# Image Classification on ImageNet-R strong appearance-shift (test)

Source: [Image Classification on ImageNet-R strong appearance-shift (test)](<https://www.sota2.com/research/sota/image-classification-on-imagenet-r-strong-appearance-shift-test>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:33:09.312Z

Evaluation of Image Classification performance on the ImageNet-R dataset under strong appearance shift conditions on the test split.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Image Classification |
| Dataset (including any stated split) | ImageNet-R strong appearance-shift (test) |
| Metric | Accuracy |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 14 of 14 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Accuracy](<https://www.sota2.com/research/sota/image-classification-on-imagenet-r-strong-appearance-shift-test.md?metric=Accuracy>): Higher is better; unit: PERCENT.

- [ASR](<https://www.sota2.com/research/sota/image-classification-on-imagenet-r-strong-appearance-shift-test.md?metric=ASR>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Accuracy | Result date | Report paper |
| --- | --- | --- | --- |
| Blended | 44.2 | Not recorded | 6997ea6e09c33900fcd764e6 |
| SIG | 43.57 | Not recorded | 6997ea6e09c33900fcd764e6 |
| WaNet | 43.56 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadNets | 43.51 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadCLIP++ | 43.22 | Not recorded | 6997ea6e09c33900fcd764e6 |
| MABA | 43.19 | Not recorded | 6997ea6e09c33900fcd764e6 |
| mmPoison | 43.14 | Not recorded | 6997ea6e09c33900fcd764e6 |
| TrojVQA | 43.06 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadCLIP | 42.87 | Not recorded | 6997ea6e09c33900fcd764e6 |
| SSBA | 42.49 | Not recorded | 6997ea6e09c33900fcd764e6 |
| Clean | 42.32 | Not recorded | 6997ea6e09c33900fcd764e6 |
| INACTIVE | 42.32 | Not recorded | 6997ea6e09c33900fcd764e6 |
| BadEncoder | 42.31 | Not recorded | 6997ea6e09c33900fcd764e6 |
| VLTrojan | 37.02 | Not recorded | 6997ea6e09c33900fcd764e6 |

### Blended

Accuracy: 44.2. Result ID: 699b07925698665ec49a0f5b.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa63eb1e209131cea01786.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### SIG

Accuracy: 43.57. Result ID: 699b07925698665ec49a0f5d.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa656e1e209131cea0a544.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### WaNet

Accuracy: 43.56. Result ID: 699b07925698665ec49a0f5c.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa696b1e209131cea21e53.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### BadNets

Accuracy: 43.51. Result ID: 699b07925698665ec49a0f5a.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### BadCLIP++

Accuracy: 43.22. Result ID: 699b07925698665ec49a0f66.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### MABA

Accuracy: 43.19. Result ID: 699b07925698665ec49a0f60.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa76371e209131cea6be67.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### mmPoison

Accuracy: 43.14. Result ID: 699b07925698665ec49a0f64.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f921e209131cea46558.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### TrojVQA

Accuracy: 43.06. Result ID: 699b07925698665ec49a0f5f.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6c5e1e209131cea339f9.md>)

[Implementation](<https://github.com/SRI-CSL/TrinityMultimodalTrojAI>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### BadCLIP

Accuracy: 42.87. Result ID: 699b07925698665ec49a0f65.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72641e209131cea562b2.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### SSBA

Accuracy: 42.49. Result ID: 699b07925698665ec49a0f5e.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6a921e209131cea28f6e.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### Clean

Accuracy: 42.32. Result ID: 699b07925698665ec49a0f59.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### INACTIVE

Accuracy: 42.32. Result ID: 699b07925698665ec49a0f63.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754f1.md>)

[Implementation](<https://github.com/Zhang-Henry/IMPERATIVE>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### BadEncoder

Accuracy: 42.31. Result ID: 699b07925698665ec49a0f62.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6a7c1e209131cea288c2.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

### VLTrojan

Accuracy: 37.02. Result ID: 699b07925698665ec49a0f61.

[Reporting paper](<https://www.sota2.com/research/paper/6997ea6e09c33900fcd764e6.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72491e209131cea55927.md>)

Recorded evaluation configuration: {"mode":"zero-shot","backbone":"CLIP RN50"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
