Targeted Adversarial Attack on Flickr30K
46.3ASRMPCAttack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| MPCAttackVictim Model=LLaVa-1.5-7B2026.03 | 46.3 | 0.4174 | |
| MPCAttackVictim Model=GLM-4.1V-9B-Thinking2026.03 | 33.38 | 0.3364 | |
| MPCAttackVictim Model=InternVL3-8B2026.03 | 33.24 | 0.3338 | |
| MPCAttackVictim Model=Average2026.03 | 29.54 | 0.3026 | |
| FOA-AttackVictim Model=LLaVa-1.5-7B2026.03 | 28.28 | 0.3191 | |
| M-AttackVictim Model=LLaVa-1.5-7B2026.03 | 25.66 | 0.3028 | |
| FOA-AttackVictim Model=Average2026.03 | 15.41 | 0.2126 | |
| FOA-AttackVictim Model=GLM-4.1V-9B-Thinking2026.03 | 15.38 | 0.2198 | |
| FOA-AttackVictim Model=InternVL3-8B2026.03 | 14.34 | 0.2042 | |
| M-AttackVictim Model=Average2026.03 | 14.08 | 0.2009 | |
| M-AttackVictim Model=InternVL3-8B2026.03 | 13.8 | 0.1915 | |
| M-AttackVictim Model=GLM-4.1V-9B-Thinking2026.03 | 13.36 | 0.2048 | |
| MPCAttackVictim Model=Qwen2.5-VL-7B2026.03 | 5.24 | 0.1228 | |
| FOA-AttackVictim Model=Qwen2.5-VL-7B2026.03 | 3.62 | 0.1071 | |
| M-AttackVictim Model=Qwen2.5-VL-7B2026.03 | 3.48 | 0.1046 | |
| CoAVictim Model=LLaVa-1.5-7B2026.03 | 2.14 | 0.0876 | |
| CoAVictim Model=InternVL3-8B2026.03 | 2.04 | 0.0879 | |
| AnyAttackVictim Model=GLM-4.1V-9B-Thinking2026.03 | 1.98 | 0.088 | |
| CoAVictim Model=Average2026.03 | 1.87 | 0.087 | |
| AnyAttackVictim Model=InternVL3-8B2026.03 | 1.76 | 0.0765 | |
| AnyAttackVictim Model=Average2026.03 | 1.72 | 0.0821 | |
| CoAVictim Model=GLM-4.1V-9B-Thinking2026.03 | 1.68 | 0.0897 | |
| AnyAttackVictim Model=Qwen2.5-VL-7B2026.03 | 1.62 | 0.083 | |
| CoAVictim Model=Qwen2.5-VL-7B2026.03 | 1.6 | 0.0828 | |
| AnyAttackVictim Model=LLaVa-1.5-7B2026.03 | 1.52 | 0.081 |