Image Classification on Caltech101 (Adversarial Robustness eps=2/255, eps=4/255)
84.9Clean AccuracyR-TPT
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| R-TPTBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 84.9 | — | — | 29.4 | |
| Anti-AdvBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 83.5 | — | — | 50.1 | |
| TTEBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 83.2 | — | — | 65.7 | |
| TTCBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 82.5 | — | — | 52.1 | |
| CLIPBackbone=CLIP-B/32, Category=Original2026.01 | 82.3 | — | — | 6.3 | |
| HDBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 81.9 | — | — | 29.1 | |
| CSRBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 81.2 | — | — | 59 | |
| LPFBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 81 | — | — | 56.7 | |
| FAREBackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 80.2 | — | — | 78.7 | |
| TeCoABackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 78.2 | — | — | 76.2 | |
| FuseLIPTokenizer=clean, Evaluation Protocol=Zero-shot2026.02 | 74.4 | 0.6 | 0 | — | |
| FuseLIPTokenizer=AT 4/255, Evaluation Protocol=Zero-shot2026.02 | 73 | 48.2 | 20.8 | — | |
| FuseLIPTokenizer=AT 8/255, Evaluation Protocol=Zero-shot2026.02 | 72.4 | 51.6 | 32.8 | — | |
| FuseLIPTokenizer=AT 12/255, Evaluation Protocol=Zero-shot2026.02 | 67.6 | 51.2 | 36.8 | — | |
| FuseLIPTokenizer=AT 16/255, Evaluation Protocol=Zero-shot2026.02 | 61.2 | 47.6 | 37.4 | — |