Classification on CIFAR100 (Robust Accuracy Metrics)
22.52Robust AccPMG-AFT
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 22.52 | 40.32 | — | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 20.06 | 58.61 | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 18.95 | 35.96 | — | |
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 14.31 | 56.34 | 14.05 | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 11.4 | 46.67 | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 5.73 | 53.95 | — | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 3.86 | 52.86 | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 0.9 | 59.51 | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 0.67 | 56.34 | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 0.26 | 57.14 | — |