Classification on Country211
42.9AccuracyCLIP
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| CLIPWay=5, Shot=52026.03 | 42.9 | — | — | — | — | |
| DREAMWay=5, Shot=52026.03 | 42.9 | — | — | — | — | |
| REPAWay=5, Shot=52026.03 | 33.8 | — | — | — | — | |
| FLUIDWay=5, Shot=52026.03 | 29.4 | — | — | — | — | |
| MARWay=5, Shot=52026.03 | 28.9 | — | — | — | — | |
| E-CLIPImage Encoder=ViT-B/16, Protocol=Zero-shot2025.03 | 4.7 | — | — | — | — | |
| CLIP-PGSImage Encoder=ViT-B/16, p=0.5, Protocol=Zero-shot2025.03 | 4.7 | — | — | — | — | |
| CLIPImage Encoder=ViT-B/16, Protocol=Zero-shot2025.03 | 4.5 | — | — | — | — | |
| CLIP-PGSImage Encoder=ViT-B/16, p=0.3, Protocol=Zero-shot2025.03 | 4.5 | — | — | — | — | |
| CLIP-PGSImage Encoder=ViT-S/16, p=0.3, Protocol=Zero-shot2025.03 | 4.3 | — | — | — | — | |
| A-CLIPImage Encoder=ViT-B/16, Protocol=Zero-shot2025.03 | 4.2 | — | — | — | — | |
| FLIPImage Encoder=ViT-B/16, Protocol=Zero-shot2025.03 | 4 | — | — | — | — | |
| CLIP-PGSImage Encoder=ViT-S/16, p=0.5, Protocol=Zero-shot2025.03 | 3.9 | — | — | — | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | — | 0.67 | 11.58 | — | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | — | 0.04 | 15.25 | — | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | — | 0.03 | 12.07 | — | — | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | — | 0.85 | 9.26 | — | — | |
| FLAIRBackbone=ViT-B/16, Pre-training Dataset=CC3M-recap, Evaluation Protocol=Zero-shot2026.03 | — | — | — | — | 2.6 | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | — | 0.47 | 11.72 | — | — | |
| ITO sub2Backbone=ViT-B/16, Pre-training Dataset=CC3M-recap, Evaluation Protocol=Zero-shot2026.03 | — | — | — | — | 2.6 | |
| ITO sub3Backbone=ViT-B/16, Pre-training Dataset=CC3M-recap, Evaluation Protocol=Zero-shot2026.03 | — | — | — | — | 2.6 | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | — | 2.12 | 4.64 | — | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | — | 0.06 | 14.8 | — | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | — | 1.78 | 4.75 | — | — | |
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | — | 7.09 | 13.08 | 7.05 | — | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | — | 3.05 | 14.66 | — | — |