Zero-shot Classification on ImageNet (Robustness Metrics)
0.667Top-1 Clean AccuracyR-TPT
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| R-TPTDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.667 | 0.51 | |
| TTEDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.662 | 0.232 | |
| CLIPDefense Category=Original, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.639 | 0 | |
| Full-precisionSetup=Vision, #Bits=32/32, Size=607.22026.05 | 0.634 | — | |
| Full-precisionSetup=Vision & Text, #Bits=32/32, Size=607.22026.05 | 0.634 | — | |
| RepQ-ViT + NBCSetup=Vision, #Bits=8/8, Size=359.52026.05 | 0.631 | — | |
| RepQ-ViTSetup=Vision, #Bits=8/8, Size=345.32026.05 | 0.629 | — | |
| CSRDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.625 | 0.589 | |
| Anti-AdvDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.615 | 0.239 | |
| RepQ-ViT + NBCSetup=Vision, #Bits=6/6, Size=336.82026.05 | 0.607 | — | |
| HDDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.597 | 0.041 | |
| RepQ-ViTSetup=Vision, #Bits=6/6, Size=323.52026.05 | 0.592 | — | |
| LPFDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.581 | 0.305 | |
| RepQ-ViT + NBCSetup=Vision & Text, #Bits=8/8, Size=252.62026.05 | 0.57 | — | |
| TeCoADefense Category=Adversarial Fine-tuning, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.563 | 0.536 | |
| FAREDefense Category=Adversarial Fine-tuning, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.48 | 0.467 | |
| RepQ-ViT + NBCSetup=Vision & Text, #Bits=6/6, Size=221.32026.05 | 0.443 | — | |
| TTCDefense Category=Test-Time Defense, Evaluation Protocol=Zero-shot, Adversarial Attack=10-step PGD (l_inf = 1/255)2026.01 | 0.409 | 0.278 | |
| RepQ-ViTSetup=Vision & Text, #Bits=8/8, Size=232.12026.05 | 0.387 | — | |
| RepQ-ViTSetup=Vision & Text, #Bits=6/6, Size=200.82026.05 | 0.298 | — |