Image Classification on SUN397 (Top-1 Clean and Robust Accuracy)
69Top-1 Clean AccuracyDBD
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| DBDBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 69 | 97.4 | |
| CLIPBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 67.9 | 0 | |
| DBDBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 67.1 | 94.2 | |
| CLIPBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 65.7 | 0 | |
| R-TPTBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 65.7 | 46.5 | |
| CLBPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 65.61 | 55.53 | |
| R-TPTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 64 | 44.1 | |
| AdvVLPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 63.9 | 29.7 | |
| DBDBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 63.8 | 93.2 | |
| AdvMaPLeShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 63.57 | 29.7 | |
| CLIPBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 62.7 | 0 | |
| FAPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 62.37 | 30.27 | |
| R-TPTBackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 60.8 | 50.7 | |
| AdvVPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 54.7 | 17.63 | |
| TTCBackbone=ViT-B/16, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 51.5 | 15.7 | |
| APTBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Few-shot2026.06 | 46.6 | 10.5 | |
| TTCBackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 46.3 | 25.7 | |
| TeCoABackbone=ResNet50, Attack Protocol=PGD-10, Epsilon (ε)=1/255, Evaluation Setting=Zero-shot2026.06 | 38.6 | 19.7 | |
| TeCoABackbone=ViT-B/32, Attack Protocol=PGD-100, Epsilon (ε)=4/255, Evaluation Setting=Zero-shot2026.06 | 34.7 | 6.5 |