Targeted Adversarial Attack (Victim: GPT-4o) on NIPS 2017
86.5ASRTargeted to GPT-4o
Evaluation Results
| Method | Links | |
|---|---|---|
| Targeted to GPT-4oAttack budget (ε)=8/255, Surrogate models=ViT-H (DNF), ViT-SO400M (SigLIP), ViT-H (DataComp-1B)2026.06 | 86.5 | |
| Baseline (Eq. 13)Attack budget (ε)=8/255, Surrogate models=ViT-H (DNF), ViT-SO400M (SigLIP), ViT-H (DataComp-1B)2026.06 | 78.5 | |
| Targeted to Claude 3.7Attack budget (ε)=8/255, Surrogate models=ViT-H (DNF), ViT-SO400M (SigLIP), ViT-H (DataComp-1B)2026.06 | 62.5 | |
| SSA-CWAAttack budget (ε)=8/255, Surrogate models=ViT-H (DNF), ViT-SO400M (SigLIP), ViT-H (DataComp-1B)2026.06 | 42.3 | |
| AnyAttackAttack budget (ε)=8/255, Surrogate models=ViT-H (DNF), ViT-SO400M (SigLIP), ViT-H (DataComp-1B)2026.06 | 36.3 |