Image Classification on DTD (Robust Accuracy (%))
76.06Robust AccuracyATAC
Evaluation Results
| Method | Links | |
|---|---|---|
| ATACAttack Strategy=PGD, Epsilon=4/2552025.11 | 76.06 | |
| Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.04 | 26.78 | |
| PMG-AFTFine-tuned on=ImageNet2026.03 | 26.7 | |
| AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 25.86 | |
| OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 25.41 | |
| GLADIATORFine-tuned on=ImageNet2026.03 | 24.75 | |
| AGFTFine-tuned on=ImageNet2026.03 | 24.14 | |
| FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 24.05 | |
| TeCoAFine-tuned on=ImageNet2026.03 | 23.56 | |
| PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 23.14 | |
| TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 22.71 | |
| TGA-ZSRFine-tuned on=ImageNet2026.03 | 22.07 | |
| ATACAttack Strategy=Avoid, Epsilon=4/255, Running time (s)=0.6502025.11 | 15.42 | |
| TTCAttack Strategy=PGD, Epsilon=4/2552025.11 | 11.4 | |
| ATACAttack Strategy=Lure, Epsilon=4/255, Running time (s)=0.6472025.11 | 3.33 | |
| CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 3.03 | |
| CLIPMode=Zero-shot2026.03 | 2.55 | |
| TTCAttack Strategy=Avoid, Epsilon=4/255, Running time (s)=0.1142025.11 | 0.83 | |
| TTCAttack Strategy=Lure, Epsilon=4/255, Running time (s)=0.1362025.11 | 0.42 |