Image Classification on Caltech101 (Rob. and Acc. Metrics)
94.85AccuracyOurs
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OursTest-time prompt tuning=True2026.04 | 94.85 | — | |
| MTASetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 94.3 | 72.1 | |
| MaPLe + OursTest-time prompt tuning=True2026.04 | 94.16 | — | |
| TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 94.1 | 0 | |
| CLIPSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 94 | 0 | |
| C-TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 93.9 | 0 | |
| R-TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 93.7 | 82 | |
| CLBPSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | 93.5 | 86.1 | |
| R-TPTDefense Category=Test-time Defense2025.11 | 86.62 | 68.11 | |
| R-TPTmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 86.62 | 79.32 | |
| TTCmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 86.53 | 65.78 | |
| TTCDefense Category=Test-time Defense2025.11 | 86.15 | 36.66 | |
| TTEDefense Category=Test-time Defense2025.11 | 85.84 | 30.19 | |
| TTEmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 85.84 | 67.56 | |
| CLIPDefense Category=None2025.11 | 85.66 | 0.59 | |
| CLIPattack=10-step PGD, epsilon=1/2552025.11 | 85.66 | 14.67 | |
| ATACmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 85.14 | 72.41 | |
| CLIP-FTDefense Category=Adversarial Finetuning2025.11 | 83.63 | 4.81 | |
| CLIP-FTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 83.63 | 14.21 | |
| ATACDefense Category=Test-time Defense2025.11 | 82 | 86.76 | |
| FAREmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 80.95 | 50.74 | |
| FAREDefense Category=Adversarial Finetuning2025.11 | 76.58 | 10.13 | |
| PMG-AFTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 75.45 | 61.08 | |
| Ours (T*cn)Backbone=SwinT2025.04 | 74.46 | — | |
| Ours (T*csg)Backbone=SwinT2025.04 | 72.77 | — | |
| TeCoAmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 71.68 | 55.51 | |
| Ours (T*)Backbone=SwinT2025.04 | 70.66 | — | |
| PMG-AFTDefense Category=Adversarial Finetuning2025.11 | 69.06 | 25.03 | |
| Insert LNBackbone=SwinT2025.04 | 68.2 | — | |
| TeCoADefense Category=Adversarial Finetuning2025.11 | 64.41 | 21 | |
| T = √MBackbone=SwinT2025.04 | 61.29 | — | |
| Ours (T*cn)Backbone=ViT B/162025.04 | 55.34 | — | |
| Ours (T*csg)Backbone=ViT B/162025.04 | 54.3 | — | |
| Ours (T*)Backbone=ViT B/162025.04 | 54.15 | — | |
| T = 1Backbone=SwinT2025.04 | 54.07 | — | |
| T = 1Backbone=ViT B/162025.04 | 50.38 | — | |
| Insert LNBackbone=ViT B/162025.04 | 49.92 | — | |
| T = √MBackbone=ViT B/162025.04 | 47.54 | — | |
| Ours (T*csgcn)Backbone=SwinT2025.04 | 40.51 | — | |
| Ours (T*csgcn)Backbone=ViT B/162025.04 | 5.03 | — |