# Image Classification on ImageNet (val) (Adversarial Robustness) Source: [Image Classification on ImageNet (val) (Adversarial Robustness)]() Collection index: [llms.txt]() Data updated: 2026-02-27T10:07:26.300Z Evaluation of Image Classification performance on the validation split of the ImageNet dataset, specifically measuring robustness against Projected Gradient Descent (PGD) attacks with perturbation budgets of 10, 50, and 100 steps. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Image Classification | | Dataset (including any stated split) | ImageNet (val) | | Metric | Robust Accuracy | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 10 of 10 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Robust Accuracy](): Higher is better; unit: PERCENT. - [Accuracy (Natural)](): Higher is better; unit: PERCENT. - [Accuracy (PGD-10)](): Higher is better; unit: PERCENT. - [Accuracy (PGD-50)](): Higher is better; unit: PERCENT. - [Accuracy (PGD-100)](): Higher is better; unit: PERCENT. - [Accuracy Delta (Gain)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Robust Accuracy | Result date | Report paper | | --- | --- | --- | --- | | TTC | 38.41 | Not recorded | 68fa774a1e209131cea724cc | | TTE | 31.01 | Not recorded | 68fa774a1e209131cea724cc | | PMG-AFT | 21.43 | Not recorded | 68fa774a1e209131cea724cc | | TeCoA | 18.89 | Not recorded | 68fa774a1e209131cea724cc | | FARE | 14 | Not recorded | 68fa774a1e209131cea724cc | | Anti-adv | 8.67 | Not recorded | 68fa774a1e209131cea724cc | | HD | 6.63 | Not recorded | 68fa774a1e209131cea724cc | | RN | 1.77 | Not recorded | 68fa774a1e209131cea724cc | | CLIP | 1.15 | Not recorded | 68fa774a1e209131cea724cc | | CLIP-FT | 0.93 | Not recorded | 68fa774a1e209131cea724cc | ### TTC Robust Accuracy: 38.41. Result ID: 69a16cc635dfcabb00e6f5ae. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Mode":"Test-time Defence","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### TTE Robust Accuracy: 31.01. Result ID: 69a16cc635dfcabb00e6f5ab. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Test-time Defence","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### PMG-AFT Robust Accuracy: 21.43. Result ID: 69a16cc635dfcabb00e6f5a8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Adversarial Finetuning","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### TeCoA Robust Accuracy: 18.89. Result ID: 69a16cc635dfcabb00e6f5a7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Adversarial Finetuning","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### FARE Robust Accuracy: 14. Result ID: 69a16cc635dfcabb00e6f5a9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Adversarial Finetuning","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### Anti-adv Robust Accuracy: 8.67. Result ID: 69a16cc635dfcabb00e6f5ac. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Test-time Defence","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### HD Robust Accuracy: 6.63. Result ID: 69a16cc635dfcabb00e6f5ad. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Mode":"Test-time Defence","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### RN Robust Accuracy: 1.77. Result ID: 69a16cc635dfcabb00e6f5aa. [Reporting paper]() Recorded evaluation configuration: {"Mode":"Test-time Defence","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### CLIP Robust Accuracy: 1.15. Result ID: 69a16cc635dfcabb00e6f5a5. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. ### CLIP-FT Robust Accuracy: 0.93. Result ID: 69a16cc635dfcabb00e6f5a6. [Reporting paper]() Recorded evaluation configuration: {"Mode":"Adversarial Finetuning","Attack":"10-step PGD","epsilon":"1/255"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.