Zero-shot Classification on Caltech101
87.2Top-1 Clean AccTTE
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| TTEDefense Category=Test-Time Defense2026.01 | 87.2 | 61.2 | — | — | — | — | |
| R-TPTDefense Category=Test-Time Defense2026.01 | 86.1 | 80.9 | — | — | — | — | |
| UniTok (clean)Tokenizer Training Radius=none, Zero-shot evaluation=true, l_infinity-bounded perturbations=true2026.02 | 85.7 | — | — | 0 | 0 | — | |
| FAREBackbone=CLIP, Fine-tuning protocol=l_inf 2/2552025.06 | 84.8 | — | — | 73 | 46.6 | — | |
| FAREBackbone=CLIP, Fine-tuning protocol=l_inf 4/2552025.06 | 84.7 | — | — | 76.7 | 64.1 | — | |
| JPEG-DLBackbone=CLIP2025.06 | 83.9 | — | — | 68.5 | 33.4 | — | |
| FAREDefense Category=Adversarial Fine-tuning2026.01 | 83.7 | 82 | — | — | — | — | |
| DiffPureBackbone=CLIP2025.06 | 83.6 | — | — | 83.2 | 83.1 | — | |
| CLIPDefense Category=Original2026.01 | 83.5 | 1.3 | — | — | — | — | |
| No defenseBackbone=CLIP2025.06 | 83.3 | — | — | 0 | 0 | — | |
| CSRDefense Category=Test-Time Defense2026.01 | 83.2 | 75.3 | — | — | — | — | |
| CLIPureBackbone=CLIP2025.06 | 82.9 | — | — | 80.8 | 80.1 | — | |
| HDDefense Category=Test-Time Defense2026.01 | 82.6 | 28.4 | — | — | — | — | |
| DiffCAPBackbone=CLIP2025.06 | 82.6 | — | — | 81.7 | 80.9 | — | |
| Anti-AdvDefense Category=Test-Time Defense2026.01 | 82.3 | 58.2 | — | — | — | — | |
| LPFDefense Category=Test-Time Defense2026.01 | 81.3 | 65.6 | — | — | — | — | |
| UniTok (AT 4/255)Tokenizer Training Radius=4/255, Zero-shot evaluation=true, l_infinity-bounded perturbations=true2026.02 | 81.2 | — | — | 56.9 | 22.4 | — | |
| TeCoABackbone=CLIP, Fine-tuning protocol=l_inf 2/2552025.06 | 80.7 | — | — | 70.2 | 57.4 | — | |
| TeCoABackbone=CLIP, Fine-tuning protocol=l_inf 4/2552025.06 | 78.4 | — | — | 69.7 | 60.9 | — | |
| UniTok (AT 8/255)Tokenizer Training Radius=8/255, Zero-shot evaluation=true, l_infinity-bounded perturbations=true2026.02 | 77.4 | — | — | 63.5 | 43.9 | — | |
| TeCoADefense Category=Adversarial Fine-tuning2026.01 | 77.1 | 76.3 | — | — | — | — | |
| TTCDefense Category=Test-Time Defense2026.01 | 75.8 | 31.3 | — | — | — | — | |
| UniTok (AT 12/255)Tokenizer Training Radius=12/255, Zero-shot evaluation=true, l_infinity-bounded perturbations=true2026.02 | 72.4 | — | — | 60.1 | 47.6 | — | |
| UniTok (AT 18/255)Tokenizer Training Radius=18/255, Zero-shot evaluation=true, l_infinity-bounded perturbations=true2026.02 | 65.3 | — | — | 57.5 | 44.6 | — |