Adversarial Attack on LLaVA
0.2427CLIP Similarity (RN-50)PNA + PathOut
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| PNA + PathOutAttack=PNA + PathOut2026.02 | 0.2427 | 0.4642 | 0.3063 | 0.3001 | 0.2633 | 0.3153 | 17.6 | |
| CleanAttack=Clean2026.02 | 0.2421 | 0.4646 | 0.3061 | 0.2988 | 0.2637 | 0.3151 | — | |
| PNAAttack=PNA2026.02 | 0.2417 | 0.4639 | 0.3049 | 0.2998 | 0.2616 | 0.3144 | 22.6 | |
| Schlarmann and HeinAttack=Schlarmann and Hein2026.02 | 0.2376 | 0.46 | 0.3011 | 0.2946 | 0.2563 | 0.3099 | 28.4 | |
| Cui et al.Attack=Cui et al.2026.02 | 0.2365 | 0.4584 | 0.2981 | 0.2925 | 0.253 | 0.3077 | 41.8 | |
| TGRAttack=TGR2026.02 | 0.2364 | 0.4577 | 0.2986 | 0.2935 | 0.2527 | 0.3078 | 35.6 | |
| Attack-BardAttack=Attack-Bard2026.02 | 0.2354 | 0.4568 | 0.2964 | 0.2915 | 0.2498 | 0.306 | 38.4 | |
| VT-AttackAttack=VT-Attack2026.02 | 0.233 | 0.4544 | 0.2939 | 0.2892 | 0.2462 | 0.3033 | 46 | |
| SGMAAttack=SGMA2026.02 | 0.2282 | 0.4493 | 0.2873 | 0.2831 | 0.2376 | 0.2971 | 55.4 |