Image Classification on 15 datasets Average (test)
45.39Average Robust AccuracyOurs (5 trees)
Evaluation Results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.04 | 45.39 | — | — | — | — | — | — | — | — | |
| OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 44.34 | — | — | — | — | — | — | — | — | |
| AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 43.88 | — | — | — | — | — | — | — | — | |
| PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 39.72 | — | — | — | — | — | — | — | — | |
| TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 38.91 | — | — | — | — | — | — | — | — | |
| FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 37.93 | — | — | — | — | — | — | — | — | |
| AGFTMode=Zero-shot, Attack=PGD-202026.03 | 25.46 | 46.57 | 29.8 | 16.61 | 8.88 | — | — | — | — | |
| TGA-ZSRMode=Zero-shot, Attack=PGD-202026.03 | 23.47 | 40.84 | 26.61 | 16.15 | 10.3 | — | — | — | — | |
| GLADIATORMode=Zero-shot, Attack=PGD-202026.03 | 23.43 | 43.46 | 26.41 | 15.29 | 8.59 | — | — | — | — | |
| PMG-AFTMode=Zero-shot, Attack=PGD-202026.03 | 21.9 | 41.66 | 25.15 | 13.63 | 7.19 | — | — | — | — | |
| TeCoAMode=Zero-shot, Attack=PGD-202026.03 | 19.86 | 38.51 | 22.3 | 11.89 | 6.75 | — | — | — | — | |
| CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 7.21 | — | — | — | — | — | — | — | — | |
| AoSTraining Mode=Adversarial Fine-tuning2026.04 | — | — | — | — | — | 40.83 | 40.37 | 30.24 | 29.51 | |
| FARETraining Mode=Adversarial Fine-tuning2026.04 | — | — | — | — | — | 35.76 | 35.08 | 25.1 | 24.87 | |
| HITATraining Mode=Adversarial Fine-tuning2026.04 | — | — | — | — | — | 41.78 | 41.55 | 31.76 | 31.13 | |
| PMG-FTTraining Mode=Adversarial Fine-tuning2026.04 | — | — | — | — | — | 37.25 | 36.73 | 26.95 | 26.76 | |
| TeCoATraining Mode=Adversarial Fine-tuning2026.04 | — | — | — | — | — | 36.22 | 34.97 | 25.87 | 25.14 |