Image Classification on DTD (Top-1 Clean and Robust Accuracy)
62.88Top-1 Clean AccuracyCLBP
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| CLBPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 62.88 | 57.57 | — | |
| AdvMaPLeShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 57.93 | 32.17 | — | |
| AdvVLPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 57.53 | 32.72 | — | |
| FAPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 55.17 | 31.33 | — | |
| R-TPTBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 54 | — | 38 | |
| MTABackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 53.4 | — | 27.2 | |
| T-VSSBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 53.4 | — | 41.7 | |
| CLIPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 52.4 | — | 0 | |
| TTPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 52.3 | — | 41.3 | |
| EnsembleBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 51.3 | — | 31.3 | |
| TTCBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 49.7 | — | 6.2 | |
| MTABackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 46.5 | — | 16.2 | |
| R-TPTBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 46.4 | — | 32.8 | |
| T-VSSBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 45.9 | — | 37.4 | |
| CLIPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 44.4 | — | 0 | |
| TTPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 44.1 | — | 36 | |
| EnsembleBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 43.2 | — | 25.1 | |
| TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 42.4 | — | 4.3 | |
| C-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 41.5 | — | 1.3 | |
| R-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 41.3 | — | 33.5 | |
| TTCBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 41 | — | 4.5 | |
| CLIPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 40.4 | — | 0.8 | |
| MTABackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 40.3 | — | 18.8 | |
| TTPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 40.1 | — | 25.9 | |
| T-VSSBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 38.9 | — | 35.5 | |
| EnsembleBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 37.1 | — | 29.5 | |
| AdvVPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 29.2 | 13.87 | — |