Image Classification on STL10 (Acc., Rob.)
90.59RobustnessR-TPT
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| R-TPTmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 90.59 | 96.09 | |
| ATACmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 90.41 | 95.71 | |
| TAMerging Method=BadMerging, Task Order=Task Order 32026.06 | 89.43 | 95.33 | |
| SAUMerging Method=BadMerging, Task Order=Task Order 32026.06 | 85.53 | 93.55 | |
| TTEmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 78.48 | 96.26 | |
| TTCmode=Test-time Defense, attack=10-step PGD, epsilon=1/2552025.11 | 76.7 | 95.85 | |
| MACBackbone=CLIP-ViT-B/322026.06 | 73.49 | 96.17 | |
| PMG-AFTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 73.08 | 88.56 | |
| TeCoAmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 70.08 | 87.4 | |
| FAREmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 59.06 | 91.72 | |
| TTCBackbone=CLIP-ViT-B/322026.06 | 52.4 | 95.83 | |
| PMG-AFTBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 35.4 | 84.35 | |
| TTEBackbone=CLIP-ViT-B/322026.06 | 32.56 | 96.26 | |
| TeCoABackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 31.83 | 81.69 | |
| PMG-AFTBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 28.49 | 88.56 | |
| TeCoABackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 24.8 | 87.4 | |
| IndividualMerging Method=BadMerging, Task Order=Task Order 32026.06 | 18.86 | 97.96 | |
| FAREBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=42026.06 | 17.59 | 89.11 | |
| CLIP-FTmode=Adversarial Finetuning, attack=10-step PGD, epsilon=1/2552025.11 | 12.73 | 94.49 | |
| CLIPattack=10-step PGD, epsilon=1/2552025.11 | 11 | 96.4 | |
| FAREBackbone=CLIP-ViT-B/32, Adversarial Fine-tuning Attack Budget (ε)=12026.06 | 9.99 | 91.72 | |
| IBVSMerging Method=BadMerging, Task Order=Task Order 32026.06 | 7.55 | 92.93 | |
| PAMMerging Method=BadMerging, Task Order=Task Order 32026.06 | 4.21 | 94.36 | |
| CLIP-FTBackbone=CLIP-ViT-B/32, Defense Category=Adversarial Fine-tuning2026.06 | 3.75 | 94.49 | |
| HDBackbone=CLIP-ViT-B/322026.06 | 3.39 | 89.5 | |
| Anti-advBackbone=CLIP-ViT-B/322026.06 | 2.25 | 95.47 | |
| SAMMerging Method=BadMerging, Task Order=Task Order 32026.06 | 1.86 | 93.47 | |
| LFPMMerging Method=BadMerging, Task Order=Task Order 32026.06 | 0.73 | 96.05 | |
| CLIPBackbone=CLIP-ViT-B/322026.06 | 0.16 | 96.4 | |
| RNBackbone=CLIP-ViT-B/322026.06 | 0.06 | 95.85 |