Adversarial Prompt Injection Attack on 1000 images Gemini-2.5 (hard criterion)
73.2ASRCoTTA
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CoTTASurrogate=Ensemble2026.03 | 73.2 | 0.308 | |
| FOA-AttackSurrogate=Ensemble2026.03 | 58.4 | 0.211 |
| Method | Links | ||
|---|---|---|---|
| CoTTASurrogate=Ensemble2026.03 | 73.2 | 0.308 | |
| FOA-AttackSurrogate=Ensemble2026.03 | 58.4 | 0.211 |