Targeted Adversarial Attack on Flickr30K 1,000 images (test)
24.78Attack Success Rate (ASR)MPCAttack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| MPCAttackVictim Model=GPT-52026.03 | 24.78 | 27.56 | |
| MPCAttackVictim Model=GPT-4o2026.03 | 23.22 | 26.74 | |
| MPCAttackVictim Model=Average2026.03 | 19.09 | 23.23 | |
| MPCAttackVictim Model=Claude-3.52026.03 | 15.46 | 20.17 | |
| MPCAttackVictim Model=Gemini-2.02026.03 | 12.9 | 18.44 | |
| FOA-AttackVictim Model=Claude-3.52026.03 | 11.7 | 16.86 | |
| FOA-AttackVictim Model=GPT-52026.03 | 11.66 | 18.55 | |
| FOA-AttackVictim Model=GPT-4o2026.03 | 10.22 | 17.17 | |
| M-AttackVictim Model=GPT-52026.03 | 9.82 | 16.78 | |
| FOA-AttackVictim Model=Average2026.03 | 9.78 | 16.23 | |
| M-AttackVictim Model=GPT-4o2026.03 | 9.72 | 16.67 | |
| M-AttackVictim Model=Claude-3.52026.03 | 8.88 | 15.28 | |
| M-AttackVictim Model=Average2026.03 | 8.35 | 15.21 | |
| FOA-AttackVictim Model=Gemini-2.02026.03 | 5.54 | 12.32 | |
| M-AttackVictim Model=Gemini-2.02026.03 | 5 | 12.09 | |
| CoAVictim Model=Gemini-2.02026.03 | 1.92 | 8.1 | |
| CoAVictim Model=GPT-52026.03 | 1.86 | 8.09 | |
| CoAVictim Model=GPT-4o2026.03 | 1.84 | 8.01 | |
| CoAVictim Model=Average2026.03 | 1.8 | 7.87 | |
| AnyAttackVictim Model=Claude-3.52026.03 | 1.78 | 6.71 | |
| AnyAttackVictim Model=Gemini-2.02026.03 | 1.6 | 7.66 | |
| CoAVictim Model=Claude-3.52026.03 | 1.58 | 7.26 | |
| AnyAttackVictim Model=Average2026.03 | 1.51 | 7.39 | |
| AnyAttackVictim Model=GPT-4o2026.03 | 1.36 | 7.64 | |
| AnyAttackVictim Model=GPT-52026.03 | 1.28 | 7.57 |