Image Classification on Oxfordpets (Robust Accuracy)
68.05Robust AccuracyOurs (5 trees)
Evaluation Results
| Method | Links | |
|---|---|---|
| Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.04 | 68.05 | |
| OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 67.96 | |
| AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 67.8 | |
| PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 63.07 | |
| TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 62.8 | |
| Comp-TGAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 60.09 | |
| TGA-ZSRProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 57.75 | |
| FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 56.7 | |
| Comp-TGAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 56.06 | |
| TGA-ZSRMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 54.62 | |
| Comp-TGAZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 41.91 | |
| PMG-AFTProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 41.62 | |
| TGA-ZSRZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 41.13 | |
| PMG-AFTZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 40.31 | |
| PMG-AFTMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 39.85 | |
| TeCoAZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 36.5 | |
| TeCoAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 36.44 | |
| TeCoAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 36.44 | |
| LAATZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 36 | |
| LAATProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 35.54 | |
| LAATMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 35 | |
| FT-Adv.Protocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 34.97 | |
| FT-Adv.Zero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 34.86 | |
| FT-Adv.Mode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 34.07 | |
| Comp-TGAZero-shot=true2026.03 | 28.41 | |
| FAREZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 27.8 | |
| FAREProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 24.56 | |
| TGA-ZSRZero-shot=true2026.03 | 24.5 | |
| FAREMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 24.45 | |
| PMG-AFTZero-shot=true2026.03 | 20.68 | |
| LAATZero-shot=true2026.03 | 19.22 | |
| TeCoAZero-shot=true2026.03 | 16.61 | |
| FT-Adv.Zero-shot=true2026.03 | 16.45 | |
| FAREZero-shot=true2026.03 | 9.67 | |
| CLIPProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 3.84 | |
| CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 3.79 | |
| CLIPZero-shot=true2026.03 | 2.97 | |
| FT-CleanProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 2.4 | |
| FT-CleanZero-shot=true2026.03 | 2.03 | |
| FT-CleanZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 0.03 | |
| CLIPZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 0 |