| IPC (Ratio) | Test Model | Random | Herding | DiT | DM | IDC-1 | Minimax | D 4 M | D 4 M+EVLF | MGD 3 | MGD 3 +EVLF | Full |
| 10 (0.8%) | ConvNet-6 | 24.3±1.1 | 26.7±0.7 | 34.2±1.1 | 26.9±1.2 | 33.3±1.3 | 33.3±1.7 | 29.4±0.9 | 34.3±2.4 | 33.5±1.9 | 34.9±1.0 | 86.4±0.2 |
| ResNetAP-10 | 29.4±0.8 | 32.0±0.3 | 34.7±0.5 | 30.3±1.2 | 39.1±0.5 | 36.2±3.2 | 33.2±2.1 | 37.3±0.7 | 36.6±0.9 | 39.3±0.3 | 87.5±0.5 |
| ResNet-18 | 27.7±0.9 | 30.2±1.2 | 34.7±0.4 | 33.4±0.7 | 37.3±0.2 | 35.7±1.6 | 32.3±1.2 | 35.9±2.1 | 35.1±1.8 | 38.5±0.3 | 89.3±1.2 |
| 20 (1.6%) | ConvNet-6 | 29.1±0.7 | 29.5±0.3 | 36.1±0.8 | 29.9±1.0 | 35.5±0.8 | 37.3±0.1 | 34.0±2.3 | 40.1±2.6 | 36.2±1.6 | 40.2±0.5 | 86.4±0.2 |
| ResNetAP-10 | 32.7±0.4 | 34.9±0.1 | 41.1±0.8 | 35.2±0.6 | 43.4±0.3 | 43.3±2.7 | 40.1±1.6 | 42.8±0.2 | 44.5±2.8 | 45.1±0.9 | 87.5±0.5 |
| ResNet-18 | 29.7±0.5 | 32.2±0.6 | 40.5±0.5 | 29.8±1.7 | 38.6±0.2 | 41.8±1.9 | 38.4±1.1 | 40.7±1.3 | 40.3±2.5 | 42.1±0.3 | 89.3±1.2 |