Perceptual Robustness on VStar
80.25Overall AccuracyDefender
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| DefenderIteration=32026.01 | 80.25 | 94.12 | 100 | 73.91 | 78.95 | |
| DefenderIteration=22026.01 | 77.31 | 94.12 | 100 | 70.43 | 75 | |
| Liu et al.Augmentation=All2026.01 | 76.05 | 82.35 | 100 | 70.43 | 73.68 | |
| DefenderIteration=12026.01 | 75.63 | 88.24 | 100 | 68.7 | 73.68 | |
| Ablation (Clean Data)2026.01 | 74.79 | 82.35 | 100 | 67.83 | 73.68 | |
| Liu et al.Augmentation=Insert2026.01 | 74.79 | 82.35 | 100 | 66.96 | 75 | |
| Liu et al.Augmentation=Add2026.01 | 73.11 | 94.12 | 100 | 64.35 | 71.05 | |
| Base (M def (0))2026.01 | 71.01 | 82.35 | 100 | 60 | 73.68 | |
| Yang et al.2026.01 | 70.17 | 76.47 | 100 | 60.87 | 71.05 |