Image Classification on 16 single-label datasets Aggregate
64.45Average ScoreCLIP
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CLIPAttack Scenario=Clean2025.12 | 64.45 | — | |
| UCATAttack Scenario=Clean2025.12 | 54.17 | — | |
| PMG-AFTAttack Scenario=Clean2025.12 | 53.72 | — | |
| FAREAttack Scenario=Clean2025.12 | 53 | — | |
| TGA-ZSRAttack Scenario=Clean2025.12 | 49.91 | — | |
| TeCoAAttack Scenario=Clean2025.12 | 43.83 | — | |
| UCATAttack Scenario=PGD2025.12 | 32.2 | 40.39 | |
| PMG-AFTAttack Scenario=PGD2025.12 | 31.63 | 39.82 | |
| TGA-ZSRAttack Scenario=PGD2025.12 | 31.55 | 38.66 | |
| UCATAttack Scenario=CW2025.12 | 31.41 | 39.76 | |
| TGA-ZSRAttack Scenario=CW2025.12 | 31.28 | 38.46 | |
| UCATAttack Scenario=Auto Attack2025.12 | 30.58 | 39.09 | |
| TGA-ZSRAttack Scenario=Auto Attack2025.12 | 30.52 | 37.88 | |
| TeCoAAttack Scenario=PGD2025.12 | 29.86 | 35.52 | |
| TeCoAAttack Scenario=CW2025.12 | 29.25 | 35.08 | |
| TeCoAAttack Scenario=Auto Attack2025.12 | 28.74 | 34.72 | |
| PMG-AFTAttack Scenario=CW2025.12 | 22.25 | 31.47 | |
| PMG-AFTAttack Scenario=Auto Attack2025.12 | 17.88 | 26.83 | |
| FAREAttack Scenario=PGD2025.12 | 12.81 | 20.63 | |
| FAREAttack Scenario=CW2025.12 | 12.64 | 20.41 | |
| CLIPAttack Scenario=CW2025.12 | 4.06 | 7.64 | |
| CLIPAttack Scenario=PGD2025.12 | 3.46 | 6.56 | |
| FAREAttack Scenario=Auto Attack2025.12 | 2.33 | 4.45 | |
| CLIPAttack Scenario=Auto Attack2025.12 | 0.51 | 1.01 |