Image Classification on ImageNet (Acc, ASR, FR, ACR)
76.19AccuracyBenign
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BenignPurification=Avg.2025.06 | 76.19 | — | — | — | |
| CLIPBackbone=ViT-L/14, Zero-shot=true2025.07 | 75.3 | — | — | — | |
| GAMAPurification=NRP, Victim Model=Inc-V32025.06 | 74.42 | 5.35 | 10.96 | 9.67 | |
| GAMA + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 74.31 | 5.65 | 11.6 | 10.17 | |
| FACLPurification=NRP, Victim Model=Inc-V32025.06 | 74.23 | 5.68 | 11.57 | 9.94 | |
| FACL + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 74.21 | 5.69 | 11.42 | 9.9 | |
| PDCL + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 74.17 | 5.92 | 11.91 | 10.45 | |
| PDCLPurification=NRP, Victim Model=Inc-V32025.06 | 74.04 | 6.16 | 12.26 | 10.66 | |
| BIA + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 73.85 | 6.36 | 12.63 | 10.52 | |
| BIAPurification=NRP, Victim Model=Inc-V32025.06 | 73.84 | 6.37 | 12.46 | 19.51 | |
| GAMAPurification=Avg., Victim Model=Inc-V32025.06 | 73.36 | 6.94 | 13.16 | 10.32 | |
| FACL + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 73.11 | 7.34 | 13.62 | 10.51 | |
| FACLPurification=Avg., Victim Model=Inc-V32025.06 | 73.09 | 7.38 | 13.76 | 10.58 | |
| GAMA + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 73.05 | 7.49 | 13.96 | 10.73 | |
| PDCL + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 72.97 | 7.62 | 14.17 | 10.83 | |
| LongCLIPBackbone=ViT-L/14, Zero-shot=true2025.07 | 72.9 | — | — | — | |
| BIAPurification=Avg., Victim Model=Inc-V32025.06 | 72.89 | 7.79 | 14.41 | 11.02 | |
| PDCLPurification=Avg., Victim Model=Inc-V32025.06 | 72.8 | 7.9 | 14.54 | 11 | |
| BIA + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 72.63 | 8.18 | 14.97 | 11.21 | |
| SmartCLIPBackbone=ViT-L/14, Zero-shot=true2025.07 | 72.5 | — | — | — | |
| GAMAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 72.3 | 8.53 | 15.35 | 10.96 | |
| LTPPurification=NRP, Victim Model=Inc-V32025.06 | 72.19 | 8.82 | 15.59 | 11.42 | |
| FACL + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 72 | 8.98 | 15.81 | 11.11 | |
| FACLPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.95 | 9.07 | 15.94 | 11.22 | |
| BIAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.93 | 9.2 | 16.35 | 11.53 | |
| LTP + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 71.78 | 9.45 | 16.34 | 11.69 | |
| GAMA + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.78 | 9.32 | 16.32 | 11.29 | |
| PDCL + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.76 | 9.32 | 16.43 | 11.2 | |
| PDCLPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.55 | 9.63 | 16.82 | 11.34 | |
| BIA + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 71.4 | 10 | 17.31 | 11.89 | |
| CDAPurification=NRP, Victim Model=Inc-V32025.06 | 71.14 | 10.29 | 17.45 | 11.73 | |
| CDA + SCGAPurification=NRP, Victim Model=Inc-V32025.06 | 70.9 | 10.73 | 18.15 | 12.11 | |
| LTPPurification=Avg., Victim Model=Inc-V32025.06 | 69.92 | 12.02 | 19.37 | 12.13 | |
| CDAPurification=Avg., Victim Model=Inc-V32025.06 | 69.09 | 13.11 | 20.73 | 12.13 | |
| LTP + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 68.65 | 13.71 | 21.16 | 12.16 | |
| CDA + SCGAPurification=Avg., Victim Model=Inc-V32025.06 | 68.53 | 13.9 | 21.7 | 12.31 | |
| LTPPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 67.65 | 15.22 | 23.15 | 12.83 | |
| CDAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 67.04 | 15.94 | 24 | 12.53 | |
| CDA + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 66.16 | 17.07 | 25.25 | 12.51 | |
| LTP + SCGAPurification=NRP-ResNet, Victim Model=Inc-V32025.06 | 65.51 | 17.97 | 25.98 | 12.63 |