Classification on PCAM (Robustness Evaluation)
59.7Clean AccuracyFARE
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| FAREBackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 59.7 | 59.4 | — | — | — | — | — | |
| TeCoABackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 59.1 | 58.7 | — | — | — | — | — | |
| PMG-AFTFine-tuning dataset=TinyImageNet, Adversarial training=2-step PGD, Epsilon=1/2552025.12 | 56.13 | — | — | 7.41 | 14.26 | 55.52 | — | |
| TeCoABackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 55.7 | 55.6 | — | — | — | — | — | |
| R-TPTBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 55.4 | 41.2 | — | — | — | — | — | |
| TTEBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 54.5 | 38.7 | — | — | — | — | — | |
| TTCtype=Test-time Defence2025.03 | 52.73 | 52.86 | 52.76 | — | — | — | — | |
| TeCoAZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 52.32 | 45.57 | — | — | — | — | — | |
| CLIPTraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | 52.08 | — | — | 0.1 | — | 0.12 | — | |
| CLIP2025.12 | 52.08 | — | — | 0.12 | 0.04 | 0.06 | — | |
| CLIP2025.03 | 52.02 | 0.1 | — | — | — | — | — | |
| UCATFine-tuning dataset=TinyImageNet, Adversarial training=2-step PGD, Epsilon=1/2552025.12 | 51.2 | — | — | 29.51 | 29.89 | 30.37 | — | |
| FAREBackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 51 | 50.8 | — | — | — | — | — | |
| CSRBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 51 | 59.2 | — | — | — | — | — | |
| TTEBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 50.8 | 50.6 | — | — | — | — | — | |
| HDBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 50.4 | 35.4 | — | — | — | — | — | |
| Anti-AdvBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 50.2 | 49.1 | — | — | — | — | — | |
| TeCoAFine-tuning dataset=TinyImageNet, Adversarial training=2-step PGD, Epsilon=1/2552025.12 | 50.11 | — | — | 46.79 | 46.88 | 46.92 | — | |
| TTCBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 50.1 | 16.6 | — | — | — | — | — | |
| FAREFine-tuning dataset=TinyImageNet, Adversarial training=2-step PGD, Epsilon=1/2552025.12 | 50.02 | — | — | 5.15 | 48.86 | 48.97 | — | |
| SAFT-MZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 49.99 | 46.8 | — | — | — | — | — | |
| PMG-AFTZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 49.93 | 48.92 | — | — | — | — | — | |
| TGA-ZSRFine-tuning dataset=TinyImageNet, Adversarial training=2-step PGD, Epsilon=1/2552025.12 | 49.92 | — | — | 48 | 48.03 | 48.05 | — | |
| TGA-ZSRZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 49.91 | 42.1 | — | — | — | — | — | |
| LPFBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 49.9 | 48.8 | — | — | — | — | — | |
| SAFT-LZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 49.86 | 47.09 | — | — | — | — | — | |
| CLIPBackbone=CLIP-L/14, Method category=Original2026.01 | 49.6 | 0.2 | — | — | — | — | — | |
| CSRBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 49.1 | 50.3 | — | — | — | — | — | |
| TeCoATraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | 49.01 | — | — | 23.87 | — | 24.09 | — | |
| HDBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 49 | 39.8 | — | — | — | — | — | |
| CLIPBackbone=CLIP-B/32, Category=Original2026.01 | 48.9 | 24.8 | — | — | — | — | — | |
| Anti-AdvBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 48.8 | 48.3 | — | — | — | — | — | |
| TTCBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 48.8 | 44.2 | — | — | — | — | — | |
| LPFBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 48.7 | 48.2 | — | — | — | — | — | |
| CLIPZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 47.89 | 1.32 | — | — | — | — | — | |
| UCATTraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | 46.56 | — | — | 25.84 | — | 25.37 | — | |
| FAREZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.02 | 46.07 | 10.17 | — | — | — | — | — | |
| FARETraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | 45.06 | — | — | 25.74 | — | 25.56 | — | |
| R-TPTBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 43.6 | 50.4 | — | — | — | — | — | |
| CLIPEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.01 | — | 16 | — | — | — | — | — | |
| HPT-GPDEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.01 | — | 87 | — | — | — | — | — | |
| PMGEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.01 | — | 6 | — | — | — | — | — | |
| PMG-AFTAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.02 | — | 24.33 | — | — | — | — | — | |
| SAFT-LAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.02 | — | 0.01 | — | — | — | — | — | |
| TeCoAAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.02 | — | 2.53 | — | — | — | — | — | |
| TGA-ZSRAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.02 | — | 0.02 | — | — | — | — | — |