Image Classification on DTD (Robust Accuracy, Accuracy)
64.73Robust AccuracyATAC
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 64.73 | 39.15 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 40 | 39.15 | |
| ATACAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 39.79 | 39.15 | |
| ATACAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 38.94 | 39.15 | |
| CLBPmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 38.83 | 44.86 | |
| SCCmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 33.35 | 37.34 | |
| TTCmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 27.39 | 36.98 | |
| TeCoAmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 16.28 | 25.16 | |
| FAREmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 14.36 | 32.07 | |
| PMG-AFTmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 13.72 | 21.76 | |
| Anti-advmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 6.06 | 38.92 | |
| CLIPmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 2.87 | 40.64 | |
| CLIP-FTmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.05 | 2.77 | 36.49 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=1/2552025.11 | 2.55 | 40.11 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=1/2552025.11 | 0.16 | 40.11 | |
| No DefenseAttack Type=AutoAttack, Attack Budget (epsilon)=4/2552025.11 | 0.16 | 40.11 | |
| No DefenseAttack Type=Carlini–Wagner, Attack Budget (epsilon)=4/2552025.11 | 0.05 | 40.11 |