Robust Zero-Shot Classification on SUN397 and Country211
41.7Top-1 Accuracy (Clean)R-TPT
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| R-TPTEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 41.7 | 26.7 | 26.4 | |
| TTEEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 40.6 | 1.2 | 1.4 | |
| CLIPEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 40.3 | 0 | 0 | |
| CSREvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 39.8 | 43.8 | 34.2 | |
| Anti-AdvEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 38.9 | 1.1 | 0.2 | |
| HDEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 37.4 | 0 | 0 | |
| LPFEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 37 | 8 | 6.9 | |
| TTCEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 28.9 | 1.2 | 0 | |
| FAREEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 26 | 24.2 | 24.2 | |
| TeCoAEvaluation Protocol=Zero-shot, Attack Budget=4/255, PGD Attack Steps=502026.01 | 21.5 | 20 | 19.7 |