Multimodal Adversarial Attack on HADES
91.33Success Rate (Animal)CS-DJ
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| CS-DJVictim Model=Qwen3-VL-30B-A3B2026.01 | 91.33 | 88 | 81.33 | 56.67 | 94 | 82.27 | |
| Text-DJVictim Model=Qwen3-VL-30B-A3B2026.01 | 91.33 | 88 | 86 | 57.33 | 90 | 82.53 | |
| Text-DJVictim Model=Qwen3-VL-8B2026.01 | 90 | 90 | 88.67 | 51.33 | 90.67 | 82.13 | |
| CS-DJVictim Model=Qwen3-VL-8B2026.01 | 87.33 | 83.33 | 71.33 | 50.67 | 76.67 | 73.87 | |
| Text-DJVictim Model=Qwen3-VL-4B2026.01 | 82.67 | 85.33 | 77.33 | 47.33 | 80.67 | 74.67 | |
| CS-DJVictim Model=Qwen3-VL-4B2026.01 | 82 | 76.67 | 74.67 | 44.67 | 72.67 | 70.13 |