Image Classification on Country211 (Clean & Robust Accuracy)
26.2Clean AccuracyTTE
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| TTEBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 26.2 | 2.3 | |
| R-TPTBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 24.2 | 13.4 | |
| CLIPBackbone=CLIP-L/14, Method category=Original2026.01 | 23.7 | 0 | |
| CSRBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 23 | 26.4 | |
| LPFBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 22.8 | 7.1 | |
| Anti-AdvBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 21.9 | 6 | |
| HDBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 21.1 | 0.8 | |
| ATACmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 16.52 | 30.14 | |
| ATACDefense Category=Test-time Defense2025.11 | 16.45 | 65.55 | |
| TTEBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 16.3 | 1.2 | |
| CLIPBackbone=CLIP-B/32, Category=Original2026.01 | 15.7 | 0 | |
| CSRBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 15.5 | 12.1 | |
| CLIPDefense Category=None2025.11 | 15.25 | 0 | |
| CLIPattack=10-step PGD, epsilon=1/2552025.11 | 15.25 | 0.04 | |
| CLIPBackbone=CLIP-ViT-B/322026.06 | 15.25 | 0 | |
| RNBackbone=CLIP-ViT-B/322026.06 | 14.8 | 0 | |
| TTEDefense Category=Test-time Defense2025.11 | 14.66 | 0.24 | |
| TTEmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 14.66 | 3.05 | |
| TTEBackbone=CLIP-ViT-B/322026.06 | 14.66 | 0.24 | |
| MACBackbone=CLIP-ViT-B/322026.06 | 14.45 | 3.78 | |
| R-TPTBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 14.3 | 5 | |
| TTCBackbone=CLIP-L/14, Method category=Test-Time Defense2026.01 | 13.8 | 6.3 | |
| R-TPTDefense Category=Test-time Defense2025.11 | 13.4 | 0.42 | |
| R-TPTmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 13.4 | 8.8 | |
| LPFBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 13.1 | 1.2 | |
| TTCmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 13.08 | 7.09 | |
| Anti-AdvBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 12.9 | 0.8 | |
| TTCBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 12.6 | 3.7 | |
| HDBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 12.1 | 0 | |
| CLIP-FTDefense Category=Adversarial Finetuning2025.11 | 12.07 | 0 | |
| CLIP-FTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 12.07 | 0.03 | |
| CLIP-FTBackbone=CLIP-ViT-B/322026.06 | 12.07 | 0 | |
| TTCDefense Category=Test-time Defense2025.11 | 11.99 | 2.44 | |
| TTCBackbone=CLIP-ViT-B/322026.06 | 11.99 | 2.44 | |
| HDBackbone=CLIP-ViT-B/322026.06 | 11.72 | 0 | |
| Anti-advBackbone=CLIP-ViT-B/322026.06 | 11.6 | 0 | |
| FAREmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 9.26 | 0.85 | |
| FAREBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 9.26 | 0 | |
| FAREBackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 8.3 | 7.3 | |
| FAREDefense Category=Adversarial Finetuning2025.11 | 6.58 | 0.02 | |
| FAREBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 6.58 | 0.02 | |
| TeCoABackbone=CLIP-L/14, Method category=Adversarial Fine-tuning2026.01 | 5.2 | 4.7 | |
| TeCoAmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 4.75 | 1.78 | |
| TeCoABackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 4.75 | 0.05 | |
| PMG-AFTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 4.64 | 2.12 | |
| PMG-AFTBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 4.64 | 0.12 | |
| FAREBackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 4.1 | 4.4 | |
| TeCoADefense Category=Adversarial Finetuning2025.11 | 3.66 | 0.19 | |
| TeCoABackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 3.66 | 0.19 | |
| PMG-AFTDefense Category=Adversarial Finetuning2025.11 | 3.34 | 0.24 | |
| PMG-AFTBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 3.34 | 0.24 | |
| TeCoABackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 2.2 | 2.7 |