# Image Classification on ImageNet 1K (test) (CA and ASR)

Source: [Image Classification on ImageNet 1K (test) (CA and ASR)](<https://www.sota2.com/research/sota/image-classification-on-imagenet-1k-test-ca-and-asr>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:38:02.961Z

Evaluation of Image Classification performance on the test split of the ImageNet 1k dataset, reporting Correctness/Accuracy (CA) and Accuracy/Success Rate (ASR).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | ImageNet 1K (test) |
| Metric | CA (Accuracy) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 14 of 14 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [CA (Accuracy)](<https://www.sota2.com/research/sota/image-classification-on-imagenet-1k-test-ca-and-asr.md?metric=CA%20(Accuracy)>): Higher is better; unit: PERCENT.

- [ASR (Success Rate)](<https://www.sota2.com/research/sota/image-classification-on-imagenet-1k-test-ca-and-asr.md?metric=ASR%20(Success%20Rate)>): Higher is better; unit: PERCENT.

## Recorded results

| Method | CA (Accuracy) | Result date | Report paper |
| --- | --- | --- | --- |
| Clean | 59.69 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadCLIP++ | 58.92 | Not recorded | 6997ea6e09c33900fcd764e6 |
| MABA | 58.8 | Not recorded | 6997ea6e09c33900fcd764e6 |
| mmPoison | 58.7 | Not recorded | 6997ea6e09c33900fcd764e6 |
| Blended | 58.69 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadNets | 58.67 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadEncoder | 58.63 | Not recorded | 6997ea6e09c33900fcd764e6 |
| INACTIVE | 58.62 | Not recorded | 6997ea6e09c33900fcd764e6 |
| TrojVQA | 58.6 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadCLIP | 58.6 | Not recorded | 6997ea6e09c33900fcd764e6 |
| SSBA | 58.48 | Not recorded | 6997ea6e09c33900fcd764e6 |
| SIG | 58.45 | Not recorded | 6997ea6e09c33900fcd764e6 |
| WaNet | 58.42 | Not recorded | 6997ea6e09c33900fcd764e6 |
| VLTrojan | 54.64 | Not recorded | 6997ea6e09c33900fcd764e6 |

### Clean

CA (Accuracy): 59.69. Result ID: 699b07925698665ec49a0f13.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### BadCLIP++

CA (Accuracy): 58.92. Result ID: 699b07925698665ec49a0f20.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### MABA

CA (Accuracy): 58.8. Result ID: 699b07925698665ec49a0f1a.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa76371e209131cea6be67.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### mmPoison

CA (Accuracy): 58.7. Result ID: 699b07925698665ec49a0f1e.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f921e209131cea46558.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### Blended

CA (Accuracy): 58.69. Result ID: 699b07925698665ec49a0f15.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa63eb1e209131cea01786.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### BadNets

CA (Accuracy): 58.67. Result ID: 699b07925698665ec49a0f14.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### BadEncoder

CA (Accuracy): 58.63. Result ID: 699b07925698665ec49a0f1c.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6a7c1e209131cea288c2.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### INACTIVE

CA (Accuracy): 58.62. Result ID: 699b07925698665ec49a0f1d.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754f1.md>)

[Implementation](<https://github.com/Zhang-Henry/IMPERATIVE>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### TrojVQA

CA (Accuracy): 58.6. Result ID: 699b07925698665ec49a0f19.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6c5e1e209131cea339f9.md>)

[Implementation](<https://github.com/SRI-CSL/TrinityMultimodalTrojAI>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### BadCLIP

CA (Accuracy): 58.6. Result ID: 699b07925698665ec49a0f1f.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72641e209131cea562b2.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### SSBA

CA (Accuracy): 58.48. Result ID: 699b07925698665ec49a0f18.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6a921e209131cea28f6e.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### SIG

CA (Accuracy): 58.45. Result ID: 699b07925698665ec49a0f17.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa656e1e209131cea0a544.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### WaNet

CA (Accuracy): 58.42. Result ID: 699b07925698665ec49a0f16.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa696b1e209131cea21e53.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

### VLTrojan

CA (Accuracy): 54.64. Result ID: 699b07925698665ec49a0f1b.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72491e209131cea55927.md>)

Recorded evaluation configuration: {"Backbone":"CLIP RN50","Evaluation Protocol":"Zero-shot"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
