Image Classification on CIFAR-10 InternVL3
0.2595CLIP Similarity (RN-50)Clean
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Cleanvictim_model=InternVL32026.02 | 0.2595 | 0.487 | 0.324 | 0.3155 | 0.2791 | 0.333 | — | |
| PNA + PathOutvictim_model=InternVL32026.02 | 0.2589 | 0.4841 | 0.3213 | 0.3159 | 0.2752 | 0.3311 | 13.4 | |
| PNAvictim_model=InternVL32026.02 | 0.2567 | 0.4825 | 0.3184 | 0.3129 | 0.2717 | 0.3284 | 18.8 | |
| Schlarmann and Heinvictim_model=InternVL32026.02 | 0.2552 | 0.4808 | 0.3168 | 0.3098 | 0.2695 | 0.3264 | 23 | |
| TGRvictim_model=InternVL32026.02 | 0.255 | 0.4809 | 0.3166 | 0.31 | 0.2683 | 0.3262 | 22 | |
| Attack-Bardvictim_model=InternVL32026.02 | 0.2535 | 0.4798 | 0.3146 | 0.3087 | 0.2663 | 0.3246 | 24.2 | |
| Cui et al.victim_model=InternVL32026.02 | 0.2534 | 0.4803 | 0.3159 | 0.3099 | 0.2682 | 0.3255 | 24.6 | |
| VT-Attackvictim_model=InternVL32026.02 | 0.2509 | 0.4776 | 0.3125 | 0.3066 | 0.2632 | 0.3222 | 31.6 | |
| SGMAvictim_model=InternVL32026.02 | 0.2474 | 0.4735 | 0.3072 | 0.3026 | 0.2574 | 0.3176 | 41.2 |