Adversarial Zero-shot Classification on Core Image Datasets (ImageNet, CIFARs, STL10, Caltechs)
80.7Clean Top-1 AccTTE
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| TTEEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 80.7 | 13.4 | 11.5 | |
| CLIPEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 79.4 | 0 | 0 | |
| CSREvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 78.7 | 78 | 66.4 | |
| LPFEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 78.6 | 37.4 | 30.8 | |
| R-TPTEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 78.5 | 36.2 | 28.4 | |
| HDEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 76.9 | 0.5 | 0.1 | |
| Anti-AdvEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 76.2 | 22.6 | 2.7 | |
| TTCEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 73.3 | 14.7 | 0.6 | |
| FAREEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 66.6 | 65.8 | 65.4 | |
| TeCoAEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 66.3 | 65.1 | 65 |