Zero-shot Classification on CIFAR10
91.8Top-1 Clean AccReal
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| RealModel=VB16, Bit-width (W/A)=W4A82025.11 | 91.8 | — | — | |
| RealModel=VB16, Bit-width (W/A)=W8A82025.11 | 91 | — | — | |
| Full PrecisionModel=VB16, Bit-width (W/A)=FP2025.11 | 90.8 | — | — | |
| TTCDefense Category=Test-Time Defense2026.01 | 90 | 28.2 | — | |
| RealModel=VB32, Bit-width (W/A)=W8A82025.11 | 90 | — | — | |
| Full PrecisionModel=VB32, Bit-width (W/A)=FP2025.11 | 89.8 | — | — | |
| RealModel=VB32, Bit-width (W/A)=W4A82025.11 | 89.6 | — | — | |
| RealModel=VB32, Bit-width (W/A)=W6A62025.11 | 89.3 | — | — | |
| LPFDefense Category=Test-Time Defense2026.01 | 89 | 40.4 | — | |
| CLIPDefense Category=Original2026.01 | 88.1 | 0.5 | — | |
| CSRDefense Category=Test-Time Defense2026.01 | 87.2 | 75 | — | |
| D4CModel=VB16, Bit-width (W/A)=W8A82025.11 | 86.5 | — | — | |
| RealModel=VB16, Bit-width (W/A)=W6A62025.11 | 85.9 | — | — | |
| TTEDefense Category=Test-Time Defense2026.01 | 85.5 | 29.8 | — | |
| HDDefense Category=Test-Time Defense2026.01 | 84.1 | 11.8 | — | |
| Anti-AdvDefense Category=Test-Time Defense2026.01 | 82.8 | 63.5 | — | |
| RealModel=RN50x16, Bit-width (W/A)=W4A82025.11 | 82.3 | — | — | |
| RealModel=RN50x16, Bit-width (W/A)=W6A62025.11 | 82.1 | — | — | |
| RealModel=RN50x16, Bit-width (W/A)=W8A82025.11 | 81.8 | — | — | |
| R-TPTDefense Category=Test-Time Defense2026.01 | 81.6 | 69.2 | — | |
| BNS&PSEModel=VB16, Bit-width (W/A)=W8A82025.11 | 81.6 | — | — | |
| Full PrecisionModel=RN50x16, Bit-width (W/A)=FP2025.11 | 81.4 | — | — | |
| D4CModel=VB16, Bit-width (W/A)=W4A82025.11 | 81.4 | — | — | |
| D4CModel=RN50x16, Bit-width (W/A)=W8A82025.11 | 80.4 | — | — | |
| D4CModel=VB32, Bit-width (W/A)=W8A82025.11 | 80.4 | — | — | |
| BNS&PSEModel=RN50x16, Bit-width (W/A)=W8A82025.11 | 80.2 | — | — | |
| GaussianModel=RN50x16, Bit-width (W/A)=W8A82025.11 | 80 | — | — | |
| D4CModel=RN50x16, Bit-width (W/A)=W6A62025.11 | 78.7 | — | — | |
| GaussianModel=RN50x16, Bit-width (W/A)=W6A62025.11 | 78.3 | — | — | |
| BNS&PSEModel=RN50x16, Bit-width (W/A)=W6A62025.11 | 78 | — | — | |
| D4CModel=RN50x16, Bit-width (W/A)=W4A82025.11 | 77.9 | — | — | |
| BNS&PSEModel=RN50x16, Bit-width (W/A)=W4A82025.11 | 76.4 | — | — | |
| D4CModel=VB32, Bit-width (W/A)=W6A62025.11 | 75.5 | — | — | |
| GaussianModel=RN50x16, Bit-width (W/A)=W4A82025.11 | 74.6 | — | — | |
| RealModel=RN50, Bit-width (W/A)=W6A62025.11 | 73.8 | — | — | |
| D4CModel=RN50, Bit-width (W/A)=W6A62025.11 | 73.4 | — | — | |
| RealModel=RN50, Bit-width (W/A)=W8A82025.11 | 73 | — | — | |
| D4CModel=VB32, Bit-width (W/A)=W4A82025.11 | 72.6 | — | — | |
| GaussianModel=VB16, Bit-width (W/A)=W8A82025.11 | 72.3 | — | — | |
| RealModel=RN50, Bit-width (W/A)=W4A82025.11 | 71.7 | — | — | |
| Full PrecisionModel=RN50, Bit-width (W/A)=FP2025.11 | 71.5 | — | — | |
| BNS&PSEModel=VB16, Bit-width (W/A)=W4A82025.11 | 70.6 | — | — | |
| D4CModel=RN50, Bit-width (W/A)=W8A82025.11 | 70.4 | — | — | |
| GaussianModel=RN50, Bit-width (W/A)=W8A82025.11 | 69.9 | — | — | |
| BNS&PSEModel=RN50, Bit-width (W/A)=W8A82025.11 | 69.8 | — | — | |
| BNS&PSEModel=VB32, Bit-width (W/A)=W8A82025.11 | 68.1 | — | — | |
| BNS&PSEModel=RN50, Bit-width (W/A)=W6A62025.11 | 66.9 | — | — | |
| TeCoADefense Category=Adversarial Fine-tuning2026.01 | 63.7 | 63.8 | — | |
| FAREDefense Category=Adversarial Fine-tuning2026.01 | 61.4 | 61.2 | — | |
| D4CModel=RN50, Bit-width (W/A)=W4A82025.11 | 61.3 | — | — | |
| GaussianModel=RN50, Bit-width (W/A)=W6A62025.11 | 58.9 | — | — | |
| BNS&PSEModel=VB32, Bit-width (W/A)=W6A62025.11 | 57.7 | — | — | |
| BNS&PSEModel=VB32, Bit-width (W/A)=W4A82025.11 | 53.7 | — | — | |
| BNS&PSEModel=RN50, Bit-width (W/A)=W4A82025.11 | 48.9 | — | — | |
| D4CModel=VB16, Bit-width (W/A)=W6A62025.11 | 48.3 | — | — | |
| GaussianModel=RN50, Bit-width (W/A)=W4A82025.11 | 34.8 | — | — | |
| GaussianModel=VB32, Bit-width (W/A)=W8A82025.11 | 24.5 | — | — | |
| GaussianModel=VB16, Bit-width (W/A)=W4A82025.11 | 24.5 | — | — | |
| GaussianModel=VB32, Bit-width (W/A)=W6A62025.11 | 19.1 | — | — | |
| GaussianModel=VB32, Bit-width (W/A)=W4A82025.11 | 18 | — | — | |
| GaussianModel=VB16, Bit-width (W/A)=W6A62025.11 | 15.8 | — | — | |
| BNS&PSEModel=VB16, Bit-width (W/A)=W6A62025.11 | 15.4 | — | — | |
| C-PGCVariant=RN101-COCO2026.05 | — | — | 34.8 | |
| C-PGCVariant=ViT-B/16-COCO2026.05 | — | — | 74.4 | |
| DarkLLMVariant=Ensemble2026.05 | — | — | 87.4 | |
| ETUVariant=RN50-Flickr2026.05 | — | — | 44.2 | |
| ETUVariant=ViT-B/16-Flickr2026.05 | — | — | 76.2 | |
| GD-UAPVariant=Seg2026.05 | — | — | 63.2 | |
| GD-UAPVariant=CLS2026.05 | — | — | 66.5 | |
| Meta-UAPVariant=Ensemble2026.05 | — | — | 82.7 | |
| Meta-UAPVariant=Ensemble-Meta2026.05 | — | — | 72.3 | |
| TRM-UAPVariant=GoogleNet2026.05 | — | — | 73.3 | |
| TRM-UAPVariant=RN1522026.05 | — | — | 58 | |
| X-TransferVariant=Vanilla2026.05 | — | — | 69.1 | |
| X-TransferVariant=Base2026.05 | — | — | 86.2 |