Classification on StanfordCars (Robustness Evaluation)
33.01Robust AccuracyTTC
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 33.01 | 48.16 | 32.99 | |
| TTCtype=Test-time Defence2025.03 | 30.38 | 48.16 | 28 | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 22.36 | 52.73 | — | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 11.65 | 25.44 | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 8.76 | 20.91 | — | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 6.75 | 38.68 | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 4.4 | 36.21 | — | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 2.71 | 44.28 | — | |
| CLIP2025.03 | 2.38 | 52.02 | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 0.16 | 52.14 | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 0.06 | 42.11 | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 0.02 | 52.02 | — |