Image Classification on Stanford Cars (Accuracy and Robustness)
93.4RobustnessDBD
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| DBDBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 93.4 | 67.8 | — | |
| DBDBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 91.2 | 63.7 | — | |
| DBDBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 86.2 | 60 | — | |
| R-TPTBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 42.1 | 58.4 | — | |
| R-TPTBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 36 | 67 | — | |
| R-TPTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 28.3 | 63.3 | — | |
| TTCBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 21.3 | 45.9 | — | |
| TTCBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 11.3 | 57.4 | — | |
| APTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Few-shot2026.06 | 9.9 | 41.9 | — | |
| TeCoABackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 9.2 | 24.1 | — | |
| T-VSSBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 4.1 | — | 8.7 | |
| R-TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 3.5 | — | 7.7 | |
| EnsembleBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 2.7 | — | 5.6 | |
| MTABackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 2.5 | — | 9 | |
| TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 2 | — | 9.6 | |
| C-TPTBackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 1.3 | — | 10.6 | |
| TeCoABackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 1.1 | 11.5 | — | |
| CLIP-TeCoABackbone=TeCoA-pretrained CLIP-ViT-B/32, Epsilon (ϵ)=4/2552026.06 | 1 | — | 10.2 | |
| CLIPBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 0 | 57.3 | — | |
| CLIPBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 0 | 61.2 | — | |
| CLIPBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 0 | 66.2 | — |