Classification on ImageNet standard (test)
58.6Clean AccuracyCLIP
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CLIPBackbone=RN50, Attack=BadCLIP, Setting=Zero-shot2024.12 | 58.6 | 98.8 | |
| CLIPBackbone=RN50, Attack=Blended, Attack Variant=Rand., Setting=Zero-shot2024.12 | 57.7 | 99.4 | |
| CLIPBackbone=RN50, Attack=WaNet, Setting=Zero-shot2024.12 | 57.7 | 99.2 | |
| CLIPBackbone=RN50, Attack=BadNet, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 57.6 | 99.8 | |
| CLIPBackbone=RN50, Attack=Blended, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 57.6 | 95.6 | |
| CLIPBackbone=RN50, Attack=BadNet, Attack Variant=Rand., Setting=Zero-shot2024.12 | 57.5 | 99.2 | |
| CLIPBackbone=RN50, Attack=Blended, Attack Variant=Triangles, Setting=Zero-shot2024.12 | 57.4 | 85.7 | |
| CLIPBackbone=RN50, Attack=Blended, Attack Variant=Text, Setting=Zero-shot2024.12 | 56.9 | 95.6 | |
| PARBackbone=RN50, Attack=WaNet, Setting=Zero-shot2024.12 | 54.4 | 0 | |
| CleanCLIPBackbone=RN50, Attack=BadCLIP, Setting=Zero-shot2024.12 | 53.8 | 40.1 | |
| PARBackbone=RN50, Attack=Blended, Attack Variant=Rand., Setting=Zero-shot2024.12 | 53.6 | 0 | |
| PARBackbone=RN50, Attack=Blended, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 53.5 | 0.1 | |
| CleanCLIPBackbone=RN50, Attack=Blended, Attack Variant=Rand., Setting=Zero-shot2024.12 | 53.4 | 19.5 | |
| PARBackbone=RN50, Attack=Blended, Attack Variant=Text, Setting=Zero-shot2024.12 | 53.4 | 18.1 | |
| PARBackbone=RN50, Attack=BadCLIP, Setting=Zero-shot2024.12 | 53.4 | 30.4 | |
| CleanCLIPBackbone=RN50, Attack=Blended, Attack Variant=Text, Setting=Zero-shot2024.12 | 53.3 | 42.4 | |
| PARBackbone=RN50, Attack=BadNet, Attack Variant=Rand., Setting=Zero-shot2024.12 | 53.3 | 6.3 | |
| CleanCLIPBackbone=RN50, Attack=Blended, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 53.1 | 61.8 | |
| CleanCLIPBackbone=RN50, Attack=BadNet, Attack Variant=Rand., Setting=Zero-shot2024.12 | 53 | 14.5 | |
| CleanCLIPBackbone=RN50, Attack=BadNet, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 53 | 62.3 | |
| PARBackbone=RN50, Attack=BadNet, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 53 | 42.4 | |
| CleanCLIPBackbone=RN50, Attack=Blended, Attack Variant=Triangles, Setting=Zero-shot2024.12 | 52.9 | 48.7 | |
| CleanCLIPBackbone=RN50, Attack=WaNet, Setting=Zero-shot2024.12 | 52.9 | 0 | |
| PARBackbone=RN50, Attack=Blended, Attack Variant=Triangles, Setting=Zero-shot2024.12 | 52.9 | — | |
| RoCLIPBackbone=RN50, Attack=BadNet, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 48.2 | 82 | |
| RoCLIPBackbone=RN50, Attack=Blended, Attack Variant=Rand., Setting=Zero-shot2024.12 | 47.9 | 1.5 | |
| RoCLIPBackbone=RN50, Attack=Blended, Attack Variant=Stripes, Setting=Zero-shot2024.12 | 47.9 | 7 | |
| RoCLIPBackbone=RN50, Attack=BadNet, Attack Variant=Rand., Setting=Zero-shot2024.12 | 47.4 | 75.1 | |
| RoCLIPBackbone=RN50, Attack=Blended, Attack Variant=Triangles, Setting=Zero-shot2024.12 | 47.2 | 37.1 | |
| RoCLIPBackbone=RN50, Attack=Blended, Attack Variant=Text, Setting=Zero-shot2024.12 | 47.2 | 59.1 | |
| RoCLIPBackbone=RN50, Attack=WaNet, Setting=Zero-shot2024.12 | 47.2 | 2 |