Image Classification on General-ImageNet
86.1Clean AccuracyTTE
Evaluation results
| Method | Links | ||
|---|---|---|---|
| TTEBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 86.1 | 58.5 | |
| R-TPTBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 84.2 | 76.8 | |
| LPFBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 84 | 66.9 | |
| CLIPBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 83.7 | 4 | |
| HDBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 82.7 | 38.3 | |
| Anti-AdvBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 82.5 | 67.9 | |
| CSRBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 82.2 | 77.5 | |
| TTCBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 80.5 | 33.3 | |
| TTEBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 77.5 | 47.3 | |
| CLIPBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 76.7 | 4 | |
| CSRBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 76.1 | 50.9 | |
| HDBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 76 | 15.9 | |
| Anti-AdvBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 75.3 | 39.1 | |
| FAREBackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 75.3 | 74.6 | |
| LPFBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 74.8 | 38 | |
| TTCBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 74.5 | 43.5 | |
| TeCoABackbone=CLIP-L/14, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 73.3 | 72.9 | |
| R-TPTBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 72.9 | 41.9 | |
| TeCoABackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 60.3 | 58.9 | |
| FAREBackbone=CLIP-B/32, Evaluation Protocol=Zero-shot, Attack Protocol=10-step PGD (l_inf = 1/255)2026.01 | 59.6 | 58.4 |