Feature-space adversarial robustness certification on ImageNet (500 random samples)
0.924Avg FCSB (eps=0.125)CLIP-L14+GSB
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| CLIP-L14+GSBEncoder=CLIP-L14+GSB, sigma=0.502026.01 | 0.924 | 0.873 | 0.799 | 0.698 | 0.409 | 0.69 | |
| CLIP-L14+GSBEncoder=CLIP-L14+GSB, sigma=0.252026.01 | 0.907 | 0.763 | 0.508 | 0.152 | — | 0.38 | |
| CLIP-L14Encoder=CLIP-L14, sigma=0.252026.01 | 0.828 | 0.623 | 0.313 | -0.06 | — | 0.31 | |
| CLIP-L14Encoder=CLIP-L14, sigma=0.502026.01 | 0.717 | 0.586 | 0.439 | 0.253 | -0.132 | 0.33 |