Adversarial Attack on Qwen VL 2.5
0.2578CLIP Similarity (RN-50)Clean
Evaluation Results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| CleanAttack=Clean2026.02 | 0.2578 | 0.4843 | 0.3197 | 0.313 | 0.2702 | 0.329 | — | |
| PNA + PathOutAttack=PNA + PathOut2026.02 | 0.2554 | 0.481 | 0.3159 | 0.3103 | 0.266 | 0.3257 | 19 | |
| TGRAttack=TGR2026.02 | 0.2546 | 0.4802 | 0.3149 | 0.3095 | 0.2624 | 0.3243 | 24 | |
| PNAAttack=PNA2026.02 | 0.2533 | 0.4787 | 0.3131 | 0.308 | 0.2623 | 0.3231 | 22.6 | |
| Cui et al.Attack=Cui et al.2026.02 | 0.253 | 0.4789 | 0.3135 | 0.3079 | 0.262 | 0.3231 | 24.2 | |
| Attack-BardAttack=Attack-Bard2026.02 | 0.2524 | 0.4788 | 0.3129 | 0.3066 | 0.2607 | 0.3223 | 25 | |
| Schlarmann and HeinAttack=Schlarmann and Hein2026.02 | 0.2523 | 0.4783 | 0.3134 | 0.3075 | 0.2619 | 0.3227 | 26.8 | |
| VT-AttackAttack=VT-Attack2026.02 | 0.2497 | 0.4762 | 0.3105 | 0.3052 | 0.2571 | 0.3197 | 31.4 | |
| SGMAAttack=SGMA2026.02 | 0.2481 | 0.4738 | 0.307 | 0.3019 | 0.254 | 0.3169 | 39 |