Classification on DTD (Robustness Evaluation)
27.32Robust AccuracyTTC
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 27.32 | 36.98 | 24.34 | — | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 23.9 | 41.33 | — | — | |
| SAFT-LAttack Protocol=C&W (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 20.96 | — | — | 37.45 | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 17.61 | 25.16 | — | — | |
| SAFT-LAttack Protocol=AutoAttack (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 17.55 | — | — | 30.06 | |
| TGA-ZSRAttack Protocol=C&W (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 16.49 | — | — | 29.94 | |
| TGA-ZSRAttack Protocol=AutoAttack (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 16.38 | — | — | 28.89 | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 15.64 | 32.07 | — | — | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 14.95 | 21.76 | — | — | |
| TeCoAAttack Protocol=AutoAttack (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 13.09 | — | — | 23.64 | |
| TeCoAAttack Protocol=C&W (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 13.09 | — | — | 23.93 | |
| PMG-AFTAttack Protocol=AutoAttack (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 11.65 | — | — | 26.69 | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 11.63 | 34.89 | — | — | |
| PMG-AFTAttack Protocol=C&W (ϵ = 1/255), Evaluation Setting=zero-shot2026.02 | 11.44 | — | — | 25.83 | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 5.62 | 38.92 | — | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 3.71 | 37.96 | — | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 2.98 | 40.64 | — | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 2.39 | 36.49 | — | — |