List your company
ResearchFormerly WizWand

Image Classification on Food101 (Top-1 Clean and Robust Accuracy)

84.88Top-1 Clean AccuracyCLIP
-2.282420.346342.97565.6037May 25, 2026May 26, 2026May 28, 2026May 30, 2026May 31, 2026Jun 2, 2026Jun 4, 2026
Updated 5mo ago

Evaluation results

MethodLinks
CLIPmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0584.881.09
DBDBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0684.799.5
R-TPTBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0684.349.7
CLIPBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0684.20
TTCmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0582.1854.65
SCCmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0582.1359.73
TTCBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.068121.2
CLBPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.0580.768.94
DBDBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0680.198.4
CLIPBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0678.70
R-TPTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0678.543.5
CLBPmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0577.4665.22
Anti-advmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0575.8115.03
CLIPBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.0675.60
DBDBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.067597.4
TTCBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0674.432.2
R-TPTBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.0673.357.8
AdvMaPLeShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.0565.1325.27
CLIP-FTmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0564.860.55
FAPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.0564.0326.67
FAREmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0555.3112.93
AdvVLPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.0543.316.5
PMG-AFTmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0536.6116.57
APTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Few-shot2026.0633.36.8
TeCoAmode=zero-shot, attack=CW-ℓ∞, epsilon_a=1/2552026.0529.9812.87
TeCoABackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.0629.212.3
TeCoABackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.0622.43
AdvVPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.051.070.8