List your company
ResearchFormerly WizWand

Text Retrieval on MSCOCO (R@K)

100Recall@1HQA-VLAttack
39.378455.116770.85586.5933May 16, 2025Jul 10, 2025Sep 4, 2025Oct 29, 2025Dec 24, 2025Feb 17, 2026Apr 14, 2026
Updated 6mo ago

Evaluation results

MethodLinks
HQA-VLAttackSurrogate Model=CLIPViT, Victim Model=CLIPViT2026.04100——
HQA-VLAttackSurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.04100——
HQA-VLAttackSurrogate Model=ALBEF, Victim Model=ALBEF2026.0499.97——
HQA-VLAttackSurrogate Model=TCL, Victim Model=TCL2026.0499.97——
SGASurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0499.79——
DRASurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0499.66——
SGASurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0499.61——
DRASurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0499.51——
DRASurrogate Model=TCL, Victim Model=TCL2026.0498.99——
SGASurrogate Model=TCL, Victim Model=TCL2026.0498.97——
Co-AttackSurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0497.98——
SGASurrogate Model=ALBEF, Victim Model=ALBEF2026.0496.75——
Co-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0496.72——
DRASurrogate Model=ALBEF, Victim Model=ALBEF2026.0496.57——
HQA-VLAttackSurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0488.93——
Sep-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0488.72——
HQA-VLAttackSurrogate Model=ALBEF, Victim Model=TCL2026.0485.69——
Co-AttackSurrogate Model=TCL, Victim Model=TCL2026.0485.38——
HQA-VLAttackSurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0482.72——
Sep-AttackSurrogate Model=ALBEF, Victim Model=ALBEF2026.0482.6——
HQA-VLAttackSurrogate Model=TCL, Victim Model=ALBEF2026.0481.9——
Co-AttackSurrogate Model=ALBEF, Victim Model=ALBEF2026.0479.87——
FALCON#Images=4M, Evaluation Protocol=Fine-tuned2025.0578.79497
MAFA#Images=4M, Evaluation Protocol=Fine-tuned2025.057893.496.9
HQA-VLAttackSurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0477.52——
ALIGN#Images=1.2B, Evaluation Protocol=Fine-tuned2025.057793.596.9
PGDSurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0476.99——
PGDSurrogate Model=ALBEF, Victim Model=ALBEF2026.0476.7——
GRIT-VLP#Images=4M, Evaluation Protocol=Fine-tuned2025.0576.693.496.9
TCL#Images=4M, Evaluation Protocol=Fine-tuned2025.0575.692.896.7
HQA-VLAttackSurrogate Model=ALBEF, Victim Model=CLIPViT2026.0475.35——
FALCON#Images=4M, Evaluation Protocol=Zero-shot2025.0574.191.595.9
HQA-VLAttackSurrogate Model=TCL, Victim Model=CLIPCNN2026.0473.52——
ALBEF#Images=4M, Evaluation Protocol=Fine-tuned2025.0573.191.496
MAFA#Images=4M, Evaluation Protocol=Zero-shot2025.0572.691.395.6
TCL#Images=4M, Evaluation Protocol=Zero-shot2025.0571.490.895.4
HQA-VLAttackSurrogate Model=TCL, Victim Model=CLIPViT2026.0470.77——
Sep-AttackSurrogate Model=TCL, Victim Model=TCL2026.0470.32——
ALBEF#Images=4M, Evaluation Protocol=Zero-shot2025.0568.789.594.7
Sep-AttackSurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0468.52——
DRASurrogate Model=TCL, Victim Model=ALBEF2026.0468.06——
ImageBERT#Images=6M, Evaluation Protocol=Fine-tuned2025.0566.489.894.4
SGASurrogate Model=TCL, Victim Model=ALBEF2026.0465.93——
UNITER#Images=4M, Evaluation Protocol=Fine-tuned2025.0565.788.693.8
DRASurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0464.41——
DRASurrogate Model=TCL, Victim Model=CLIPCNN2026.0464.24——
UNITER#Images=4M, Evaluation Protocol=Zero-shot2025.0564.187.793.3
DRASurrogate Model=TCL, Victim Model=CLIPViT2026.0463.3——
DRASurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0462.32——
FALCONPre-trained on=MSCOCO2025.0562.2886.1892.3
DRASurrogate Model=ALBEF, Victim Model=CLIPViT2026.0461.69——
ViLT#Images=4M, Evaluation Protocol=Fine-tuned2025.0561.586.392.7
MAFAPre-trained on=MSCOCO2025.0560.9683.2489.62
DRASurrogate Model=ALBEF, Victim Model=TCL2026.0460.69——
GRIT-VLPPre-trained on=MSCOCO2025.0560.683.5289.14
DRASurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0459.6——
PGDSurrogate Model=TCL, Victim Model=TCL2026.0459.58——
SGASurrogate Model=TCL, Victim Model=CLIPCNN2026.0459.44——
Progressive-SofteningPre-trained on=MSCOCO2025.0559.0884.7691.74
SGASurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0458.95——
SGASurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0458.93——
q = 0.5Pre-trained on=MSCOCO2025.0558.884.1691.28
ALIGN#Images=1.2B, Evaluation Protocol=Zero-shot2025.0558.68389.7
SGASurrogate Model=ALBEF, Victim Model=TCL2026.0458.56——
Progressive-HardeningPre-trained on=MSCOCO2025.0558.384.5490.94
SGASurrogate Model=ALBEF, Victim Model=CLIPViT2026.0457.06——
SGASurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0456.62——
ViLT#Images=4M, Evaluation Protocol=Zero-shot2025.0556.582.689.6
SGASurrogate Model=TCL, Victim Model=CLIPViT2026.0456.34——
HQA-VLAttackSurrogate Model=CLIPViT, Victim Model=ALBEF2026.0456.05——
ALBEFPre-trained on=MSCOCO2025.0555.681.9290.1
Co-AttackSurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0455.08——
PGDSurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0454.79——
DiHTPre-trained on=MSCOCO2025.0554.7278.6484
SRCLPre-trained on=MSCOCO2025.0554.5279.2485.42
BERT-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPCNN2026.0454.43——
HQA-VLAttackSurrogate Model=CLIPViT, Victim Model=TCL2026.0454.1——
Co-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0453.1——
BERT-AttackSurrogate Model=TCL, Victim Model=CLIPCNN2026.0452.23——
HQA-VLAttackSurrogate Model=CLIPCNN, Victim Model=ALBEF2026.0452.2——
Co-AttackSurrogate Model=TCL, Victim Model=CLIPCNN2026.0452.13——
Sep-AttackSurrogate Model=TCL, Victim Model=CLIPCNN2026.0451.9——
Co-AttackSurrogate Model=TCL, Victim Model=CLIPViT2026.0451.62——
BERT-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0451.28——
HQA-VLAttackSurrogate Model=CLIPCNN, Victim Model=TCL2026.0451.11——
BERT-AttackSurrogate Model=TCL, Victim Model=CLIPViT2026.0451.09——
Sep-AttackSurrogate Model=TCL, Victim Model=CLIPViT2026.0450.74——
Sep-AttackSurrogate Model=CLIPCNN, Victim Model=CLIPViT2026.0450.44——
BERT-AttackSurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0447.73——
Co-AttackSurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0447.3——
Sep-AttackSurrogate Model=ALBEF, Victim Model=CLIPCNN2026.0446.96——
Co-AttackSurrogate Model=TCL, Victim Model=ALBEF2026.0446.08——
BERT-AttackSurrogate Model=CLIPViT, Victim Model=CLIPViT2026.0445.06——
BERT-AttackSurrogate Model=ALBEF, Victim Model=CLIPViT2026.0444.94——
Co-AttackSurrogate Model=ALBEF, Victim Model=CLIPViT2026.0444.89——
BERT-AttackSurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0444.54——
Sep-AttackSurrogate Model=ALBEF, Victim Model=CLIPViT2026.0444.03——
ImageBERT#Images=6M, Evaluation Protocol=Zero-shot2025.054471.280.4
Sep-AttackSurrogate Model=CLIPViT, Victim Model=CLIPCNN2026.0443.11——
Sep-AttackSurrogate Model=TCL, Victim Model=ALBEF2026.0441.71——