Adversarial Attack on BLINK
87.65Attack Success Rate (ASR)LAMP
Evaluation results
| Method | Links | |
|---|---|---|
| LAMPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 87.65 | |
| LAMPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 87.65 | |
| LAMPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 86.79 | |
| LAMPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 85.79 | |
| LAMPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 84.46 | |
| LAMPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 83.65 | |
| LAMPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 83.56 | |
| UAP-VLPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 74.22 | |
| UAP-VLPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 72.24 | |
| CPGC-UAPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 72.11 | |
| CPGC-UAPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 71.14 | |
| UAP-VLPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 68.66 | |
| CPGC-UAPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 67.55 | |
| CPGC-UAPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 66.65 | |
| Pandora's boxTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 65.52 | |
| UAP-VLPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 65.44 | |
| Doubly-UAPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 63.74 | |
| Doubly-UAPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 62.34 | |
| X-transferTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 62.24 | |
| UAP-VLPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 61.77 | |
| Jailbreak-MLLMTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 61.77 | |
| UAP-VLPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.44 | |
| Jailbreak-MLLMTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.43 | |
| Doubly-UAPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.42 | |
| UAP-VLPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 60.24 | |
| Doubly-UAPTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 59.23 | |
| CPGC-UAPTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 57.79 | |
| CPGC-UAPTarget Model=Mantis-SIGLIP, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 57.77 | |
| CPGC-UAPTarget Model=Mantis-CLIP, Evaluation Protocol=Standard2026.01 | 56.44 | |
| Doubly-UAPTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 52.34 | |
| Jailbreak-MLLMTarget Model=Mantis-Idefics2, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 50.43 | |
| Doubly-UAPTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 50.43 | |
| Doubly-UAPTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 48.43 | |
| Jailbreak-MLLMTarget Model=VILA-1.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 45.43 | |
| Jailbreak-MLLMTarget Model=LLaVa-v1.6, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 45.43 | |
| Jailbreak-MLLMTarget Model=Qwen-VL-Chat, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 43.43 | |
| Jailbreak-MLLMTarget Model=Qwen-2.5, Evaluation Protocol=Zero-shot Cross-Model Evaluation2026.01 | 41.34 |