Retrieval Hijacking on Sample100 1.0 (test)
97.43T@1Gaussian Blur
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| Gaussian BlurRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 97.43 | 99.86 | 0.43 | 0.71 | |
| Gaussian BlurRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 94 | 99.71 | 0.43 | 0.86 | |
| CloudWebRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 89.86 | 99.71 | 29.14 | 43.29 | |
| Gaussian BlurRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 86.43 | 99.29 | 0.29 | 0.57 | |
| Gaussian BlurRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 85.86 | 99.43 | 0.29 | 0.57 | |
| Gaussian BlurRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 83.14 | 99.71 | 1.14 | 1.57 | |
| CloudWebRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 83 | 99 | 7 | 12.86 | |
| CloudWebRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 81.86 | 99.29 | 25.14 | 39.29 | |
| CloudWebRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 81.14 | 98.14 | 5.86 | 8.57 | |
| CloudWebRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 80.86 | 99.29 | 13 | 19.86 | |
| Fixed CloudWebRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 80.43 | 97.43 | 3.86 | 6.43 | |
| Fixed CloudWebRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 80.29 | 98 | 10 | 16.43 | |
| Fixed CloudWebRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 79.43 | 98.86 | 7 | 11.29 | |
| Fixed CloudWebRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 78.43 | 98.14 | 14.86 | 22.14 | |
| Fixed CloudWebRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 76.57 | 98.57 | 4.86 | 9.71 | |
| Random Noise CloudRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 70.71 | 97 | 10.43 | 15.29 | |
| Random Noise CloudRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 70 | 95.29 | 1 | 1.14 | |
| Random Noise CloudRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 68.29 | 95.57 | 2.43 | 4.29 | |
| Random Noise CloudRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 66.57 | 93.29 | 3.29 | 5.57 | |
| Random Noise CloudRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 63 | 95.14 | 1.43 | 3.57 | |
| Brightness HazeRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 60.29 | 91.71 | 0.86 | 1 | |
| Brightness HazeRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 43.43 | 83.86 | 1 | 1.14 | |
| Brightness HazeRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 39.86 | 83.86 | 0.43 | 1.14 | |
| Brightness HazeRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 36 | 82.86 | 0.29 | 0.71 | |
| Brightness HazeRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 33.29 | 76.71 | 0.57 | 1.14 | |
| CleanRetriever Model=GeoRSCLIP, Architecture=ViT-B/322026.05 | 0 | 0 | 0.57 | 0.71 | |
| CleanRetriever Model=RemoteCLIP, Architecture=ViT-B/322026.05 | 0 | 0 | 0.86 | 0.86 | |
| CleanRetriever Model=OpenAI CLIP, Architecture=ViT-B/322026.05 | 0 | 0 | 0.43 | 0.86 | |
| CleanRetriever Model=OpenAI CLIP, Architecture=ViT-L/142026.05 | 0 | 0 | 0.57 | 0.86 | |
| CleanRetriever Model=OpenCLIP, Architecture=ViT-B/322026.05 | 0 | 0 | 0.14 | 0.43 |