ResearchBenchmarksAdversarial Attack on GF-counterattackFollow0.12Perturbation Magnitude (L-inf)AdapAM0.1120.1660.220.274Nov 19, 2025Evaluation ResultsMethodMethodLinksPerturbation Magnitude (L-inf)AdapAM2025.110.12Lin2025.110.16AMCA2025.110.21MASafe2025.110.32