Adversarial Zero-shot Classification on FGVCAircraft, EuroSAT, DTD, PCAM Suite
39.2Top-1 Accuracy (Clean)CLIP
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| CLIPEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 39.2 | 0 | 0 | |
| CSREvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 39 | 43.2 | 32.6 | |
| R-TPTEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 38.1 | 27.5 | 23.2 | |
| TTEEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 38 | 13.4 | 11.5 | |
| HDEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 37.3 | 0.1 | 0 | |
| LPFEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 37.1 | 18.6 | 16.7 | |
| Anti-AdvEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 37.1 | 9.8 | 1.7 | |
| TTCEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 35.8 | 9.3 | 0.3 | |
| FAREEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 28 | 27.8 | 27.6 | |
| TeCoAEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 25.1 | 25.5 | 25.5 |