Image Classification on GTSRB (test)
98.9Accuracy (Clean)Fine-tuned (STL)
Evaluation results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fine-tuned (STL)Backbone=CLIP-ViT-B/32, Evaluation Protocol=Fine-tuned (STL)2026.05 | 98.9 | — | — | — | — | — | — | — | — | — | — | |
| IndividualsBackbone=ViT-B/32, #Params=x8, Merging Strategy=N/A2026.05 | 98.7 | — | — | — | — | — | — | — | — | — | — | |
| TALL-Mask+TIESBackbone=ViT-B/32, #Params=x2.5, Merging Strategy=Dynamic Merging2026.05 | 98.5 | — | — | — | — | — | — | — | — | — | — | |
| TSV-CBackbone=ViT-B/32, #Params=x2.08, Merging Strategy=Dynamic Merging2026.05 | 98.3 | — | — | — | — | — | — | — | — | — | — | |
| WEMoEBackbone=ViT-B/32, #Params=x6.27, Merging Strategy=Dynamic Merging2026.05 | 98.2 | — | — | — | — | — | — | — | — | — | — | |
| FREE-MergingBackbone=ViT-B/32, #Params=x2.16, Merging Strategy=Dynamic Merging2026.05 | 98.2 | — | — | — | — | — | — | — | — | — | — | |
| DiDi-Merging-MBackbone=ViT-B/32, #Params=x1.4, Merging Strategy=Dynamic Merging2026.05 | 98.2 | — | — | — | — | — | — | — | — | — | — | |
| SMILEBackbone=ViT-B/32, #Params=x3.07, Merging Strategy=Dynamic Merging2026.05 | 98.1 | — | — | — | — | — | — | — | — | — | — | |
| DiDi-Merging-SBackbone=ViT-B/32, #Params=x1.24, Merging Strategy=Dynamic Merging2026.05 | 98.1 | — | — | — | — | — | — | — | — | — | — | |
| WUDI-Merging w/ FEATCALBackbone=CLIP-ViT-B/32, Upstream Merger=WUDI-Merging, Refinement=FEATCAL2026.05 | 97.9 | — | — | — | — | — | — | — | — | — | — | |
| CausalDiff2024.10 | 97.85 | 80.86 | 80.86 | 86.13 | 82.62 | — | — | — | — | — | — | |
| Traditional MTLBackbone=CLIP-ViT-B/32, Evaluation Protocol=Traditional MTL2026.05 | 97.7 | — | — | — | — | — | — | — | — | — | — | |
| Twin-MergingBackbone=ViT-B/32, #Params=x2.25, Merging Strategy=Dynamic Merging2026.05 | 97.2 | — | — | — | — | — | — | — | — | — | — | |
| WUDI-Merging w/ ProbSurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=WUDI-Merging, Refinement=ProbSurgery2026.05 | 97.1 | — | — | — | — | — | — | — | — | — | — | |
| EMR-MergingBackbone=ViT-B/32, #Params=x4, Merging Strategy=Dynamic Merging2026.05 | 96.9 | — | — | — | — | — | — | — | — | — | — | |
| AdaMerging w/ FEATCALBackbone=CLIP-ViT-B/32, Upstream Merger=AdaMerging, Refinement=FEATCAL2026.05 | 96.7 | — | — | — | — | — | — | — | — | — | — | |
| WUDI-Merging w/ SurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=WUDI-Merging, Refinement=Surgery2026.05 | 96.7 | — | — | — | — | — | — | — | — | — | — | |
| AdaMerging w/ SurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=AdaMerging, Refinement=Surgery2026.05 | 95.7 | — | — | — | — | — | — | — | — | — | — | |
| AdaMerging w/ ProbSurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=AdaMerging, Refinement=ProbSurgery2026.05 | 95 | — | — | — | — | — | — | — | — | — | — | |
| WUDI-MergingBackbone=CLIP-ViT-B/32, Upstream Merger=WUDI-Merging2026.05 | 95 | — | — | — | — | — | — | — | — | — | — | |
| WUDI-MergingBackbone=ViT-B/32, #Params=x1, Merging Strategy=Static Merging2026.05 | 94.7 | — | — | — | — | — | — | — | — | — | — | |
| GTSRB-CNN2024.10 | 93.95 | 62.3 | 74.8 | 65.43 | 67.51 | — | — | — | — | — | — | |
| MultitaskBackbone=ViT-B/32, #Params=x1, Merging Strategy=N/A2026.05 | 93.9 | — | — | — | — | — | — | — | — | — | — | |
| AdaMergingBackbone=CLIP-ViT-B/32, Upstream Merger=AdaMerging2026.05 | 93.1 | — | — | — | — | — | — | — | — | — | — | |
| Task Arithmetic w/ FEATCALBackbone=CLIP-ViT-B/32, Upstream Merger=Task Arithmetic, Refinement=FEATCAL2026.05 | 93 | — | — | — | — | — | — | — | — | — | — | |
| ATtraining budget=42024.10 | 92.58 | 74.78 | 80.47 | 78.13 | 77.69 | — | — | — | — | — | — | |
| TSV-MergingBackbone=ViT-B/32, #Params=x1, Merging Strategy=Static Merging2026.05 | 91.9 | — | — | — | — | — | — | — | — | — | — | |
| ATtraining budget=82024.10 | 91.21 | 74.02 | 79.1 | 73.44 | 75.52 | — | — | — | — | — | — | |
| MEADAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 89.69 | — | — | — | — | 98.06 | — | — | — | — | — | |
| ATtraining budget=162024.10 | 89.65 | 73.24 | 75.59 | 69.92 | 72.92 | — | — | — | — | — | — | |
| AbstractAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 88.88 | — | — | — | — | 31 | — | — | — | — | — | |
| Simple Averaging w/ FEATCALBackbone=CLIP-ViT-B/32, Upstream Merger=Simple Averaging, Refinement=FEATCAL2026.05 | 87.1 | — | — | — | — | — | — | — | — | — | — | |
| Task Arithmetic w/ ProbSurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=Task Arithmetic, Refinement=ProbSurgery2026.05 | 87.1 | — | — | — | — | — | — | — | — | — | — | |
| Simple Averaging w/ ProbSurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=Simple Averaging, Refinement=ProbSurgery2026.05 | 87 | — | — | — | — | — | — | — | — | — | — | |
| AbstractAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 86.17 | — | — | — | — | 9 | — | — | — | — | — | |
| Task Arithmetic w/ SurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=Task Arithmetic, Refinement=Surgery2026.05 | 84.9 | — | — | — | — | — | — | — | — | — | — | |
| MABAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 84.7 | — | — | — | — | 76.79 | — | — | — | — | — | |
| MABAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 83.55 | — | — | — | — | 68.11 | — | — | — | — | — | |
| ISO-CTSBackbone=ViT-B/32, #Params=x1, Merging Strategy=Static Merging2026.05 | 83.3 | — | — | — | — | — | — | — | — | — | — | |
| MEADAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 83.17 | — | — | — | — | 26.53 | — | — | — | — | — | |
| LoricaBackbone=ViT-L/162025.06 | 83.02 | — | — | — | — | — | — | 75.2 | 75.25 | 76.44 | 76.8 | |
| SylvaBackbone=ViT-L/162025.06 | 82.51 | — | — | — | — | — | — | 74.39 | 74.2 | 75.64 | 75.84 | |
| ContentAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 81.72 | — | — | — | — | 99.99 | — | — | — | — | — | |
| FP-Gen-AFBackbone=ViT-L/162025.06 | 81.14 | — | — | — | — | — | — | 72.81 | 71.83 | 73.95 | 75.07 | |
| DBFATBackbone=ViT-L/162025.06 | 80.96 | — | — | — | — | — | — | 70.77 | 70.88 | 72.47 | 74.3 | |
| Simple Averaging w/ SurgeryBackbone=CLIP-ViT-B/32, Upstream Merger=Simple Averaging, Refinement=Surgery2026.05 | 79.7 | — | — | — | — | — | — | — | — | — | — | |
| AbstractAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 79.45 | — | — | — | — | 100 | — | — | — | — | — | |
| Per-LoRABackbone=ViT-L/162025.06 | 78.83 | — | — | — | — | — | — | 71.52 | 70.25 | 72.36 | 74.01 | |
| MEADAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 78.73 | — | — | — | — | 4.03 | — | — | — | — | — | |
| MABAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 78.59 | — | — | — | — | 82.4 | — | — | — | — | — | |
| CAT-MergingBackbone=ViT-B/32, #Params=x1, Merging Strategy=Static Merging2026.05 | 78.5 | — | — | — | — | — | — | — | — | — | — | |
| FP-TRADESBackbone=ViT-L/162025.06 | 78.04 | — | — | — | — | — | — | 71.58 | 71.62 | 72.65 | 72.76 | |
| FA-Gen-AFBackbone=ViT-L/162025.06 | 77.86 | — | — | — | — | — | — | 70.63 | 69.92 | 74.12 | 73.36 | |
| BlindMarkAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 76.63 | — | — | — | — | 18.4 | — | — | — | — | — | |
| DOA2024.10 | 76.56 | 31.25 | 36.72 | 68.36 | 45.44 | — | — | — | — | — | — | |
| ContentAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 76.43 | — | — | — | — | 99.81 | — | — | — | — | — | |
| FA-TRADESBackbone=ViT-L/162025.06 | 75.24 | — | — | — | — | — | — | 69.58 | 70.4 | 72.34 | 74.15 | |
| AbstractAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 75.01 | — | — | — | — | 6 | — | — | — | — | — | |
| MEADAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 72.75 | — | — | — | — | 3.47 | — | — | — | — | — | |
| BlindMarkAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 72.61 | — | — | — | — | 10.6 | — | — | — | — | — | |
| Task ArithmeticBackbone=CLIP-ViT-B/32, Upstream Merger=Task Arithmetic2026.05 | 68.5 | — | — | — | — | — | — | — | — | — | — | |
| BlindMarkAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 67.62 | — | — | — | — | 6.8 | — | — | — | — | — | |
| AbstractAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 67.56 | — | — | — | — | 88 | — | — | — | — | — | |
| MEADAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 67.43 | — | — | — | — | 85 | — | — | — | — | — | |
| Per-AdvBackbone=ViT-L/162025.06 | 65.52 | — | — | — | — | — | — | 69.29 | 69.37 | 72.55 | 73.18 | |
| AbstractAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 65.5 | — | — | — | — | 28 | — | — | — | — | — | |
| ContentAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 65.44 | — | — | — | — | 88.31 | — | — | — | — | — | |
| MEADAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 64.83 | — | — | — | — | 0.28 | — | — | — | — | — | |
| MABAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 63.99 | — | — | — | — | 64.8 | — | — | — | — | — | |
| FP-PGD-ATBackbone=ViT-L/162025.06 | 63.98 | — | — | — | — | — | — | 71.57 | 70.66 | 73.62 | 72.71 | |
| FA-PGD-ATBackbone=ViT-L/162025.06 | 61.69 | — | — | — | — | — | — | 69.99 | 70.69 | 73.65 | 73.48 | |
| MABAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 60.38 | — | — | — | — | 50.51 | — | — | — | — | — | |
| BlindMarkAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 56.83 | — | — | — | — | 6.4 | — | — | — | — | — | |
| MABAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 55.34 | — | — | — | — | 46.43 | — | — | — | — | — | |
| Simple AveragingBackbone=CLIP-ViT-B/32, Upstream Merger=Simple Averaging2026.05 | 55 | — | — | — | — | — | — | — | — | — | — | |
| BlindMarkAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 53.82 | — | — | — | — | 4.6 | — | — | — | — | — | |
| Weight AveragingBackbone=ViT-B/32, #Params=x1, Merging Strategy=Static Merging2026.05 | 52.8 | — | — | — | — | — | — | — | — | — | — | |
| ContentAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 50.71 | — | — | — | — | 94.8 | — | — | — | — | — | |
| BlindMarkAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 48.89 | — | — | — | — | 9.6 | — | — | — | — | — | |
| ContentAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 47.05 | — | — | — | — | 87.34 | — | — | — | — | — | |
| Pre-trainedBackbone=CLIP-ViT-B/32, Evaluation Protocol=Zero-shot2026.05 | 32.5 | — | — | — | — | — | — | — | — | — | — | |
| ComMarkAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 30.1 | — | — | — | — | 98.54 | — | — | — | — | — | |
| ComMarkAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 28.31 | — | — | — | — | 99.09 | — | — | — | — | — | |
| ComMarkAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 25.33 | — | — | — | — | 98.99 | — | — | — | — | — | |
| ComMarkAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 20.09 | — | — | — | — | 98.73 | — | — | — | — | — | |
| ContentAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 18.15 | — | — | — | — | 99.96 | — | — | — | — | — | |
| ComMarkAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 4.69 | — | — | — | — | 100 | — | — | — | — | — | |
| NoiseAttack Type=Knockoff, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 4.54 | — | — | — | — | 99.94 | — | — | — | — | — | |
| NoiseAttack Type=JBDA, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 4.13 | — | — | — | — | 96.33 | — | — | — | — | — | |
| NoiseAttack Type=Distillation, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 3.75 | — | — | — | — | 93.77 | — | — | — | — | — | |
| NoiseAttack Type=Distillation, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 3.74 | — | — | — | — | 92.32 | — | — | — | — | — | |
| ComMarkAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 3.74 | — | — | — | — | 100 | — | — | — | — | — | |
| NoiseAttack Type=JBDA, Label Setting=Soft Label, Backbone=ResNet-182025.12 | 3.73 | — | — | — | — | 98.71 | — | — | — | — | — | |
| NoiseAttack Type=Knockoff, Label Setting=Hard Label, Backbone=ResNet-182025.12 | 3.56 | — | — | — | — | 100 | — | — | — | — | — | |
| DiffPure2025.10 | — | — | — | — | 30 | — | — | — | — | — | — | |
| LM2025.10 | — | — | — | — | 15.82 | — | — | — | — | — | — | |
| NAPPure2025.10 | — | — | — | — | 37.1 | — | — | — | — | — | — | |
| NAPPure-joint2025.10 | — | — | — | — | 54.49 | — | — | — | — | — | — | |
| None2025.10 | — | — | — | — | 12.7 | — | — | — | — | — | — | |
| SwAV (Baseline)Pre-training Dataset (Dp)=ImageNet, SSL Method=SwAV, Backbone=ResNet-182026.02 | — | — | — | — | — | — | 21.49 | — | — | — | — |