Adversarial Attack on Gemini 2.0
41.3ASRMMAS
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| MMASSource Model=LLaVA2026.05 | 41.3 | — | — | — | — | — | — | 0.576 | |
| SGMAAttack=SGMA2026.02 | 13.2 | 0.2527 | 0.4781 | 0.315 | 0.3082 | 0.2714 | 0.3251 | — | |
| TGRAttack=TGR2026.02 | 7.6 | 0.2617 | 0.4893 | 0.3258 | 0.3174 | 0.2816 | 0.3352 | — | |
| VT-AttackAttack=VT-Attack2026.02 | 7.6 | 0.2547 | 0.4809 | 0.3178 | 0.3108 | 0.2758 | 0.328 | — | |
| Attack-BardAttack=Attack-Bard2026.02 | 6.8 | 0.2562 | 0.4819 | 0.3197 | 0.3117 | 0.2764 | 0.3292 | — | |
| Cui et al.Attack=Cui et al.2026.02 | 5.6 | 0.2564 | 0.4813 | 0.3187 | 0.3119 | 0.2792 | 0.3295 | — | |
| PNA + PathOutAttack=PNA + PathOut2026.02 | 5.4 | 0.2606 | 0.4875 | 0.324 | 0.3161 | 0.2808 | 0.3338 | — | |
| Schlarmann and HeinAttack=Schlarmann and Hein2026.02 | 5.4 | 0.2539 | 0.4808 | 0.3185 | 0.3112 | 0.276 | 0.3281 | — | |
| PNAAttack=PNA2026.02 | 5.2 | 0.2612 | 0.488 | 0.3243 | 0.316 | 0.2808 | 0.3341 | — | |
| CroPASource Model=LLaVA2026.05 | 2 | — | — | — | — | — | — | 0.132 | |
| PGDSource Model=LLaVA2026.05 | 1.3 | — | — | — | — | — | — | 0.084 | |
| CleanAttack=Clean2026.02 | — | 0.2588 | 0.4841 | 0.323 | 0.3162 | 0.2828 | 0.333 | — |