## 3D Surface Plots: Defense/Attack Budget Impact on Backdoor and Targeted Scenarios
### Overview
The image contains six 3D surface plots visualizing the relationship between defense budget, attack budget, and three metrics: Backdoor-Vulnerability, Backdoor-Diagnosis, Backdoor-Freebase, Targeted-Vulnerability, Targeted-Diagnosis, and Targeted-Freebase. Each plot uses a color gradient (blue to purple) to represent metric values, with numerical annotations at key points.
---
### Components/Axes
**Common Axes Across All Plots:**
- **X-axis**: Defense budget (0–4)
- **Y-axis**: Attack budget (0–4)
- **Z-axis**: Metric values (ranging from 0.00 to 0.90)
- **Color gradient**: Blue (low values) to purple (high values)
**Plot-Specific Labels:**
1. **(a) Backdoor-Vulnerability**: Z-axis values annotated as 0.55, 0.68, 0.80
2. **(b) Backdoor-Diagnosis**: Z-axis values annotated as 0.37, 0.38, 0.67
3. **(c) Backdoor-Freebase**: Z-axis values annotated as 0.51, 0.62, 0.84
4. **(d) Targeted-Vulnerability**: Z-axis values annotated as 0.13, 0.50, 0.70
5. **(e) Targeted-Diagnosis**: Z-axis values annotated as 0.00, 0.05, 0.40
6. **(f) Targeted-Freebase**: Z-axis values annotated as 0.14, 0.22, 0.35
---
### Detailed Analysis
#### (a) Backdoor-Vulnerability
- **Trend**: Values increase with higher defense budgets (0.55 → 0.80) and decrease with higher attack budgets.
- **Key Points**:
- Max vulnerability (0.80) at defense=4, attack=0
- Min vulnerability (0.54) at defense=0, attack=4
#### (b) Backdoor-Diagnosis
- **Trend**: Peaks at defense=4, attack=0 (0.67), then declines sharply with increasing attack budgets.
- **Key Points**:
- Max diagnosis (0.67) at defense=4, attack=0
- Min diagnosis (0.34) at defense=0, attack=4
#### (c) Backdoor-Freebase
- **Trend**: High values (0.84) at defense=4, attack=0; drops to 0.51 at defense=0, attack=4.
- **Key Points**:
- Max freebase (0.84) at defense=4, attack=0
- Min freebase (0.51) at defense=0, attack=4
#### (d) Targeted-Vulnerability
- **Trend**: High values (0.70) at defense=4, attack=0; drops to 0.13 at defense=0, attack=4.
- **Key Points**:
- Max vulnerability (0.70) at defense=4, attack=0
- Min vulnerability (0.13) at defense=0, attack=4
#### (e) Targeted-Diagnosis
- **Trend**: Very low values (0.00–0.40), peaking at defense=4, attack=0 (0.40).
- **Key Points**:
- Max diagnosis (0.40) at defense=4, attack=0
- Min diagnosis (0.00) at defense=0, attack=4
#### (f) Targeted-Freebase
- **Trend**: Moderate values (0.14–0.35), peaking at defense=4, attack=0 (0.35).
- **Key Points**:
- Max freebase (0.35) at defense=4, attack=0
- Min freebase (0.14) at defense=0, attack=4
---
### Key Observations
1. **Defense Budget Impact**: Higher defense budgets consistently correlate with higher metric values across all scenarios.
2. **Attack Budget Impact**: Increased attack budgets reduce metric values, particularly in Backdoor and Targeted scenarios.
3. **Scenario Differences**:
- **Backdoor scenarios** (a–c) show higher values than Targeted scenarios (d–f).
- **Freebase metrics** (c, f) are consistently lower than Backdoor/Targeted metrics.
4. **Anomalies**:
- Targeted-Diagnosis (e) shows near-zero values at defense=0, attack=4, suggesting ineffective diagnosis under high attack pressure.
---
### Interpretation
The data demonstrates that:
- **Defense strategies** significantly mitigate Backdoor and Targeted vulnerabilities/diagnosis, with the strongest effect at maximum defense budgets (4).
- **Attack budgets** inversely correlate with metric values, indicating that higher attack resources degrade system resilience.
- **Freebase metrics** (c, f) represent baseline performance, showing lower sensitivity to budget changes compared to Backdoor/Targeted scenarios.
- **Targeted scenarios** (d–f) exhibit the most dramatic drops under high attack budgets, suggesting they are more vulnerable to resource-intensive attacks.
This analysis implies that prioritizing defense budgets improves system robustness, particularly against Backdoor threats, while attack budgets pose a proportional risk. The Freebase metrics may reflect general system health, less influenced by specific attack/defense dynamics.
