Image Classification on ImageNet-R (Clean and Adversarial Accuracy)
68.6Top-1 AccuracyTent
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| TentBackbone=ViT, Privacy (epsilon)=∞, Clipping=true2026.06 | 68.6 | — | — | |
| DP-EATABackbone=ViT, Privacy (epsilon)=20, delta=1e-62026.06 | 68.1 | — | — | |
| DP-EATABackbone=ViT, Privacy (epsilon)=15, delta=1e-62026.06 | 67.6 | — | — | |
| DeYOBackbone=ViT, Privacy (epsilon)=∞, Clipping=true2026.06 | 67.6 | — | — | |
| EATABackbone=ViT, Privacy (epsilon)=∞, Clipping=true2026.06 | 67.4 | — | — | |
| DeYO-COMEBackbone=ViT, Privacy (epsilon)=∞, Clipping=true2026.06 | 67.3 | — | — | |
| DP-TentBackbone=ViT, Privacy (epsilon)=20, delta=1e-62026.06 | 67 | — | — | |
| DP-TentBackbone=ViT, Privacy (epsilon)=15, delta=1e-62026.06 | 66.8 | — | — | |
| DP-EATABackbone=ViT, Privacy (epsilon)=10, delta=1e-62026.06 | 66.7 | — | — | |
| DP-TentBackbone=ViT, Privacy (epsilon)=10, delta=1e-62026.06 | 66.5 | — | — | |
| DP-DeYOBackbone=ViT, Privacy (epsilon)=20, delta=1e-62026.06 | 66 | — | — | |
| DP-SARBackbone=ViT, Privacy (epsilon)=20, delta=1e-62026.06 | 65.7 | — | — | |
| DP-DeYOBackbone=ViT, Privacy (epsilon)=15, delta=1e-62026.06 | 65.4 | — | — | |
| DP-DeYOBackbone=ViT, Privacy (epsilon)=10, delta=1e-62026.06 | 65.2 | — | — | |
| DP-SARBackbone=ViT, Privacy (epsilon)=15, delta=1e-62026.06 | 65.1 | — | — | |
| DP-DeYOBackbone=ViT, Privacy (epsilon)=5, delta=1e-62026.06 | 64.8 | — | — | |
| DP-TentBackbone=ViT, Privacy (epsilon)=5, delta=1e-62026.06 | 64.4 | — | — | |
| DP-EATABackbone=ViT, Privacy (epsilon)=5, delta=1e-62026.06 | 64.3 | — | — | |
| DP-SARBackbone=ViT, Privacy (epsilon)=10, delta=1e-62026.06 | 64.3 | — | — | |
| DP-SARBackbone=ViT, Privacy (epsilon)=5, delta=1e-62026.06 | 64.1 | — | — | |
| SARBackbone=ViT, Privacy (epsilon)=∞, Clipping=true2026.06 | 64 | — | — | |
| EATABackbone=ViT, Privacy (epsilon)=∞, Clipping=false2026.06 | 63.9 | — | — | |
| DeYOBackbone=ViT, Privacy (epsilon)=∞, Clipping=false2026.06 | 63.7 | — | — | |
| DeYO-COMEBackbone=ViT, Privacy (epsilon)=∞, Clipping=false2026.06 | 63.6 | — | — | |
| SARBackbone=ViT, Privacy (epsilon)=∞, Clipping=false2026.06 | 62.1 | — | — | |
| DP-COMEBackbone=ViT, Privacy (epsilon)=20, delta=1e-62026.06 | 61.8 | — | — | |
| DP-COMEBackbone=ViT, Privacy (epsilon)=15, delta=1e-62026.06 | 61.7 | — | — | |
| DP-DeYOBackbone=ViT, Privacy (epsilon)=1, delta=1e-62026.06 | 61.4 | — | — | |
| DP-COMEBackbone=ViT, Privacy (epsilon)=10, delta=1e-62026.06 | 61.4 | — | — | |
| DP-SARBackbone=ViT, Privacy (epsilon)=1, delta=1e-62026.06 | 61.3 | — | — | |
| DP-TentBackbone=ViT, Privacy (epsilon)=1, delta=1e-62026.06 | 61.2 | — | — | |
| DP-EATABackbone=ViT, Privacy (epsilon)=1, delta=1e-62026.06 | 61.2 | — | — | |
| DP-COMEBackbone=ViT, Privacy (epsilon)=5, delta=1e-62026.06 | 60.7 | — | — | |
| SourceBackbone=ViT, Privacy (epsilon)=∞2026.06 | 59.2 | — | — | |
| DP-COMEBackbone=ViT, Privacy (epsilon)=1, delta=1e-62026.06 | 59.2 | — | — | |
| TentBackbone=ViT, Privacy (epsilon)=∞, Clipping=false2026.06 | 54.2 | — | — | |
| A-TPTBackbone=ResNet502026.05 | — | 57.6 | 47.1 | |
| AGFTAttack protocol=PGD-20, Perturbation budget ε=1/2552026.03 | — | 61.7 | 45.21 | |
| CLIPBackbone=ViT-B/322026.03 | — | 68.83 | 0.01 | |
| CLIPBackbone=ResNet502026.05 | — | 56.1 | 0.8 | |
| FAREBackbone=ViT-B/322026.03 | — | 47.79 | 17.05 | |
| FLYPBackbone=ViT-B/322026.03 | — | 64.38 | 0.01 | |
| GRACEBackbone=ViT-B/322026.03 | — | 58.53 | 23.39 | |
| LAATBackbone=ViT-B/322026.03 | — | 48.9 | 20.4 | |
| MTABackbone=ResNet502026.05 | — | 58.4 | 29.8 | |
| PMG-AFTBackbone=ViT-B/322026.03 | — | 50.3 | 22.1 | |
| PMG-AFTAttack protocol=PGD-20, Perturbation budget ε=1/2552026.03 | — | 59.33 | 41.08 | |
| R-TPTBackbone=ResNet502026.05 | — | 57.6 | 46.9 | |
| SPDBackbone=ViT-B/322026.03 | — | 64.6 | 0 | |
| TeCoABackbone=ViT-B/322026.03 | — | 44.54 | 21.01 | |
| TeCoAAttack protocol=PGD-20, Perturbation budget ε=1/2552026.03 | — | 55.62 | 37.25 | |
| TGA-ZSRAttack protocol=PGD-20, Perturbation budget ε=1/2552026.03 | — | 57.61 | 40.74 | |
| TPGMBackbone=ViT-B/322026.03 | — | 64.79 | 0 | |
| TPT-EnsembleBackbone=ResNet502026.05 | — | 51.3 | 39.3 | |
| Vanilla FTBackbone=ViT-B/322026.03 | — | 60.85 | 0 | |
| WiSE-FTBackbone=ViT-B/322026.03 | — | 63.78 | 0 |