Image Classification on EuroSAT (Adversarial Robustness Metrics)
26.1Robust AccuracyCSR
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| CSRBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 26.1 | 34.2 | — | — | |
| R-TPTBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 21.4 | 27.7 | — | — | |
| Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.04 | 18.89 | — | — | — | |
| OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 17.49 | — | — | — | |
| FAREBackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 17.4 | 17.4 | — | — | |
| AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 17.32 | — | — | — | |
| TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 16.58 | — | — | — | |
| PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 14.94 | — | — | — | |
| TeCoABackbone=CLIP-B/32, Category=Adversarial Fine-tuning2026.01 | 14.4 | 14.4 | — | — | |
| TTCBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 13.9 | 33.6 | — | — | |
| Anti-AdvBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 13.7 | 28.7 | — | — | |
| TTEBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 10.2 | 28.8 | — | — | |
| FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 10.15 | — | — | — | |
| HDBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 2.1 | 35.3 | — | — | |
| LPFBackbone=CLIP-B/32, Category=Test-Time Defense2026.01 | 1.5 | 29.5 | — | — | |
| CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 0.05 | — | — | — | |
| CLIPBackbone=CLIP-B/32, Category=Original2026.01 | 0 | 34.2 | — | — | |
| CLIPTraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | — | 42.66 | 0.04 | 0.17 | |
| FARETraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | — | 24.74 | 14.12 | 12.95 | |
| TeCoATraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | — | 27.57 | 15.18 | 13.26 | |
| UCATTraining Data=ImageNet-1k, Adversarial Training=2-step PGD, Epsilon=1/2552025.12 | — | 23.02 | 12.65 | 10.76 |