Zero-shot Classification on 16 datasets average
69.8Zero-shot Accuracy (%)CLIP
Evaluation results
| Method | Links | |
|---|---|---|
| CLIPAttack Type=None, Noise Budget (epsilon)=02026.03 | 69.8 | |
| R-Adapt+Attack Type=None, Noise Budget (epsilon)=02026.03 | 67 | |
| R-Adapt_CLIPAttack Type=None, Noise Budget (epsilon)=02026.03 | 66.2 | |
| R-Adapt_TGAAttack Type=None, Noise Budget (epsilon)=02026.03 | 65.7 | |
| R-Adapt_TeCoAAttack Type=None, Noise Budget (epsilon)=02026.03 | 65.5 | |
| R-Adapt_FAREAttack Type=None, Noise Budget (epsilon)=02026.03 | 64.5 | |
| R-Adapt+Attack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 63.1 | |
| R-Adapt+Attack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 61.3 | |
| R-Adapt_TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 60.7 | |
| R-Adapt+Attack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 60.5 | |
| R-Adapt_FAREAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 60.3 | |
| R-Adapt+Attack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 60.3 | |
| R-Adapt_TeCoAAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 59.9 | |
| R-Adapt_TeCoAAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 59.8 | |
| R-Adapt_FAREAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 59.8 | |
| R-Adapt_FAREAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 59.7 | |
| R-Adapt_FAREAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 59.6 | |
| R-Adapt_FAREAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 59.6 | |
| R-Adapt_TGAAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 59.5 | |
| R-Adapt_TeCoAAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 59.4 | |
| R-Adapt+Attack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 59.4 | |
| R-Adapt+Attack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 59.4 | |
| R-Adapt_TeCoAAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 59.2 | |
| R-Adapt_CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 58.8 | |
| R-Adapt_FAREAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 58.3 | |
| R-Adapt_TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 58.1 | |
| R-Adapt+Attack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 57.9 | |
| R-Adapt_TGAAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 57.3 | |
| R-Adapt+Attack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 57.2 | |
| R-Adapt_TGAAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 57.1 | |
| R-Adapt_FAREAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 57 | |
| R-Adapt_CLIPAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 56.4 | |
| TGAAttack Type=None, Noise Budget (epsilon)=02026.03 | 56.3 | |
| FAREAttack Type=None, Noise Budget (epsilon)=02026.03 | 56.2 | |
| R-Adapt_TGAAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 55.8 | |
| R-Adapt_CLIPAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 55.7 | |
| R-Adapt_TeCoAAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 55.7 | |
| R-Adapt_TGAAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 55.7 | |
| R-Adapt_TGAAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 55.6 | |
| R-Adapt_FAREAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 55.6 | |
| FAREAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 54.6 | |
| FAREAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 54.6 | |
| FAREAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 54.5 | |
| FAREAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 54.5 | |
| FAREAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 54.5 | |
| TGAAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 54.2 | |
| FAREAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 54.2 | |
| R-Adapt_CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 54.1 | |
| R-Adapt_CLIPAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 54 | |
| R-Adapt_CLIPAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 53.9 | |
| TGAAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 53.9 | |
| R-Adapt_TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 53.8 | |
| TGAAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 53.8 | |
| TGAAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 53.8 | |
| R-Adapt_FAREAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 53.8 | |
| TGAAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 53.7 | |
| FAREAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 53.7 | |
| R-Adapt+Attack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 53.5 | |
| R-Adapt_TGAAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 53.4 | |
| FAREAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 53.3 | |
| FAREAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 52.8 | |
| TGAAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 52.6 | |
| TGAAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 52.4 | |
| R-Adapt_TGAAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 51.4 | |
| TGAAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 50.2 | |
| R-Adapt_CLIPAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 50 | |
| TeCoAAttack Type=None, Noise Budget (epsilon)=02026.03 | 49.6 | |
| TGAAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 49.6 | |
| R-Adapt_TeCoAAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 49.3 | |
| TeCoAAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 48.8 | |
| TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 48.8 | |
| TeCoAAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 48.7 | |
| TeCoAAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 48.7 | |
| TeCoAAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 48.7 | |
| TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 48.7 | |
| R-Adapt_TGAAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 48.7 | |
| TeCoAAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 48.6 | |
| R-Adapt_CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 48.4 | |
| TeCoAAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 48.4 | |
| TeCoAAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 48.2 | |
| R-Adapt_CLIPAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 39.2 | |
| CLIPAttack Type=PGD, Noise Budget (epsilon)=1/2552026.03 | 1.6 | |
| CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=1/2552026.03 | 1.6 | |
| CLIPAttack Type=C&W, Noise Budget (epsilon)=1/2552026.03 | 1.1 | |
| CLIPAttack Type=C&W, Noise Budget (epsilon)=2/2552026.03 | 0.1 | |
| CLIPAttack Type=PGD, Noise Budget (epsilon)=2/2552026.03 | 0 | |
| CLIPAttack Type=PGD, Noise Budget (epsilon)=4/2552026.03 | 0 | |
| CLIPAttack Type=C&W, Noise Budget (epsilon)=4/2552026.03 | 0 | |
| CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=2/2552026.03 | 0 | |
| CLIPAttack Type=APGD-CE, Noise Budget (epsilon)=4/2552026.03 | 0 |