Safety Evaluation on MI-FGSM-Toxic
9.13ASRCARE
Evaluation results
| Method | Links | |
|---|---|---|
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 9.13 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 9.97 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 9.98 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 10.37 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 10.43 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 11.56 | |
| CAREModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 12.15 | |
| CAREModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 13.34 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 15.54 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 18.29 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 18.78 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 18.97 | |
| ASTRAModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 19.36 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 19.86 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 20.1 | |
| ASTRAModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 23.41 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=16/2552026.03 | 72.17 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=32/2552026.03 | 77.3 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=64/2552026.03 | 79.63 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=16/2552026.03 | 80.66 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=32/2552026.03 | 82.18 | |
| Original modelModel=Qwen2.5VL, Perturbation radius (κ)=unconstrain2026.03 | 82.78 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=64/2552026.03 | 82.8 | |
| Original modelModel=LLaVA-OneVision, Perturbation radius (κ)=unconstrain2026.03 | 83.64 |