Adversarial Prompt Injection Attack on 1000 images GPT-4o hard criterion
64.7Attack Success Rate (ASR)CoTTA
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| CoTTASurrogate=Ensemble2026.03 | 64.7 | 0.315 | |
| FOA-AttackSurrogate=Ensemble2026.03 | 41.3 | 0.161 |
| Method | Links | ||
|---|---|---|---|
| CoTTASurrogate=Ensemble2026.03 | 64.7 | 0.315 | |
| FOA-AttackSurrogate=Ensemble2026.03 | 41.3 | 0.161 |