# Image Classification on CIFAR100 (Clean and Robust Accuracy) Source: [Image Classification on CIFAR100 (Clean and Robust Accuracy)]() Collection index: [llms.txt]() Data updated: 2026-04-07T09:42:43.628Z Evaluation of Image Classification performance on the CIFAR-100 dataset, reporting both standard Clean Accuracy and Robust Accuracy scores. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Image Classification | | Dataset (including any stated split) | CIFAR100 | | Metric | Robust Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 25 of 25 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Robust Accuracy](): Higher is better; unit: PERCENT. - [Clean Accuracy](): Higher is better; unit: PERCENT. ## Recorded results | Method | Robust Accuracy | Result date | Report paper | | --- | --- | --- | --- | | ATAC | 64.24 | Not recorded | 6923e676d6b0dd334292eee0 | | AGFT | 45.55 | Not recorded | 69cca6c30636e5bf4afcbd96 | | R-TPT | 43.85 | Not recorded | 6923e676d6b0dd334292eee0 | | GLADIATOR | 40.82 | Not recorded | 69cca6c30636e5bf4afcbd96 | | PMG-AFT | 39.41 | Not recorded | 69cca6c30636e5bf4afcbd96 | | TGA-ZSR | 36.79 | Not recorded | 69cca6c30636e5bf4afcbd96 | | TeCoA | 34.9 | Not recorded | 69799806a2b28e761d87cb52 | | TeCoA | 34.47 | Not recorded | 69cca6c30636e5bf4afcbd96 | | CSR | 29.8 | Not recorded | 69799806a2b28e761d87cb52 | | FARE | 28.6 | Not recorded | 69799806a2b28e761d87cb52 | | PMG-AFT | 22.52 | Not recorded | 6923e676d6b0dd334292eee0 | | Anti-Adv | 20.9 | Not recorded | 69799806a2b28e761d87cb52 | | TTE | 20.06 | Not recorded | 6923e676d6b0dd334292eee0 | | TTC | 19.1 | Not recorded | 69799806a2b28e761d87cb52 | | TeCoA | 18.95 | Not recorded | 6923e676d6b0dd334292eee0 | | TTE | 15.5 | Not recorded | 69799806a2b28e761d87cb52 | | R-TPT | 14.7 | Not recorded | 69799806a2b28e761d87cb52 | | TTC | 14.31 | Not recorded | 6923e676d6b0dd334292eee0 | | FARE | 11.4 | Not recorded | 6923e676d6b0dd334292eee0 | | LPF | 10.3 | Not recorded | 69799806a2b28e761d87cb52 | | CLIP | 4.69 | Not recorded | 69cca6c30636e5bf4afcbd96 | | HD | 4.2 | Not recorded | 69799806a2b28e761d87cb52 | | CLIP-FT | 0.9 | Not recorded | 6923e676d6b0dd334292eee0 | | CLIP | 0.3 | Not recorded | 69799806a2b28e761d87cb52 | | CLIP | 0.26 | Not recorded | 6923e676d6b0dd334292eee0 | ### ATAC Robust Accuracy: 64.24. Result ID: 69d4d19047f34ce924bcfd77. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"mode":"Test-time Defense","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### AGFT Robust Accuracy: 45.55. Result ID: 69ccd3dc47f34ce924b669e2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Fine-tuned on":"ImageNet"}. This record does not assert independent reproduction. ### R-TPT Robust Accuracy: 43.85. Result ID: 69d4d19047f34ce924bcfd76. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"mode":"Test-time Defense","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### GLADIATOR Robust Accuracy: 40.82. Result ID: 69ccd3dc47f34ce924b669e1. [Reporting paper]() Recorded evaluation configuration: {"Fine-tuned on":"ImageNet"}. This record does not assert independent reproduction. ### PMG-AFT Robust Accuracy: 39.41. Result ID: 69ccd3dc47f34ce924b669df. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Fine-tuned on":"ImageNet"}. This record does not assert independent reproduction. ### TGA-ZSR Robust Accuracy: 36.79. Result ID: 69ccd3dc47f34ce924b669e0. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Fine-tuned on":"ImageNet"}. This record does not assert independent reproduction. ### TeCoA Robust Accuracy: 34.9. Result ID: 69a17d1735dfcabb00e7612e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Adversarial Fine-tuning"}. This record does not assert independent reproduction. ### TeCoA Robust Accuracy: 34.47. Result ID: 69ccd3dc47f34ce924b669de. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Fine-tuned on":"ImageNet"}. This record does not assert independent reproduction. ### CSR Robust Accuracy: 29.8. Result ID: 69a17d1735dfcabb00e76136. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### FARE Robust Accuracy: 28.6. Result ID: 69a17d1735dfcabb00e7612f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Adversarial Fine-tuning"}. This record does not assert independent reproduction. ### PMG-AFT Robust Accuracy: 22.52. Result ID: 69d4d19047f34ce924bcfd72. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"mode":"Adversarial Finetuning","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### Anti-Adv Robust Accuracy: 20.9. Result ID: 69a17d1735dfcabb00e76133. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### TTE Robust Accuracy: 20.06. Result ID: 69d4d19047f34ce924bcfd74. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"mode":"Test-time Defense","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### TTC Robust Accuracy: 19.1. Result ID: 69a17d1735dfcabb00e76135. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### TeCoA Robust Accuracy: 18.95. Result ID: 69d4d19047f34ce924bcfd71. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"mode":"Adversarial Finetuning","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### TTE Robust Accuracy: 15.5. Result ID: 69a17d1735dfcabb00e76134. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### R-TPT Robust Accuracy: 14.7. Result ID: 69a17d1735dfcabb00e76130. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### TTC Robust Accuracy: 14.31. Result ID: 69d4d19047f34ce924bcfd75. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"mode":"Test-time Defense","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### FARE Robust Accuracy: 11.4. Result ID: 69d4d19047f34ce924bcfd73. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"mode":"Adversarial Finetuning","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### LPF Robust Accuracy: 10.3. Result ID: 69a17d1735dfcabb00e76131. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### CLIP Robust Accuracy: 4.69. Result ID: 69ccd3dc47f34ce924b669dd. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Mode":"Zero-shot"}. This record does not assert independent reproduction. ### HD Robust Accuracy: 4.2. Result ID: 69a17d1735dfcabb00e76132. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Test-Time Defense"}. This record does not assert independent reproduction. ### CLIP-FT Robust Accuracy: 0.9. Result ID: 69d4d19047f34ce924bcfd70. [Reporting paper]() Recorded evaluation configuration: {"mode":"Adversarial Finetuning","attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### CLIP Robust Accuracy: 0.3. Result ID: 69a17d1735dfcabb00e7612d. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"CLIP-B/32","Category":"Original"}. This record does not assert independent reproduction. ### CLIP Robust Accuracy: 0.26. Result ID: 69d4d19047f34ce924bcfd6f. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.