List your company
ResearchFormerly WizWand

Image Classification on SUN397 (Clean and Robust Accuracy)

34.16Robust AccuracyOurs (5 trees)
-1.29367.910717.11526.3193Jan 19, 2026Feb 3, 2026Feb 18, 2026Mar 5, 2026Mar 20, 2026Apr 4, 2026Apr 20, 2026
Updated 6mo ago

Evaluation results

MethodLinks
Ours (5 trees)Zero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/255, Number of trees=52026.0434.16——
OursZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0433.53——
AoSZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0432.46——
TeCoAZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0431.55——
PMG-FTZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0431.07——
SAFT-LZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.0226.3351.91—
FAREZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.0425.59——
SAFT-MZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.0223.6253.08—
TGA-ZSRZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.0223.2950.16—
PMG-AFTZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.0216.3727.58—
TeCoAZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.0216.2334.53—
FAREZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.028.349.91—
HPT-GPDEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.014.55——
PMG-AFTAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.021.51——
CLIPZero-shot=true, Adversarial fine-tuning=ImageNet, PGD attack steps=20, Perturbation radius (epsilon)=1/2552026.041.21——
TGA-ZSRAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.021.1——
CLIPZero-shot evaluation=true, Adversarial Attack=PGD-100 (epsilon = 1/255), Backbone=ViT-B/322026.020.8246.8—
SAFT-LAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.020.78——
PMGEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.010.47——
TeCoAAttack=PGD-100, Epsilon=4/255, Evaluation Protocol=Zero-shot2026.020.26——
CLIPEvaluation Protocol=Zero-shot, Attack Strategy=AutoAttack, Perturbation Budget=1/2552026.010.07——
AoSYear=20252026.04—55.94—
CLIPYear=20212026.04—57.68—
FAREYear=20242026.04—54.05—
OursModel Configuration=1 tree2026.04—55.76—
OursModel Configuration=5 trees2026.04—56.29—
PMG-FTYear=20242026.04—53.55—
TeCoAYear=20232026.04—48.67—