Jailbreak Attack on VLM Jailbreak Dataset (5,040 text-image pairs) (sample (10%))
56.15ASRSalami
Evaluation results
| Method | Links | |
|---|---|---|
| SalamiTarget Model=Qwen-VL-Max, Shots=102026.04 | 56.15 | |
| SalamiTarget Model=GPT-4o, Shots=102026.04 | 55.56 | |
| SI-AttackTarget Model=Qwen-VL-Max, Query Budget=10-interaction2026.04 | 55.15 | |
| FigStepTarget Model=Qwen-VL-Max2026.04 | 54.96 | |
| SI-AttackTarget Model=GPT-4o, Query Budget=10-interaction2026.04 | 52.17 | |
| FigStepTarget Model=GPT-4o2026.04 | 36.31 | |
| w/o AttackTarget Model=Qwen-VL-Max2026.04 | 13.29 | |
| w/o AttackTarget Model=GPT-4o2026.04 | 10.71 |