From: Secure machine learning against adversarial samples at test time
 | Average | Standard deviation | ||
---|---|---|---|---|
Node | BIM | C&W | BIM | C&W |
CPU | 0.752 | 0.477 | 0.0088 | 0.01485 |
K40c | 1.431 | 0.172 | 0.02139 | 0.01193 |
Titan V | 1.453 | 0.098 | 0.00129 | 0.02398 |
Titan V + K40c (average) | 1.442 | 0.135 | 0.01134 | 0.01795 |
Titan V + K40c (actual) | 1.447 | 0.097 | 0.00151 | 0.01995 |