Robust Image Classification on CIFAR-10 (test) (Lp Norms and Natural Accuracy)
87.6Accuracy (Natural)RoME+RANDOM
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| RoME+RANDOMBackbone=DeiT-B, Attack=PGD2026.07 | 87.6 | 54.3 | 70.5 | 40.5 | 55.1 | 39.7 | |
| RANDOMBackbone=DeiT-B, Attack=PGD2026.07 | 87.2 | 53.4 | 68 | 39.5 | 53.6 | 38.9 | |
| AVGBackbone=DeiT-B, Attack=PGD2026.07 | 86.7 | 52.5 | 67.8 | 39.2 | 53.2 | 38.1 | |
| RoME+MAXBackbone=DeiT-B, Attack=PGD2026.07 | 85.4 | 45.3 | 63.9 | 42.8 | 50.7 | 41.2 | |
| MSDBackbone=DeiT-B, Attack=PGD2026.07 | 84.9 | 43.3 | 63 | 40.7 | 49 | 40.1 | |
| MAXBackbone=DeiT-B, Attack=PGD2026.07 | 84.8 | 43.1 | 62.5 | 40.3 | 48.6 | 39.5 | |
| RoME+RANDOMBackbone=DeiT-B, Attack=APGD2026.07 | 84.5 | 53.9 | 70.3 | 40.6 | 54.9 | 39.9 | |
| RANDOMBackbone=DeiT-B, Attack=APGD2026.07 | 83.5 | 51.5 | 68.9 | 39.6 | 53.3 | 38.7 | |
| RoME+RANDOMBackbone=Swin-B, Attack=PGD2026.07 | 81.4 | 51.5 | 63.4 | 35 | 50 | 35 | |
| RANDOMBackbone=Swin-B, Attack=PGD2026.07 | 81.1 | 49.6 | 62 | 31.5 | 47.7 | 31.4 | |
| AVGBackbone=Swin-B, Attack=PGD2026.07 | 80.9 | 49.2 | 61.4 | 31.6 | 47.4 | 31.4 | |
| E-ATBackbone=DeiT-B, Attack=APGD2026.07 | 80.5 | 52.1 | 68.3 | 40.2 | 53.5 | 39 | |
| RoME+MAXBackbone=DeiT-B, Attack=APGD2026.07 | 80.1 | 49 | 65.4 | 44.3 | 52.9 | 43.3 | |
| MSDBackbone=Swin-B, Attack=PGD2026.07 | 79.7 | 44.7 | 60 | 37 | 47.2 | 36 | |
| RoME+MAXBackbone=Swin-B, Attack=PGD2026.07 | 79.7 | 47.2 | 60.4 | 39.2 | 48.9 | 38.5 | |
| RAMPBackbone=DeiT-B, Attack=APGD2026.07 | 79.7 | 46.9 | 63.8 | 44 | 51.6 | 42.3 | |
| MAXBackbone=DeiT-B, Attack=APGD2026.07 | 79.3 | 45.8 | 64.1 | 43.9 | 51.3 | 41.9 | |
| RoME+RANDOMBackbone=Swin-B, Attack=APGD2026.07 | 78.9 | 50 | 63.1 | 34.7 | 49.3 | 34.6 | |
| MAXBackbone=Swin-B, Attack=PGD2026.07 | 78.5 | 45.1 | 59.7 | 37.1 | 47.3 | 36.2 | |
| RANDOMBackbone=Swin-B, Attack=APGD2026.07 | 77.6 | 47.4 | 62.5 | 31.9 | 47.3 | 31.3 | |
| RoME+MAXBackbone=Swin-B, Attack=APGD2026.07 | 75.1 | 44.6 | 60.3 | 39.8 | 48.2 | 39.3 | |
| E-ATBackbone=Swin-B, Attack=APGD2026.07 | 74.5 | 47.7 | 62.1 | 32.1 | 47.3 | 31.5 | |
| RAMPBackbone=Swin-B, Attack=APGD2026.07 | 74.2 | 43.3 | 58.8 | 37.1 | 46.4 | 36.1 | |
| MAXBackbone=Swin-B, Attack=APGD2026.07 | 73.1 | 42.8 | 58.5 | 36.2 | 45.8 | 35.6 |