Image Retrieval on MSCOCO (test)
100R@1 Attack Success RateGLEAM
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| GLEAMSurrogate=ALBEF, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| SGASurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| DRASurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| SGASurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 100 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=TCL2026.06 | 99.99 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=ALBEF2026.06 | 99.97 | — | — | — | |
| SGASurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 99.97 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=ALBEF2026.06 | 99.96 | — | — | — | |
| DRASurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 99.92 | — | — | — | |
| SA-AETSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 99.92 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=ALBEF2026.06 | 99.91 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=TCL2026.06 | 99.67 | — | — | — | |
| PGDSurrogate=TCL, Target Model=TCL2026.06 | 98.67 | — | — | — | |
| Co-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 98.31 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=ALBEF2026.06 | 98.23 | — | — | — | |
| TMMSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 98.21 | — | — | — | |
| TMMSurrogate=TCL, Target Model=TCL2026.06 | 97.92 | — | — | — | |
| TMMSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 97.78 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=ALBEF2026.06 | 97.73 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=ALBEF2026.06 | 97.42 | — | — | — | |
| Co-AttackSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 96.39 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=ALBEF2026.06 | 96.09 | — | — | — | |
| DRASurrogate=TCL, Target Model=ALBEF2026.06 | 95.71 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=TCL2026.06 | 95.67 | — | — | — | |
| Co-AttackSurrogate=TCL, Target Model=TCL2026.06 | 95.22 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=TCL2026.06 | 94.9 | — | — | — | |
| PGDSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 94.59 | — | — | — | |
| SGASurrogate=TCL, Target Model=ALBEF2026.06 | 93.18 | — | — | — | |
| PGDSurrogate=ALBEF, Target Model=ALBEF2026.06 | 92.81 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 91.68 | — | — | — | |
| PGDSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 90.24 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=TCL2026.06 | 89.82 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 88.92 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=TCL2026.06 | 88.53 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 87.75 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 86.97 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=CLIPCNN2026.06 | 86.5 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 86.33 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 86.12 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=CLIPViT2026.06 | 85.54 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 83.98 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 81.12 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=CLIPCNN2026.06 | 80.92 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 80.31 | — | — | — | |
| TMMSurrogate=TCL, Target Model=CLIPCNN2026.06 | 80.21 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 80.02 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=CLIPViT2026.06 | 79.53 | — | — | — | |
| TMMSurrogate=TCL, Target Model=CLIPViT2026.06 | 78.98 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=CLIPViT2026.06 | 78.8 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 78.53 | — | — | — | |
| TMMSurrogate=TCL, Target Model=ALBEF2026.06 | 78.38 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 77.28 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=TCL2026.06 | 77.03 | — | — | — | |
| SA-AETSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 76.9 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 76.88 | — | — | — | |
| DRASurrogate=TCL, Target Model=CLIPCNN2026.06 | 76.82 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 76.78 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=CLIPCNN2026.06 | 76.11 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=CLIPViT2026.06 | 75.59 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 75.36 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 75.34 | — | — | — | |
| SGASurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 75.24 | — | — | — | |
| TMMSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 75.12 | — | — | — | |
| DRASurrogate=TCL, Target Model=CLIPViT2026.06 | 74.68 | — | — | — | |
| DRASurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 74.14 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=TCL2026.06 | 74.02 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=TCL2026.06 | 73.04 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=TCL2026.06 | 71.5 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 71.15 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 70.49 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=ALBEF2026.06 | 69.89 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=CLIPViT2026.06 | 69.88 | — | — | — | |
| TMMSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 68.12 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=TCL2026.06 | 67.75 | — | — | — | |
| SGASurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 67.59 | — | — | — | |
| SGASurrogate=TCL, Target Model=CLIPCNN2026.06 | 67.56 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 67.11 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 66.12 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=TCL2026.06 | 65.42 | — | — | — | |
| SGASurrogate=TCL, Target Model=CLIPViT2026.06 | 65.08 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 62.01 | — | — | — | |
| BERT-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 61.98 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=TCL2026.06 | 61.78 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=ALBEF2026.06 | 61.12 | — | — | — | |
| BERT-AttackSurrogate=TCL, Target Model=CLIPCNN2026.06 | 61.11 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=TCL2026.06 | 60.6 | — | — | — | |
| Co-AttackSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 60.24 | — | — | — | |
| Co-AttackSurrogate=TCL, Target Model=ALBEF2026.06 | 60.01 | — | — | — | |
| BERT-AttackSurrogate=TCL, Target Model=CLIPViT2026.06 | 58.49 | — | — | — | |
| Co-AttackSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 58.12 | — | — | — |