| λ | 0.01 | 0.1 | 0.5 | 1 | 10 | 25 | 50 | 100 | w/o Defense |
| Location | 48.00% | 48.00% | 48.00% | 49.00% | 46.00% | 47.00% | 39.00% | 41.00% | 59.20% |
| Purchase | 45.00% | 45.00% | 47.00% | 47.00% | 47.00% | 43.00% | 31.00% | 24.00% | 57.76% |
| Texas | 43.00% | 43.00% | 44.00% | 42.00% | 44.00% | 42.00% | 29.00% | 23.00% | 44.10% |
| CIFAR-100 | 24.00% | 24.00% | 25.00% | 18.00% | 1.00% | 0.00% | 0.00% | 1.00% | 27.50% |