Target Response Induction on VLGuard
0.1ASRVMA
Evaluation Results
| Method | Links | |
|---|---|---|
| VMATarget Model=InternVL-2.5, Query Condition=Irrel.2026.05 | 0.1 | |
| VMATarget Model=Deepseek-VL, Query Condition=Irrel.2026.05 | 0.1 | |
| VMATarget Model=Qwen2.5-VL, Query Condition=Irrel.2026.05 | 0.3 | |
| MIMTarget Model=InternVL-2.5, Query Condition=Irrel.2026.05 | 0.9 | |
| PGDTarget Model=Qwen2.5-VL, Query Condition=Irrel.2026.05 | 1.6 | |
| MIMTarget Model=Qwen2.5-VL, Query Condition=Irrel.2026.05 | 2.6 | |
| PGDTarget Model=InternVL-2.5, Query Condition=Irrel.2026.05 | 3.5 | |
| VMATarget Model=InternVL-2.5, Query Condition=Sim.2026.05 | 3.5 | |
| VMATarget Model=LLaVA-1.5, Query Condition=Irrel.2026.05 | 8.6 | |
| MIMTarget Model=Qwen2.5-VL, Query Condition=Sim.2026.05 | 9.3 | |
| PGDTarget Model=Qwen2.5-VL, Query Condition=Sim.2026.05 | 12.2 | |
| VMATarget Model=Qwen2.5-VL, Query Condition=Sim.2026.05 | 15 | |
| MIMTarget Model=LLaVA-1.5, Query Condition=Irrel.2026.05 | 15.8 | |
| MIMTarget Model=Deepseek-VL, Query Condition=Irrel.2026.05 | 18.6 | |
| VMATarget Model=Deepseek-VL, Query Condition=Sim.2026.05 | 19.2 | |
| MIMTarget Model=InternVL-2.5, Query Condition=Sim.2026.05 | 19.8 | |
| MIMTarget Model=Qwen2.5-VL, Query Condition=Exact2026.05 | 21.6 | |
| PGDTarget Model=LLaVA-1.5, Query Condition=Irrel.2026.05 | 23.8 | |
| PGDTarget Model=Qwen2.5-VL, Query Condition=Exact2026.05 | 26.8 | |
| PGDTarget Model=Deepseek-VL, Query Condition=Irrel.2026.05 | 29.6 | |
| PGDTarget Model=InternVL-2.5, Query Condition=Sim.2026.05 | 34.1 | |
| MIMTarget Model=LLaVA-1.5, Query Condition=Sim.2026.05 | 46.4 | |
| VMATarget Model=LLaVA-1.5, Query Condition=Sim.2026.05 | 51.2 | |
| PGDTarget Model=LLaVA-1.5, Query Condition=Sim.2026.05 | 52 | |
| Attention HijackingTarget Model=Deepseek-VL, Query Condition=Irrel.2026.05 | 64.5 | |
| Attention HijackingTarget Model=Qwen2.5-VL, Query Condition=Irrel.2026.05 | 66.2 | |
| Attention HijackingTarget Model=LLaVA-1.5, Query Condition=Irrel.2026.05 | 67.4 | |
| MIMTarget Model=LLaVA-1.5, Query Condition=Exact2026.05 | 68 | |
| PGDTarget Model=LLaVA-1.5, Query Condition=Exact2026.05 | 69.2 | |
| MIMTarget Model=Deepseek-VL, Query Condition=Sim.2026.05 | 74.8 | |
| Attention HijackingTarget Model=Qwen2.5-VL, Query Condition=Sim.2026.05 | 79 | |
| PGDTarget Model=Deepseek-VL, Query Condition=Sim.2026.05 | 83.1 | |
| VMATarget Model=Qwen2.5-VL, Query Condition=Exact2026.05 | 85.6 | |
| Attention HijackingTarget Model=LLaVA-1.5, Query Condition=Sim.2026.05 | 86 | |
| Attention HijackingTarget Model=Qwen2.5-VL, Query Condition=Exact2026.05 | 88 | |
| Attention HijackingTarget Model=Deepseek-VL, Query Condition=Sim.2026.05 | 89 | |
| PGDTarget Model=InternVL-2.5, Query Condition=Exact2026.05 | 92.8 | |
| VMATarget Model=InternVL-2.5, Query Condition=Exact2026.05 | 94.4 | |
| Attention HijackingTarget Model=InternVL-2.5, Query Condition=Irrel.2026.05 | 95.7 | |
| MIMTarget Model=Deepseek-VL, Query Condition=Exact2026.05 | 96 | |
| PGDTarget Model=Deepseek-VL, Query Condition=Exact2026.05 | 96.4 | |
| MIMTarget Model=InternVL-2.5, Query Condition=Exact2026.05 | 96.4 | |
| Attention HijackingTarget Model=InternVL-2.5, Query Condition=Sim.2026.05 | 97.1 | |
| Attention HijackingTarget Model=InternVL-2.5, Query Condition=Exact2026.05 | 97.8 | |
| VMATarget Model=Deepseek-VL, Query Condition=Exact2026.05 | 98 | |
| Attention HijackingTarget Model=LLaVA-1.5, Query Condition=Exact2026.05 | 98 | |
| Attention HijackingTarget Model=Deepseek-VL, Query Condition=Exact2026.05 | 98 | |
| VMATarget Model=LLaVA-1.5, Query Condition=Exact2026.05 | 98.8 |