Targeted Adversarial Attack on COCO
100Attack Success RateCLIP
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CLIPl_inf perturbation budget (epsilon)=2/2552025.02 | 100 | 0 | |
| CLIPl_inf perturbation budget (epsilon)=4/2552025.02 | 100 | 0 | |
| CLIPl_inf perturbation budget (epsilon)=8/2552025.02 | 100 | 0 | |
| FARE4l_inf perturbation budget (epsilon)=8/2552025.02 | 12 | 53.9 | |
| Sim-CLIP4l_inf perturbation budget (epsilon)=8/2552025.02 | 2.67 | 71.7 | |
| FARE4l_inf perturbation budget (epsilon)=2/2552025.02 | 0 | 93.7 | |
| FARE4l_inf perturbation budget (epsilon)=4/2552025.02 | 0 | 84.1 | |
| Sim-CLIP4l_inf perturbation budget (epsilon)=2/2552025.02 | 0 | 102.1 | |
| Sim-CLIP4l_inf perturbation budget (epsilon)=4/2552025.02 | 0 | 84.5 | |
| Robust-LLaVA4_Gl_inf perturbation budget (epsilon)=2/2552025.02 | 0 | 116.3 | |
| Robust-LLaVA4_Gl_inf perturbation budget (epsilon)=4/2552025.02 | 0 | 109.68 | |
| Robust-LLaVA4_Gl_inf perturbation budget (epsilon)=8/2552025.02 | 0 | 109.58 |