Zero-shot Classification on STL10 (Top-1 Clean Accuracy, Top-1 Robust Accuracy)
97.6Top-1 Clean AccTTE
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| TTEDefense Category=Test-Time Defense2026.01 | 97.6 | 75.6 | — | — | — | |
| CLIPDefense Category=Original2026.01 | 97.5 | 4.8 | — | — | — | |
| WISE-FTBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 97.4 | 0 | — | — | — | |
| Anti-AdvDefense Category=Test-Time Defense2026.01 | 97.2 | 83.1 | — | — | — | |
| CSRDefense Category=Test-Time Defense2026.01 | 97.2 | 87.5 | — | — | — | |
| FLYPBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 97.2 | 0 | — | — | — | |
| CLIPBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 97.1 | 0.64 | — | — | — | |
| TPGMBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 97.1 | 0 | — | — | — | |
| SPDBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 97 | 0 | — | — | — | |
| LPFDefense Category=Test-Time Defense2026.01 | 96.9 | 77.6 | — | — | — | |
| GRACEBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 96.9 | 78.5 | — | — | — | |
| R-TPTDefense Category=Test-Time Defense2026.01 | 96.8 | 92.7 | — | — | — | |
| HDDefense Category=Test-Time Defense2026.01 | 96.8 | 34 | — | — | — | |
| Vanilla FTBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 96.8 | 0 | — | — | — | |
| TTCDefense Category=Test-Time Defense2026.01 | 96.4 | 51.1 | — | — | — | |
| FAREBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 93.8 | 52.3 | — | — | — | |
| FAREDefense Category=Adversarial Fine-tuning2026.01 | 92 | 92 | — | — | — | |
| PMG-AFTBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 91.4 | 76.85 | — | — | — | |
| TeCoADefense Category=Adversarial Fine-tuning2026.01 | 90.7 | 90.6 | — | — | — | |
| LAATBackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 90.5 | 75.2 | — | — | — | |
| TeCoABackbone=ViT-B/16, Training=ImageNet, Evaluation=Zero-shot2026.03 | 89.25 | 74.41 | — | — | — | |
| C-PGCVariant=RN101-COCO2026.05 | — | — | — | — | 21 | |
| C-PGCVariant=ViT-B/16-COCO2026.05 | — | — | — | — | 36.8 | |
| DarkLLMVariant=Ensemble2026.05 | — | — | — | — | 45 | |
| ETUVariant=RN50-Flickr2026.05 | — | — | — | — | 14.5 | |
| ETUVariant=ViT-B/16-Flickr2026.05 | — | — | — | — | 40.7 | |
| GD-UAPVariant=Seg2026.05 | — | — | — | — | 9.8 | |
| GD-UAPVariant=CLS2026.05 | — | — | — | — | 20.1 | |
| Meta-UAPVariant=Ensemble2026.05 | — | — | — | — | 27.7 | |
| Meta-UAPVariant=Ensemble-Meta2026.05 | — | — | — | — | 22.1 | |
| TRM-UAPVariant=GoogleNet2026.05 | — | — | — | — | 24.7 | |
| TRM-UAPVariant=RN1522026.05 | — | — | — | — | 19.1 | |
| X-TransferVariant=Vanilla2026.05 | — | — | — | — | 19.4 | |
| X-TransferVariant=Base2026.05 | — | — | — | — | 49.3 |