Inducing target response on VQA Exact v2
98.8ASRAttention Hijacking
Evaluation results
| Method | Links | |
|---|---|---|
| Attention HijackingTarget Model=Deepseek-VL2026.05 | 98.8 | |
| PGDTarget Model=Deepseek-VL2026.05 | 98.2 | |
| MIMTarget Model=Deepseek-VL2026.05 | 98.2 | |
| Attention HijackingTarget Model=InternVL-2.52026.05 | 96.8 | |
| VMATarget Model=Deepseek-VL2026.05 | 94 | |
| Attention HijackingTarget Model=LLaVA-1.52026.05 | 93 | |
| PGDTarget Model=InternVL-2.52026.05 | 92 | |
| VMATarget Model=LLaVA-1.52026.05 | 92 | |
| Attention HijackingTarget Model=Qwen2.5-VL2026.05 | 92 | |
| MIMTarget Model=InternVL-2.52026.05 | 89.8 | |
| PGDTarget Model=LLaVA-1.52026.05 | 66 | |
| MIMTarget Model=LLaVA-1.52026.05 | 54.2 | |
| VMATarget Model=InternVL-2.52026.05 | 44.6 | |
| MIMTarget Model=Qwen2.5-VL2026.05 | 43 | |
| PGDTarget Model=Qwen2.5-VL2026.05 | 38 | |
| VMATarget Model=Qwen2.5-VL2026.05 | 31 |