Classification on ImageNet (Clean Accuracy and ASR)
59.9Clean AccuracyCLIP
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadCLIP2024.12 | 59.9 | 95 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Stripes2024.12 | 59.8 | 99.1 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Stripes2024.12 | 59.7 | 99.8 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Rand.2024.12 | 59.6 | 89.9 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Text2024.12 | 59.3 | 99.8 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Triangles2024.12 | 58.9 | 99.7 | |
| CLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Rand.2024.12 | 58.6 | 50.9 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Text2024.12 | 56.1 | 37.3 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Rand.2024.12 | 55.5 | 0.1 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Rand.2024.12 | 55.5 | 0 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadCLIP2024.12 | 55.2 | 19.6 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Rand.2024.12 | 55.1 | 6.4 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Rand.2024.12 | 55 | 0.1 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Stripes2024.12 | 55 | 15.2 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Triangles2024.12 | 54.9 | 15.9 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Stripes2024.12 | 54.7 | 86.8 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Text2024.12 | 54.7 | 62.9 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadCLIP2024.12 | 54.7 | 18.2 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Stripes2024.12 | 54.6 | 0.1 | |
| CleanCLIPBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=Blended, Trigger Pattern=Triangles2024.12 | 54.6 | 91.4 | |
| PARBackbone=ViT-B/32, Evaluation Protocol=Zero-shot, Attack Type=BadNet, Trigger Pattern=Stripes2024.12 | 54.4 | 50.1 |