Image Classification on EuroSAT (Top-1 Clean Accuracy, Top-1 Robust Accuracy)
88.06Top-1 Clean AccuracyCLBP
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| CLBPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 88.06 | 78.57 | — | |
| FAPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 81.7 | 39.73 | — | |
| APTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Few-shot2026.06 | 67.2 | 23.5 | — | |
| TTCBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 64.1 | — | 0.2 | |
| CLIPBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 55.7 | 0 | — | |
| CLIPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 55.1 | — | 0 | |
| TTPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 55 | — | 21.6 | |
| AdvMaPLeShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 54.97 | 32.97 | — | |
| CLIPBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 50.8 | 0 | — | |
| MTABackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 47.8 | — | 7.5 | |
| TTCBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 47.4 | — | 0.4 | |
| T-VSSBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 45.1 | — | 20.3 | |
| DBDBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 44.9 | 93.3 | — | |
| TTCBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 44.8 | 15.4 | — | |
| TTCBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 44.7 | 0.6 | — | |
| R-TPTBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 44.3 | — | 20.4 | |
| MTABackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 42.5 | — | 1.2 | |
| CLIPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 42.2 | — | 0 | |
| TTPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 42 | — | 14.5 | |
| DBDBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 41.7 | 92.6 | — | |
| EnsembleBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 38.7 | — | 11.1 | |
| CLIPBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 37.5 | 0 | — | |
| T-VSSBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 34.8 | — | 7.5 | |
| R-TPTBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 34.7 | — | 8.5 | |
| R-TPTBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 34.6 | 10.2 | — | |
| APT+TeCoABackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | 32.9 | 32.9 | — | |
| R-TPTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 31.9 | 6.5 | — | |
| DBDBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 29.4 | 81.3 | — | |
| TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 28.4 | — | 0 | |
| EnsembleBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 28.2 | — | 2.2 | |
| C-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 27 | — | 0 | |
| TTPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 24 | — | 23.4 | |
| TeCoABackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 23.8 | 19 | — | |
| CLIPBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | 23.7 | 0 | — | |
| CLIPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 23.7 | — | 0 | |
| SS-TPTBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.0, mode=test-time2026.06 | 22.6 | 19 | — | |
| MTABackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 22.5 | — | 1.6 | |
| R-TPTBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 21.2 | 15.8 | — | |
| R-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 21.2 | — | 15.9 | |
| T-VSSBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 18.5 | — | 17.1 | |
| AdvVPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 18.13 | 15.83 | — | |
| APTBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | 17 | 4 | — | |
| EnsembleBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 16.7 | — | 13.7 | |
| TeCoABackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | 16.5 | 16.6 | — | |
| AdvVLPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 15.5 | 17.3 | — | |
| CLIP-TeCoABackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 14.5 | 10.8 | — | |
| TeCoABackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 13.8 | 11.1 | — | |
| MTABackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 13.3 | 11.2 | — | |
| C-TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 13 | 11.1 | — | |
| EnsembleBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 12.5 | 11 | — | |
| TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 12.2 | 11.2 | — | |
| T-VSSBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 11.8 | 11.4 | — | |
| R-TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 11.5 | 11.3 | — |