Image Classification on ImageNet-100 (l1/linf/Nat Metrics)
85.2Accuracy (Nat)RoME+RANDOM
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| RoME+RANDOMEvaluation Attack=PGD2026.07 | 85.2 | 46.9 | 68.3 | 47.8 | 54.3 | 42.9 | |
| RANDOMEvaluation Attack=PGD2026.07 | 84.4 | 43.8 | 67.6 | 45.2 | 52.2 | 39.4 | |
| AVGEvaluation Attack=PGD2026.07 | 83.6 | 44.3 | 66.4 | 44.8 | 51.8 | 39.3 | |
| E-ATEvaluation Attack=APGD2026.07 | 83.4 | 40.6 | 64.2 | 45.4 | 50.1 | 39.2 | |
| RoME+RANDOMEvaluation Attack=APGD2026.07 | 83.4 | 42.1 | 67.8 | 48.6 | 52.8 | 40.5 | |
| RAMPEvaluation Attack=APGD2026.07 | 82.2 | 42.6 | 63.4 | 45.1 | 50.4 | 41.8 | |
| RANDOMEvaluation Attack=APGD2026.07 | 82 | 38.4 | 66 | 46.2 | 50.2 | 37.1 | |
| RoME+MAXEvaluation Attack=PGD2026.07 | 80.6 | 45.6 | 66 | 50.9 | 54.2 | 43.7 | |
| MSDEvaluation Attack=PGD2026.07 | 80.2 | 42.6 | 64.3 | 45.8 | 50.9 | 40.2 | |
| RoME+MAXEvaluation Attack=APGD2026.07 | 80.2 | 44.2 | 64.3 | 47.9 | 52.1 | 42.8 | |
| MAXEvaluation Attack=PGD2026.07 | 79.9 | 42.2 | 63.2 | 47.5 | 51 | 40.5 | |
| MAXEvaluation Attack=APGD2026.07 | 79.5 | 41.2 | 63.6 | 44.8 | 49.9 | 39.8 | |
| MOREEvaluation Attack=PGD2026.07 | 75.6 | 34.5 | 41.2 | 42 | 39.2 | 32.8 |