List your company
ResearchFormerly WizWand

Image Classification on Food101 (Robust Accuracy)

96.11Robust AccuracyATAC
-3.844422.105348.05574.0047Nov 21, 2025Dec 16, 2025Jan 10, 2026Feb 4, 2026Mar 1, 2026Mar 26, 2026Apr 20, 2026
Updated 6mo ago

Evaluation results

MethodLinks
ATACDefense Category=Test-time Defense2025.1196.1182.87
ATACmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.1176.4783.57
R-TPTmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.1168.0483.41
TTCmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.1157.8482.18
AGFTFine-tuned on=ImageNet2026.0344.76—
TTEmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.1143.9483.96
R-TPTDefense Category=Test-time Defense2025.1139.9783.41
PMG-AFTFine-tuned on=ImageNet2026.0339.37—
Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.0435.89—
GLADIATORFine-tuned on=ImageNet2026.0334.92—
OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0434.85—
AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0434.42—
TGA-ZSRProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0333.97—
Comp-TGAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0333.57—
FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0432.05—
PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0431.1—
Comp-TGAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0330.88—
TGA-ZSRMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0330.73—
TeCoAFine-tuned on=ImageNet2026.0329.01—
TGA-ZSRFine-tuned on=ImageNet2026.0328.81—
TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0427.28—
PMG-AFTProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0319.58—
PMG-AFTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.1118.5736.61
TTCDefense Category=Test-time Defense2025.1117.8980
PMG-AFTMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0317.25—
TeCoAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0314.76—
TeCoAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0314.76—
TeCoAmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.1113.929.98
Comp-TGAZero-shot=true2026.0313.66—
LAATProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0312.64—
TGA-ZSRZero-shot=true2026.0312.57—
FT-Adv.Protocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0312.55—
FAREmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.1111.6555.31
LAATMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0311.38—
FAREProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0310.97—
FAREMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0310.75—
FT-Adv.Mode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.0310.38—
PMG-AFTZero-shot=true2026.039.49—
CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.046.94—
CLIPProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.036.6—
TeCoAZero-shot=true2026.036.53—
LAATZero-shot=true2026.036.03—
CLIPZero-shot=true2026.035.94—
FT-Adv.Zero-shot=true2026.035.65—
TTEDefense Category=Test-time Defense2025.115.3183.96
FAREZero-shot=true2026.034.75—
CLIPMode=Zero-shot2026.034.06—
PMG-AFTDefense Category=Adversarial Finetuning2025.112.1227.97
TeCoADefense Category=Adversarial Finetuning2025.111.3521.9
CLIPattack=10-step PGD, epsilon=1/2552025.110.783.88
FT-CleanProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.030.64—
FT-CleanZero-shot=true2026.030.52—
CLIP-FTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.110.4264.86
FAREDefense Category=Adversarial Finetuning2025.110.2441.98
CLIP-FTDefense Category=Adversarial Finetuning2025.110.0464.86
CLIPDefense Category=None2025.11083.88