Fine-grained classification on EuroSAT
64.1AccuracyTTC
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| TTCBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 64.1 | 0.2 | — | |
| TTCBackbone=ViT-L/14, Epsilon=4/2552026.05 | 64.1 | 0.2 | — | |
| TransCLIPBackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Transductive2025.08 | 59.6 | — | — | |
| CLIPPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 55.1 | 0 | — | |
| CLIPBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 55.1 | 0 | — | |
| CLIPBackbone=ViT-L/14, Epsilon=4/2552026.05 | 55.1 | 0 | — | |
| CLIPCategory=Baseline, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06 | 55.1 | 0 | — | |
| TTPBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 55 | 21.6 | — | |
| TTPBackbone=ViT-L/14, Epsilon=4/2552026.05 | 55 | 21.6 | — | |
| C-TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 54 | 0 | — | |
| TTCBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 53.4 | — | 0.2 | |
| TTCBackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 53 | — | 3 | |
| TTCBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 53 | 3 | — | |
| TTCBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 53 | 3 | — | |
| AGCBackbone=ViT-L/14, Epsilon=4/2552026.05 | 52 | 89 | — | |
| TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 51.8 | 0 | — | |
| StatABackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Transductive2025.08 | 50.5 | — | — | |
| ADAPTBackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Online2025.08 | 50.47 | — | — | |
| EnsembleBackbone=ViT-L/14, Epsilon=4/2552026.05 | 49.8 | 27.8 | — | |
| DMNBackbone=CLIP-RN50, BP-free=false, Evaluation Protocol=Online2025.08 | 48.72 | — | — | |
| MTAPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 47.8 | 7.5 | — | |
| MTABackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 47.8 | 7.5 | — | |
| MTABackbone=ViT-L/14, Epsilon=4/2552026.05 | 47.8 | 7.5 | — | |
| MTACategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06 | 47.8 | 7.5 | — | |
| MACCategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06 | 47.5 | 25.6 | — | |
| TTCBackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 47.4 | — | 0.4 | |
| TTCBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 47.4 | 0.4 | — | |
| DotaBackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Online2025.08 | 47.15 | — | — | |
| ADAPTBackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Transductive2025.08 | 46.26 | — | — | |
| TTCCategory=Tuning-free, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06 | 45.9 | 0.1 | — | |
| R-TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 44.3 | 20.4 | — | |
| R-TPTBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 44.3 | 20.4 | — | |
| R-TPTBackbone=ViT-L/14, Epsilon=4/2552026.05 | 44.3 | 20.4 | — | |
| R-TPTCategory=Tuning-based, Backbone=CLIP-ViT-L/14, Attack Protocol=PGD-100, eps=4.02026.06 | 44.3 | 20.4 | — | |
| Fair Context Learning (FCL)mode=Test-Time Adaptation2026.02 | 43.69 | — | — | |
| RLCFmode=Test-Time Adaptation2026.02 | 43.47 | — | — | |
| TPTmode=Test-Time Adaptation2026.02 | 43.04 | — | — | |
| TPTBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 42.9 | — | 0 | |
| TAPTBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 42.8 | — | 6.9 | |
| TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 42.6 | — | 0 | |
| TPSmode=Test-Time Adaptation2026.02 | 42.56 | — | — | |
| MTABackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 42.5 | — | 1.2 | |
| MTABackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 42.5 | — | 1.2 | |
| MTABackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 42.5 | 1.2 | — | |
| C-TPTmode=Test-Time Adaptation2026.02 | 42.47 | — | — | |
| MTAmode=Test-Time Adaptation2026.02 | 42.46 | — | — | |
| C-TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 42.3 | — | 0 | |
| CLIPmode=Zero-shot2026.02 | 42.22 | — | — | |
| CLIPBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 42.2 | — | 0 | |
| CLIPBackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 42.2 | — | 0 | |
| CLIPBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 42.2 | 0 | — | |
| CLIPBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 42.2 | — | 0 | |
| BCABackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Online2025.08 | 42.12 | — | — | |
| TDABackbone=CLIP-RN50, BP-free=true, Evaluation Protocol=Online2025.08 | 42.11 | — | — | |
| TTPBackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 42 | — | 14.5 | |
| TTPBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 42 | 14.5 | — | |
| DPEBackbone=CLIP-RN50, BP-free=false, Evaluation Protocol=Online2025.08 | 41.67 | — | — | |
| DiffTPTBackbone=CLIP-RN50, BP-free=false, Evaluation Protocol=Online2025.08 | 41.04 | — | — | |
| DOCBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 39.8 | — | 0 | |
| TTLmode=Test-Time Adaptation2026.02 | 39.02 | — | — | |
| EnsemblePre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 38.7 | 11.1 | — | |
| EnsembleBackbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.12 | 38.7 | 11.1 | — | |
| ZEROmode=Test-Time Adaptation2026.02 | 37.28 | — | — | |
| AGCBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 36 | 97.7 | — | |
| CLIPPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 35.8 | 0 | — | |
| CLIPBackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 35.8 | — | 0 | |
| CLIPBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 35.8 | 0 | — | |
| CLIPBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Baseline2026.06 | 35.8 | 0 | — | |
| TTPBackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 35.6 | — | 14.1 | |
| TTPBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 35.6 | 14.1 | — | |
| TTPBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 35.6 | 14.1 | — | |
| R-TPTmode=Test-Time Adaptation2026.02 | 34.93 | — | — | |
| R-TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 34.7 | — | 8.5 | |
| R-TPTBackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 34.7 | — | 8.5 | |
| R-TPTBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 34.7 | 8.5 | — | |
| MTABackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 34.6 | — | 11.3 | |
| MTABackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 34.6 | 11.3 | — | |
| MTABackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 34.6 | 11.3 | — | |
| R-TPTBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 34.1 | — | 7.3 | |
| SS-TPTBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 34.1 | — | 7.6 | |
| APT+TeCoAPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 32.9 | 32.9 | — | |
| APT+TeCoABackbone=ResNet50, Attack Type=PGD, Epsilon (ε)=1.02026.05 | 32.9 | 32.9 | — | |
| EnsembleBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 32.7 | 14.8 | — | |
| R-TPTPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 32 | 5.1 | — | |
| R-TPTBackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 32 | — | 5.1 | |
| R-TPTBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 32 | 5.1 | — | |
| R-TPTBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 32 | 5.1 | — | |
| EnsembleBackbone=CLIP-ViT-B/32, Perturbation Bound (epsilon)=4.02025.12 | 30.8 | — | 11.9 | |
| EnsembleBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 30.8 | 11.9 | — | |
| AGCBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 30 | 93.4 | — | |
| T-VSSBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 29.8 | 6.6 | — | |
| APT+TeCoAPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 29.3 | 29.2 | — | |
| APT+TeCoABackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Training-time Defense2026.06 | 29.3 | 29.2 | — | |
| EnsembleBackbone=CLIP-ViT-B/16, Augmented views=15, Perturbation (epsilon)=4.02026.06 | 29 | — | 0.3 | |
| TPTBackbone=CLIP-ResNet50, Epsilon=1.02025.04 | 28.4 | — | 0 | |
| TPTBackbone=CLIP-RN50, BP-free=false, Evaluation Protocol=Online2025.08 | 28.33 | — | — | |
| EnsembleBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 28.2 | — | 2.2 | |
| EnsembleBackbone=CLIP-ViT-B/16, Perturbation bound (epsilon)=4.02025.12 | 28.2 | — | 2.2 | |
| C-TPTBackbone=CLIP-RN50, BP-free=false, Evaluation Protocol=Online2025.08 | 27.8 | — | — | |
| C-TPTBackbone=CLIP-ResNet50, Epsilon=1.02025.04 | 27 | — | 0 |