Image Classification on CIFAR-10 BLIP-2
0.2402CLIP Similarity (RN-50)Clean
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Cleanvictim_model=BLIP-22026.02 | 0.2402 | 0.4689 | 0.3038 | 0.2984 | 0.2585 | 0.314 | — | |
| PNA + PathOutvictim_model=BLIP-22026.02 | 0.2372 | 0.465 | 0.2989 | 0.2952 | 0.2545 | 0.3102 | 17.6 | |
| PNAvictim_model=BLIP-22026.02 | 0.2365 | 0.4648 | 0.298 | 0.2943 | 0.2543 | 0.3096 | 21.9 | |
| TGRvictim_model=BLIP-22026.02 | 0.2354 | 0.4623 | 0.2961 | 0.2933 | 0.2499 | 0.3074 | 23.4 | |
| Cui et al.victim_model=BLIP-22026.02 | 0.2335 | 0.4606 | 0.2957 | 0.2913 | 0.2478 | 0.3058 | 26.8 | |
| Attack-Bardvictim_model=BLIP-22026.02 | 0.233 | 0.4606 | 0.2941 | 0.29 | 0.2455 | 0.3047 | 26 | |
| VT-Attackvictim_model=BLIP-22026.02 | 0.2286 | 0.4567 | 0.2907 | 0.2862 | 0.2409 | 0.3006 | 27.6 | |
| SGMAvictim_model=BLIP-22026.02 | 0.2256 | 0.4536 | 0.2857 | 0.2833 | 0.2356 | 0.2968 | 38.6 | |
| Schlarmann and Heinvictim_model=BLIP-2, setting=white-box2026.02 | 0.1795 | 0.4087 | 0.2339 | 0.2338 | 0.1758 | 0.2463 | 84.4 |