Image Classification on PCAM (Robust Accuracy)
48.88Robust AccuracyFT-Adv.
Evaluation Results
| Method | Links | |
|---|---|---|
| FT-Adv.Protocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 48.88 | |
| FT-Adv.Zero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 48.79 | |
| PMG-AFTProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 48.64 | |
| Comp-TGAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 48.56 | |
| PMG-AFTZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 48.49 | |
| Comp-TGAZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 48.35 | |
| Comp-TGAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 48.13 | |
| TeCoAZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 47.88 | |
| TGA-ZSRProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 47.76 | |
| TeCoAMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 47.39 | |
| TeCoAProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 47.39 | |
| TGA-ZSRZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 46.46 | |
| TGA-ZSRMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 45.35 | |
| FT-Adv.Mode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 42.84 | |
| GLADIATORFine-tuned on=ImageNet2026.03 | 39.29 | |
| LAATMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 38.08 | |
| FT-Adv.Zero-shot=true2026.03 | 38.06 | |
| PMG-AFTZero-shot=true2026.03 | 37.88 | |
| Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.04 | 37.82 | |
| LAATProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 37.47 | |
| LAATZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 37.46 | |
| OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 36.49 | |
| AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 36.19 | |
| AGFTFine-tuned on=ImageNet2026.03 | 33.89 | |
| TeCoAZero-shot=true2026.03 | 33.2 | |
| TGA-ZSRFine-tuned on=ImageNet2026.03 | 30.95 | |
| PMG-AFTMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 30.81 | |
| TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 26.81 | |
| PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 26.1 | |
| LAATZero-shot=true2026.03 | 23.39 | |
| FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 22.51 | |
| Comp-TGAZero-shot=true2026.03 | 20.21 | |
| PMG-AFTFine-tuned on=ImageNet2026.03 | 18.99 | |
| TGA-ZSRZero-shot=true2026.03 | 18.98 | |
| TeCoAFine-tuned on=ImageNet2026.03 | 14.42 | |
| FAREProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 10.17 | |
| FAREZero-shot=true2026.03 | 3.43 | |
| FAREZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 3.43 | |
| FAREMode=Zero-shot, Attack=Adaptive Attack, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 3.1 | |
| FT-CleanProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 1.32 | |
| FT-CleanZero-shot=true2026.03 | 0.44 | |
| CLIPMode=Zero-shot2026.03 | 0.13 | |
| CLIPProtocol=Zero-shot, Attack=PGD, Epsilon=1/255, Training Dataset=Tiny-ImageNet2026.03 | 0.11 | |
| CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.04 | 0.08 | |
| CLIPZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 0.06 | |
| CLIPZero-shot=true2026.03 | 0.04 | |
| FT-CleanZero-shot=true, Attack=APGD (epsilon=1/255)2026.03 | 0.01 |