| є | 0.01 | 0.05 | 0.1 | 0.25 | 0.5 | 1 | 10 | 100 | w/o Defense |
| Location | 43.00% | 44.00% | 47.00% | 49.00% | 49.00% | 44.00% | 50.00% | 48.00% | 59.20% |
| Purchase | 10.00% | 33.00% | 35.00% | 41.00% | 44.00% | 42.00% | 45.00% | 47.00% | 57.76% |
| Texas | 5.00% | 24.00% | 43.00% | 44.00% | 44.00% | 44.00% | 43.00% | 43.00% | 44.10% |
| CIFAR-100 | 1.00% | 1.00% | 1.00% | 1.00% | 1.00% | 0.00% | 9.00% | 23.00% | 27.50% |