Targeted Adversarial Attack on Cross-query Transferability Sim.
97.1Attack Success Rate (ASR)Attention Hijacking
Evaluation results
| Method | Links | |
|---|---|---|
| Attention HijackingTarget Model=InternVL-2.52026.05 | 97.1 | |
| Attention HijackingTarget Model=LLaVA-1.52026.05 | 86 | |
| Attention HijackingTarget Model=Qwen2.5-VL2026.05 | 79 | |
| PGDTarget Model=LLaVA-1.52026.05 | 52 | |
| VMATarget Model=LLaVA-1.52026.05 | 51.2 | |
| MIMTarget Model=LLaVA-1.52026.05 | 46.4 | |
| PGDTarget Model=InternVL-2.52026.05 | 34.1 | |
| MIMTarget Model=InternVL-2.52026.05 | 19.8 | |
| VMATarget Model=Qwen2.5-VL2026.05 | 15 | |
| PGDTarget Model=Qwen2.5-VL2026.05 | 12.2 | |
| MIMTarget Model=Qwen2.5-VL2026.05 | 9.3 | |
| VMATarget Model=InternVL-2.52026.05 | 3.5 |