Table 8: AUC (%) with standard deviation for anomaly detection on CIFAR100-C [29].
Noise Type	Method	1%	5%	10%	20%
gaussian noise	ACR-DSVDD	87.7±1.4	86.3±0.9	85.9±0.4	85.6±0.4
ACR-BCE	84.3±2.2	86.0±0.3	86.0±0.2	85.7±0.4
ResNet152-I	75.6±2.3	73.2±1.3	73.2±0.8	69.9±0.6
ResNet152-II	62.5±3.1	61.8±1.7	61.2±0.6	60.2±0.4
OC-MAML (1-shot)	53.0±3.6	54.1±1.9	55.8±0.6	57.1±1.0
CLIP-AD	82.3±1.1	82.6±0.9	82.3±0.9	82.6±0.1
shot noise	ACR-DSVDD	85.5±1.6	86.5±0.2	87.3±0.6	86.4±0.4
ACR-BCE	87.1±2.4	86.3±0.6	86.8±0.5	86.4±0.1
ResNet152-I	76.9±2.3	75.7±0.7	74.3±0.6	71.9±0.6
ResNet152-II	59.7±2.0	60.9±1.4	61.0±0.6	60.1±0.6
OC-MAML (1-shot)	53.8±4.7	52.8±1.1	53.6±1.0	53.8±1.3
CLIP-AD	83.0±1.6	84.1±0.3	83.9±0.5	83.3±0.3
impulse noise	ACR-DSVDD	80.5±3.7	81.5±0.5	80.7±0.7	79.8±0.2
ACR-BCE	81.7±1.0	81.0±0.5	80.8±0.7	79.5±0.3
ResNet152-I	74.1±1.4	73.1±1.0	72.2±0.4	71.9±0.3
ResNet152-II	64.3±2.7	63.0±1.2	62.2±0.8	61.2±0.6
OC-MAML (1-shot)	53.6±2.5	54.8±1.6	53.6±1.1	53.8±0.9
CLIP-AD	81.5±2.0	82.7±0.4	82.3±0.5	82.2±0.2
speckle noise	ACR-DSVDD	86.5±2.0	85.8±0.8	86.0±0.4	85.1±0.2
ACR-BCE	85.9±1.7	86.4±0.4	85.7±0.6	85.4±0.4
ResNet152-I	75.8±2.8	75.8±0.4	75.1±0.4	72.9±0.5
ResNet152-II	61.8±2.8	61.0±1.0	61.0±0.9	59.8±0.3
OC-MAML (1-shot)	52.2±2.7	52.8±1.2	53.5±1.2	53.7±0.4
CLIP-AD	84.6±1.6	83.7±0.4	84.1±0.4	84.2±0.3
gaussian blur	ACR-DSVDD	88.5±1.1	88.5±0.7	88.7±0.4	88.6±0.3
ACR-BCE	85.6±1.3	85.0±0.6	85.0±0.9	84.7±0.5
ResNet152-I	85.2±1.5	83.7±1.0	82.9±0.7	80.9±0.3
ResNet152-II	64.9±1.5	65.3±1.2	64.0±0.9	62.7±0.4
OC-MAML (1-shot)	55.6±3.6	56.6±0.6	56.8±1.1	57.6±0.6
CLIP-AD	91.9±0.8	92.7±0.5	92.1±0.5	92.3±0.2
defocus blur	ACR-DSVDD	89.7±1.8	89.5±0.8	89.1±0.3	89.2±0.3
ACR-BCE	86.5±1.3	86.5±0.6	86.3±0.3	85.9±0.4
ResNet152-I	85.2±1.5	83.7±1.0	82.9±0.7	80.9±0.3
ResNet152-II	64.9±1.5	65.3±1.2	64.0±0.9	62.7±0.4
OC-MAML(1-shot)	53.5±2.5	51.7±1.7	54.0±1.8	54.7±0.7
CLIP-AD	93.1±1.4	92.9±0.3	92.8±0.3	92.8±0.2
glass blur	ACR-DSVDD	87.0±2.1	87.9±0.4	87.7±0.4	87.6±0.2
ACR-BCE	85.4±1.0	86.1±0.4	86.4±0.4	86.1±0.3
ResNet152-I	80.3±2.5	78.7±0.8	78.0±0.6	75.6±0.4
ResNet152-II	63.9±2.2	63.0±1.7	63.6±0.5	62.2±0.4
OC-MAML (1-shot)	52.8±1.9	53.1±1.7	53.9±0.9	53.7±1.4
CLIP-AD	85.4±0.5	85.0±1.1	84.2±0.7	84.4±0.3
motion blur	ACR-DSVDD	89.2±0.4	89.6±0.8	89.1±0.5	88.6±0.5
ACR-BCE	86.3±1.9	85.3±1.0	85.7±0.2	84.9±0.2
ResNet152-I	84.3±1.3	83.4±1.3	82.0±0.5	80.4±0.3
ResNet152-II	66.6±3.1	64.8±1.2	63.4±0.6	62.4±0.3
OC-MAML (1-shot)	50.5±3.1	52.3±1.6	53.1±0.9	53.6±0.7
CLIP-AD	91.8±1.4	92.9±0.4	92.7±0.3	92.8±0.3
zoom blur	ACR-DSVDD	90.3±1.7	89.6±0.7	89.8±0.4	89.4±0.3
ACR-BCE	87.5±1.8	86.5±1.0	86.4±0.2	86.4±0.3
ResNet152-I	86.9±1.3	87.2±0.3	86.3±0.3	84.6±0.2
ResNet152-II	65.2±1.1	65.7±0.7	66.1±0.3	64.2±0.4
OC-MAML (1-shot)	50.6±3.2	53.8±0.8	53.7±1.4	54.2±0.4
CLIP-AD	94.2±1.4	94.4±0.3	94.3±0.3	93.9±0.3
snow	ACR-DSVDD	87.7±1.2	87.7±1.0	87.6±0.4	87.4±0.3
ACR-BCE	84.4±2.6	85.5±0.8	85.5±0.6	84.4±0.0
ResNet152-I	85.8±1.4	84.8±0.6	83.7±0.8	81.9±0.3
ResNet152-II	67.1±1.9	65.6±0.9	64.5±0.4	63.3±0.8
OC-MAML (1-shot)	56.7±4.5	54.5±1.8	56.8±0.6	57.3±0.2
CLIP-AD	91.7±0.8	92.9±0.4	93.3±0.2	93.2±0.2
fog blur	ACR-DSVDD	86.2±1.8	85.2±0.6	85.4±0.9	85.0±0.2
ACR-BCE	78.8±2.7	77.7±0.5	77.3±0.7	77.2±0.6
ResNet152-I	76.4±1.8	76.9±0.6	74.8±1.0	73.0±0.9
ResNet152-II	64.5±2.1	62.9±0.8	62.5±0.4	61.0±0.5
OC-MAML (1-shot)	51.9±3.6	52.9±0.9	53.4±0.6	53.7±0.2
CLIP-AD	91.9±0.8	92.3±0.5	92.2±0.4	92.3±0.3
frost	ACR-DSVDD	88.2±1.5	88.0±0.9	87.4±0.6	87.2±0.3
ACR-BCE	83.2±1.4	84.1±1.2	84.6±0.6	83.7±0.4
ResNet152-I	85.9±1.6	85.5±0.5	83.8±0.8	81.4±0.5
ResNet152-II	63.0±1.0	63.2±0.5	62.7±1.3	61.7±0.3
OC-MAML (1-shot)	52.8±1.3	52.4±2.0	53.6±0.7	53.2±1.1
CLIP-AD	92.9±0.6	93.1±0.2	93.6±0.3	93.2±0.2
brightness	ACR-DSVDD	90.0±1.5	89.5±0.9	89.6±0.4	89.9±0.2
ACR-BCE	86.7±1.3	87.8±0.7	87.1±0.8	87.2±0.4
ResNet152-I	90.7±0.9	89.8±0.5	89.7±0.3	88.1±0.3
ResNet152-II	67.6±2.1	69.8±0.4	68.2±1.0	67.0±0.5
OC-MAML (1-shot)	53.6±1.1	56.8±1.5	56.2±0.7	56.8±0.5
CLIP-AD	94.6±0.4	95.6±0.3	95.4±0.3	95.3±0.2
spatter	ACR-DSVDD	88.1±1.5	89.2±0.6	89.0±0.6	88.7±0.1
ACR-BCE	86.2±2.3	87.7±0.3	87.2±0.6	87.3±0.3
ResNet152-I	76.1±1.6	77.0±0.8	75.2±0.3	73.5±0.2
ResNet152-II	61.3±0.9	61.3±1.2	60.2±0.5	59.3±0.5
OC-MAML (1-shot)	54.6±3.7	54.0±0.3	53.1±1.2	54.1±1.0
CLIP-AD	89.3±1.8	88.9±0.5	88.3±0.4	88.8±0.2
elastic transform	ACR-DSVDD	90.8±1.9	89.3±0.7	90.0±0.4	89.3±0.3
ACR-BCE	87.6±1.0	86.7±0.8	87.4±0.6	87.2±0.4
ResNet152-I	82.4±2.4	80.9±0.4	80.0±0.9	78.4±0.2
ResNet152-II	65.6±2.3	65.2±0.6	63.9±0.7	62.0±0.3
OC-MAML (1-shot)	52.5±3.9	54.3±1.2	54.1±1.2	54.7±0.8
CLIP-AD	91.7±0.5	90.0±0.3	89.4±0.5	89.4±0.3
pixelate	ACR-DSVDD	91.7±0.5	91.1±0.6	90.8±0.6	90.7±0.2
ACR-BCE	89.6±1.9	89.9±0.6	89.7±0.1	89.8±0.3
ResNet152-I	82.5±1.6	83.2±1.3	82.5±0.7	80.1±0.3
ResNet152-II	66.4±1.5	65.6±0.6	64.9±0.6	63.8±0.3
OC-MAML (1-shot)	56.4±3.8	55.8±0.9	56.4±0.7	57.0±0.9
CLIP-AD	89.8±1.9	87.7±0.7	88.3±0.3	88.5±0.3