86.256
PyrBlockNet (N=7) 53.244 69.966 80.764 85.880 88.662
ResNet (N=7) 49.788 67.852 78.590 83.290 86.544
FP-net (N=9) 49.226 66.902 78.634 83.524 87.216
FP-net (basic) (N=9) 45.896 64.284 76.076 81.652 85.484
PyrBlockNet (N=9) 52.048 68.442 78.932 84.590 87.620
ResNet (N=9) 47.888 66.056 77.066 81.992 86.410