| λ | 0.01 | 0.1 | 0.5 | 1 | 10 | 25 | 50 | 100 | w/o Defense |
| Location | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 87.80% |
| Purchase | 61.98% | 61.44% | 62.74% | 59.62% | 59.06% | 56.68% | 55.83% | 51.75% | 62.95% |
| Texas | 70.91% | 71.86% | 71.52% | 72.03% | 71.77% | 61.46% | 55.74% | 52.99% | 75.44% |
| CIFAR-100 | 59.60% | 58.90% | 58.60% | 58.84% | 59.29% | 59.29% | 59.29% | 59.19% | 72.39% |