Image Classification on ImageNet A-Plus
54.85Top-1 AccuracyCLIP
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| CLIPBackbone=ViT-B/16, Perturbation=Clean2026.03 | 54.85 | — | — | |
| FLYPBackbone=ViT-B/16, Perturbation=Clean2026.03 | 53.6 | — | — | |
| TPGMBackbone=ViT-B/16, Perturbation=Clean2026.03 | 53.2 | — | — | |
| SPDBackbone=ViT-B/16, Perturbation=Clean2026.03 | 52.8 | — | — | |
| WISE-FTBackbone=ViT-B/16, Perturbation=Clean2026.03 | 52.3 | — | — | |
| Vanilla FTBackbone=ViT-B/16, Perturbation=Clean2026.03 | 42.1 | — | — | |
| GRACEBackbone=ViT-B/16, Perturbation=Clean2026.03 | 36.8 | — | — | |
| LAATBackbone=ViT-B/16, Perturbation=Clean2026.03 | 22.4 | — | — | |
| PMG-AFTBackbone=ViT-B/16, Perturbation=Clean2026.03 | 18.5 | — | — | |
| FAREBackbone=ViT-B/16, Perturbation=Clean2026.03 | 15.6 | — | — | |
| TeCoABackbone=ViT-B/16, Perturbation=Clean2026.03 | 14.8 | — | — | |
| GRACEBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 7.3 | — | — | |
| LAATBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 4.8 | — | — | |
| PMG-AFTBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 3.2 | — | — | |
| TeCoABackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 2.1 | — | — | |
| FAREBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 1.4 | — | — | |
| CLIPBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| Vanilla FTBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| WISE-FTBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| FLYPBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| TPGMBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| SPDBackbone=ViT-B/16, Perturbation=Adversarial, Adversarial Attack Parameters=AutoAttack APGD-CE, ϵ=4/2552026.03 | 0 | — | — | |
| CLIPBackbone=ViT-B/322026.03 | — | 37.92 | 0 | |
| FAREBackbone=ViT-B/322026.03 | — | 10.38 | 0.68 | |
| FLYPBackbone=ViT-B/322026.03 | — | 37.89 | 0 | |
| GRACEBackbone=ViT-B/322026.03 | — | 25.33 | 4.86 | |
| LAATBackbone=ViT-B/322026.03 | — | 16.48 | 3.48 | |
| PMG-AFTBackbone=ViT-B/322026.03 | — | 13.07 | 1.94 | |
| SPDBackbone=ViT-B/322026.03 | — | 37.46 | 0 | |
| TeCoABackbone=ViT-B/322026.03 | — | 9.86 | 1.07 | |
| TPGMBackbone=ViT-B/322026.03 | — | 38.73 | 0 | |
| Vanilla FTBackbone=ViT-B/322026.03 | — | 29.12 | 0 | |
| WiSE-FTBackbone=ViT-B/322026.03 | — | 39.74 | 0 |