Safety Evaluation on MI-FGSM-JailBreak
8.03ASRCARE
Evaluation results
| Method | Links | |
|---|---|---|
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 8.03 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 10.11 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 10.64 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 11.03 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 11.47 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 12.31 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 14.33 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 14.94 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 16.67 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 19.36 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 19.44 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 20.2 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 20.2 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 21.25 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 22.63 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 24.45 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 76.66 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 80.87 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 82.8 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 83.15 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 84.17 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 85.36 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 86.5 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 88.6 |