Imperceptibility Evaluation on Black-Box LVLM Attack Set
0.03L1 DistanceM-Attack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| M-AttackModel=Ensemble2026.02 | 0.03 | 0.036 | |
| FOA-AttackModel=Ensemble2026.02 | 0.031 | 0.036 | |
| AttackVLMModel=B/162026.02 | 0.034 | 0.04 | |
| AttackVLMModel=Laion, Pre-trained on LAION=true2026.02 | 0.035 | 0.04 | |
| AttackVLMModel=B/322026.02 | 0.036 | 0.041 | |
| M-Attack-V2Model=Ensemble2026.02 | 0.038 | 0.044 | |
| AnyAttackModel=Ensemble2026.02 | 0.048 | 0.052 | |
| SSA-CWAModel=Ensemble2026.02 | 0.059 | 0.06 | |
| AdvDiffVLMModel=Ensemble2026.02 | 0.064 | 0.095 |