List your company

Fine-grained classification on Aircraft (Acc., Rob.)

32.7AccuracyMTA
-0.3728.21416.825.386Dec 18, 2025Jan 15, 2026Feb 12, 2026Mar 12, 2026Apr 9, 2026May 7, 2026Jun 5, 2026

Evaluation results

MethodLinks
MTABackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.1232.78
MTACategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.0632.78
TTCBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.1231.70.5
EnsembleBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.1231.712.7
R-TPTBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.1231.717.2
R-TPTCategory=Tuning-based, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.0631.717.2
CLIPBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12300
CLIPCategory=Baseline, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06300
TTPBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.1229.217.7
MACCategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.062831.3
TTCCategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.0627.90.4
MTABackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.05254.3
AGCBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0524.268.6
CLIPBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0523.90
R-TPTBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0523.913.2
TTPBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0523.914.8
EnsembleBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0523.512.7
TTCBackbone=ViT-B/16, Pre-train=CLIP, Epsilon (ϵ)=4/255, Attack Protocol=PGD-1002026.0523.30.5
R-TPTBackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.0517.512.6
AGCBackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.0516.636.3
TTPBackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.0516.111.7
CLIPBackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.0515.70
APT+TeCoABackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.059.99.7
TTCPre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Lightweight Defense, Input Modality=Vision Only2026.036.930.69
TPT*Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations + Prompt Tuning, Input Modality=Vision + Text2026.036.71.7
CLIP (Robust)Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Baseline2026.036.60.45
MTA*Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations, Input Modality=Vision Only2026.036.51.6
C-TPT*Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations + Prompt Tuning, Input Modality=Vision + Text2026.036.40.7
R-TPT + ET3Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations + Prompt Tuning, Input Modality=Vision + Text2026.035.853.51
TeCoABackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.055.85.8
R-TPTPre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations + Prompt Tuning, Input Modality=Vision + Text2026.035.732.46
ET3Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Lightweight Defense, Input Modality=Vision Only2026.035.280.87
EnsemblePre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations, Input Modality=Vision Only2026.034.291.89
Ensemble + ET3Pre-trained Model=TeCoA CLIP-ViT-B/32, Attack Protocol=PGD-100 (ϵ = 4/255), Defense Category=Multiple Augmentations, Input Modality=Vision Only2026.033.932.22
APTBackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.050.90.9