Overthinking Attack on Fixed image subset
0.94Slowdown Ratio (Attack/Clean)TP1
Evaluation Results
| Method | Links | |
|---|---|---|
| TP1Victim Model=Kimi-VL, Source=THINKTRAP2026.07 | 0.94 | |
| P1Victim Model=Kimi-VL, Source=OVERTHINK2026.07 | 0.95 | |
| TP4Victim Model=Kimi-VL, Source=THINKTRAP2026.07 | 0.95 | |
| TP3Victim Model=Kimi-VL, Source=THINKTRAP2026.07 | 0.96 | |
| TP2Victim Model=Kimi-VL, Source=THINKTRAP2026.07 | 0.97 | |
| TP2Victim Model=Gemma3, Source=THINKTRAP2026.07 | 0.97 | |
| TP4Victim Model=Gemma3, Source=THINKTRAP2026.07 | 0.98 | |
| TP1Victim Model=Gemma3, Source=THINKTRAP2026.07 | 0.99 | |
| TP3Victim Model=Gemma3, Source=THINKTRAP2026.07 | 0.99 | |
| P2Victim Model=Qwen3-VL, Source=OVERTHINK2026.07 | 1.02 | |
| P4Victim Model=Kimi-VL, Source=OVERTHINK2026.07 | 1.02 | |
| TP1Victim Model=Qwen3-VL, Source=THINKTRAP2026.07 | 1.02 | |
| TP3Victim Model=Qwen3-VL, Source=THINKTRAP2026.07 | 1.02 | |
| TP4Victim Model=Qwen3-VL, Source=THINKTRAP2026.07 | 1.02 | |
| P1Victim Model=Qwen3-VL, Source=OVERTHINK2026.07 | 1.03 | |
| P2Victim Model=Kimi-VL, Source=OVERTHINK2026.07 | 1.03 | |
| TP2Victim Model=Qwen3-VL, Source=THINKTRAP2026.07 | 1.03 | |
| P3Victim Model=Kimi-VL, Source=OVERTHINK2026.07 | 1.05 | |
| P4Victim Model=Qwen3-VL, Source=OVERTHINK2026.07 | 1.07 | |
| P3Victim Model=Qwen3-VL, Source=OVERTHINK2026.07 | 1.12 | |
| P4Victim Model=Gemma3, Source=OVERTHINK2026.07 | 2.42 | |
| P2Victim Model=Gemma3, Source=OVERTHINK2026.07 | 2.53 | |
| P1Victim Model=Gemma3, Source=OVERTHINK2026.07 | 2.93 | |
| Our workVictim Model=Qwen3-VL2026.07 | 3.52 | |
| P3Victim Model=Gemma3, Source=OVERTHINK2026.07 | 3.84 | |
| Our workVictim Model=Kimi-VL2026.07 | 4.54 | |
| Our workVictim Model=Gemma32026.07 | 16.75 |