Adversarial Robustness Classification on Average across datasets
70.2Clean AccuracyTiTok-S128
Evaluation results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TiTok-S128Setup=Clean/Original2026.02 | 70.2 | 4.4 | 0.4 | — | — | — | — | — | — | — | — | |
| CLIPprotocol=zero-shot2026.03 | 69.8 | — | — | — | — | 0.2 | 0 | 27.7 | 27.7 | 26.9 | 17.6 | |
| TiTok-S128Setup=Adversarial Training, Radius=4/2552026.02 | 69.2 | 43.9 | 20.7 | — | — | — | — | — | — | — | — | |
| TiTok-S128Setup=Adversarial Training, Radius=8/2552026.02 | 67.3 | 49.7 | 33.2 | — | — | — | — | — | — | — | — | |
| R-Adapt+protocol=zero-shot2026.03 | 67 | — | — | — | — | 62.9 | 59.2 | 62.4 | 62.4 | 65.1 | 63.3 | |
| TiTok-S128Setup=Adversarial Training, Radius=12/2552026.02 | 65.5 | 49.1 | 36.4 | — | — | — | — | — | — | — | — | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 61.79 | — | — | 33.28 | — | — | — | — | — | — | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 61.61 | — | — | 3.86 | — | — | — | — | — | — | — | |
| TiTok-S128Setup=Adversarial Training, Radius=16/2552026.02 | 61.6 | 47.8 | 36.9 | — | — | — | — | — | — | — | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 61.51 | — | — | 2.7 | — | — | — | — | — | — | — | |
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 59.75 | — | — | 39.17 | 36.47 | — | — | — | — | — | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 57.35 | — | — | 12.01 | — | — | — | — | — | — | — | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 56.62 | — | — | 13.81 | — | — | — | — | — | — | — | |
| FAREprotocol=zero-shot2026.03 | 56.2 | — | — | — | — | 54.6 | 54.2 | 54.8 | 54.8 | 54.7 | 54.5 | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 55.8 | — | — | 2.91 | — | — | — | — | — | — | — | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 51.02 | — | — | 20 | — | — | — | — | — | — | — | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 42.3 | — | — | 28.76 | — | — | — | — | — | — | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 40.25 | — | — | 26.54 | — | — | — | — | — | — | — |