Robust Image Classification on SUN397
41.52Robust AccuracyTTC
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| TTCMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 41.52 | 55.13 | 40.38 | |
| TTEMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 30.79 | 59.12 | — | |
| PMG-AFTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 22.58 | 37.98 | — | |
| TeCoAMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 19.39 | 36.69 | — | |
| FAREMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 14.91 | 52.42 | — | |
| Anti-advMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 8.05 | 56 | — | |
| HDMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 6.4 | 53.17 | — | |
| RNMode=Test-time Defence, Attack=10-step PGD, epsilon=1/2552025.03 | 1.72 | 59.69 | — | |
| CLIPAttack=10-step PGD, epsilon=1/2552025.03 | 1.14 | 58.5 | — | |
| CLIP-FTMode=Adversarial Finetuning, Attack=10-step PGD, epsilon=1/2552025.03 | 0.94 | 55.73 | — |