Adversarial Attack on Medical Imaging Dataset 1,000 images 1.0 (test)
79MTRMedFocusLeak
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| MedFocusLeakTarget Model=InternVL-8B2026.04 | 79 | 85 | 67 | |
| MedFocusLeakTarget Model=QwenVL-7B2026.04 | 75 | 85 | 63 | |
| MAttackTarget Model=InternVL-8B2026.04 | 69 | 75 | 51.8 | |
| MedFocusLeakTarget Model=BioMedLlama-Vision2026.04 | 68 | 85 | 57 | |
| AnyAttackTarget Model=QwenVL-7B2026.04 | 66 | 79 | 52 | |
| MAttackTarget Model=QwenVL-7B2026.04 | 66 | 75 | 49 | |
| FOA-AttackTarget Model=QwenVL-7B2026.04 | 64 | 59 | 37 | |
| AttackVLMTarget Model=InternVL-8B2026.04 | 63 | 83 | 52 | |
| FOA-AttackTarget Model=InternVL-8B2026.04 | 63 | 59 | 37 | |
| AttackVLMTarget Model=QwenVL-7B2026.04 | 63 | 83 | 52 | |
| Attack BardTarget Model=BioMedLlama-Vision2026.04 | 62 | 68 | 42 | |
| AttackVLMTarget Model=BioMedLlama-Vision2026.04 | 62 | 83 | 51 | |
| Attack BardTarget Model=QwenVL-7B2026.04 | 59 | 68 | 40 | |
| FOA-AttackTarget Model=BioMedLlama-Vision2026.04 | 59 | 59 | 34 | |
| AnyAttackTarget Model=BioMedLlama-Vision2026.04 | 57 | 79 | 45 | |
| MAttackTarget Model=BioMedLlama-Vision2026.04 | 56 | 75 | 42 | |
| Attack BardTarget Model=InternVL-8B2026.04 | 55 | 68 | 37 | |
| AnyAttackTarget Model=InternVL-8B2026.04 | 54 | 79 | 42 | |
| MedFocusLeakTarget Model=Gemini 2.5 Pro thinking2026.04 | 48 | 85 | 40 | |
| MedFocusLeakTarget Model=GPT-52026.04 | 48 | 85 | 40 | |
| AnyAttackTarget Model=Gemini 2.5 Pro thinking2026.04 | 41 | 79 | 32 | |
| MedFocusLeakTarget Model=MedVLM-R12026.04 | 40 | 85 | 34 | |
| AttackVLMTarget Model=GPT-52026.04 | 40 | 83 | 33 | |
| AnyAttackTarget Model=GPT-52026.04 | 39 | 79 | 30 | |
| Attack BardTarget Model=GPT-52026.04 | 37 | 68 | 25 | |
| Attack BardTarget Model=Gemini 2.5 Pro thinking2026.04 | 35 | 68 | 23 | |
| AnyAttackTarget Model=MedVLM-R12026.04 | 35 | 79 | 27 | |
| MAttackTarget Model=GPT-52026.04 | 34 | 75 | 22 | |
| AttackVLMTarget Model=Gemini 2.5 Pro thinking2026.04 | 33 | 83 | 27 | |
| MAttackTarget Model=MedVLM-R12026.04 | 33 | 75 | 23.3 | |
| AttackVLMTarget Model=MedVLM-R12026.04 | 32 | 83 | 26.6 | |
| MAttackTarget Model=Gemini 2.5 Pro thinking2026.04 | 31 | 75 | 24 | |
| Attack BardTarget Model=MedVLM-R12026.04 | 29 | 68 | 19 | |
| FOA-AttackTarget Model=MedVLM-R12026.04 | 29 | 59 | 17 | |
| FOA-AttackTarget Model=Gemini 2.5 Pro thinking2026.04 | 16 | 59 | 9.4 | |
| FOA-AttackTarget Model=GPT-52026.04 | 7 | 59 | 4.1 |