Image Classification on CIFAR-10 OpenFlamingo
0.2431CLIP Similarity (RN-50)Clean
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Cleanvictim_model=OpenFlamingo2026.02 | 0.2431 | 0.4715 | 0.3096 | 0.3009 | 0.268 | 0.3186 | — | |
| PNA + PathOutvictim_model=OpenFlamingo2026.02 | 0.2318 | 0.4577 | 0.2911 | 0.288 | 0.243 | 0.3023 | 70.9 | |
| Schlarmann and Heinvictim_model=OpenFlamingo2026.02 | 0.2272 | 0.4544 | 0.2887 | 0.2835 | 0.2411 | 0.299 | 59.4 | |
| PNAvictim_model=OpenFlamingo2026.02 | 0.2118 | 0.4367 | 0.2672 | 0.2654 | 0.2145 | 0.2791 | 53.4 | |
| TGRvictim_model=OpenFlamingo2026.02 | 0.1615 | 0.3878 | 0.2116 | 0.21 | 0.1501 | 0.2242 | 95 | |
| Cui et al.victim_model=OpenFlamingo2026.02 | 0.1598 | 0.385 | 0.2108 | 0.2098 | 0.1501 | 0.2231 | 97 | |
| Attack-Bardvictim_model=OpenFlamingo2026.02 | 0.1469 | 0.3736 | 0.1941 | 0.1959 | 0.1274 | 0.2076 | 97.8 | |
| VT-Attackvictim_model=OpenFlamingo2026.02 | 0.1297 | 0.3568 | 0.1785 | 0.1799 | 0.1165 | 0.1923 | 99.8 | |
| SGMAvictim_model=OpenFlamingo2026.02 | 0.1263 | 0.3559 | 0.1765 | 0.1778 | 0.1129 | 0.1899 | 99.8 |