Classification on FGVCAircraft
54.1Robust AccuracyATAC
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 54.1 | — | — | 19.83 | |
| CSRBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 32.5 | 25.8 | — | — | |
| FAREBackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 22.2 | 21.3 | — | — | |
| R-TPTBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 20.7 | 33.2 | — | — | |
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 19.53 | — | — | 19.83 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 17.52 | — | — | 19.83 | |
| CSRBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 16.7 | 17.2 | — | — | |
| TeCoABackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 15.1 | 10.6 | — | — | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 15.06 | — | — | 19.83 | |
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 13.77 | 18 | 13.77 | — | |
| R-TPTBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 13.6 | 19.7 | — | — | |
| FAREBackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 12.2 | 10.1 | — | — | |
| TTCBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 12.1 | 23.4 | — | — | |
| LPFBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 11.1 | 26.1 | — | — | |
| Anti-AdvBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 10.7 | 26.5 | — | — | |
| TTCBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 9.2 | 11.4 | — | — | |
| TeCoABackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 7.3 | 4.3 | — | — | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 6.23 | 20.19 | — | — | |
| TTEBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 5.3 | 30.2 | — | — | |
| TTEBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 5.1 | 19.8 | — | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 2.49 | 5.31 | — | — | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 2.22 | 5.55 | — | — | |
| LPFBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 2 | 16.7 | — | — | |
| Anti-AdvBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 2 | 14.3 | — | — | |
| HDBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 1.4 | 26.5 | — | — | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 1.35 | 10.86 | — | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 1.27 | 15.88 | — | — | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 1.26 | 16.36 | — | — | |
| HDBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 1.1 | 15.7 | — | — | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 0.09 | — | — | 20.16 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 0.09 | — | — | 20.16 | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 0 | 20.1 | — | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 0 | 14.04 | — | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 0 | 19.25 | — | — | |
| CLIPBackbone=CLIP-B/32, Category=Original2026.01 | 0 | 17.3 | — | — | |
| CLIPBackbone=CLIP-L/14, Method category=Original2026.01 | 0 | 29.4 | — | — | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 0 | — | — | 20.16 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 0 | — | — | 20.16 | |
| AGFTBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Training Strategy=Adversarially fine-tuned2026.03 | — | 16.49 | — | — | |
| BiCLIPShots=16, Base Model=CLIP, Adaptation Method=Bilinear adaptation2026.03 | — | — | 20.61 | 45.21 | |
| BiSigLIPShots=16, Base Model=SigLIP, Adaptation Method=Bilinear adaptation2026.03 | — | — | 3.42 | 49.41 | |
| CLIPShots=0, Base Model=CLIP, Adaptation Method=Zero-Shot2026.03 | — | — | — | 24.6 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot2026.03 | — | 19.25 | — | — | |
| GLADIATORBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Training Strategy=Adversarially fine-tuned2026.03 | — | 15.66 | — | — | |
| PMG-AFTBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Training Strategy=Adversarially fine-tuned2026.03 | — | 13.97 | — | — | |
| SigLIPShots=0, Base Model=SigLIP, Adaptation Method=Zero-Shot2026.03 | — | — | — | 45.99 | |
| TeCoABackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Training Strategy=Adversarially fine-tuned2026.03 | — | 12.62 | — | — | |
| TGA-ZSRBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Training Strategy=Adversarially fine-tuned2026.03 | — | 9.98 | — | — |