| є | 0.01 | 0.05 | 0.1 | 0.25 | 0.5 | 1 | 10 | 100 | w/o Defense |
| Location | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 50.00% | 87.80% |
| Purchase | 50.12% | 52.20% | 53.60% | 56.48% | 58.12% | 58.62% | 61.97% | 61.27% | 62.95% |
| Texas | 50.57% | 55.84% | 64.25% | 69.85% | 70.67% | 72.00% | 73.58% | 72.58% | 75.44% |
| CIFAR-100 | 58.98% | 59.32% | 58.99% | 59.68% | 59.35% | 59.36% | 59.26% | 59.38% | 72.39% |