Text Retrieval on MSCOCO (test)
100Attack Success Rate @1SA-AET
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| SA-AETSurrogate=ALBEF, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=TCL2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=ALBEF2026.06 | 100 | — | — | — | |
| SGASurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| DRASurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=TCL2026.06 | 100 | — | — | — | |
| SGASurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 100 | — | — | — | |
| SA-AETSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 100 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 100 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 100 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=ALBEF2026.06 | 99.92 | — | — | — | |
| SGASurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 99.89 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=ALBEF2026.06 | 99.86 | — | — | — | |
| DRASurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 99.8 | — | — | — | |
| PGDSurrogate=TCL, Target Model=TCL2026.06 | 98.21 | — | — | — | |
| Co-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 97.64 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=ALBEF2026.06 | 97.62 | — | — | — | |
| TMMSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 97.27 | — | — | — | |
| TMMSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 97.1 | — | — | — | |
| TMMSurrogate=TCL, Target Model=TCL2026.06 | 97 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=ALBEF2026.06 | 96.79 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=TCL2026.06 | 96.15 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=ALBEF2026.06 | 95.49 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=ALBEF2026.06 | 95.3 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=TCL2026.06 | 95.21 | — | — | — | |
| DRASurrogate=TCL, Target Model=ALBEF2026.06 | 94.98 | — | — | — | |
| PGDSurrogate=ALBEF, Target Model=ALBEF2026.06 | 94.78 | — | — | — | |
| PGDSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 92.49 | — | — | — | |
| SGASurrogate=TCL, Target Model=ALBEF2026.06 | 92.46 | — | — | — | |
| Co-AttackSurrogate=TCL, Target Model=TCL2026.06 | 91.92 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 89.82 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=TCL2026.06 | 88.53 | — | — | — | |
| Co-AttackSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 88.52 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=TCL2026.06 | 87.09 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 86.32 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 85.23 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 84.12 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 83.9 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=CLIPCNN2026.06 | 83.86 | — | — | — | |
| DeBias-AttackSurrogate=TCL, Target Model=CLIPViT2026.06 | 82.91 | — | — | — | |
| PGDSurrogate=CLIPViT, Target Model=CLIPViT2026.06 | 82.58 | — | — | — | |
| DeBias-AttackSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 82.35 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 81.31 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 80.71 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=CLIPCNN2026.06 | 80.35 | — | — | — | |
| GLEAMSurrogate=TCL, Target Model=CLIPViT2026.06 | 80.24 | — | — | — | |
| GLEAMSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 77.59 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 76.81 | — | — | — | |
| SA-AETSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 76.44 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=CLIPViT2026.06 | 76.35 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=TCL2026.06 | 76.35 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 75.98 | — | — | — | |
| DeBias-AttackSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 75.77 | — | — | — | |
| SA-AETSurrogate=TCL, Target Model=CLIPCNN2026.06 | 75.71 | — | — | — | |
| SA-AETSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 73.67 | — | — | — | |
| TMMSurrogate=TCL, Target Model=ALBEF2026.06 | 73.62 | — | — | — | |
| TMMSurrogate=TCL, Target Model=CLIPCNN2026.06 | 73.27 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 70.97 | — | — | — | |
| TMMSurrogate=TCL, Target Model=CLIPViT2026.06 | 70.6 | — | — | — | |
| DRASurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 70.43 | — | — | — | |
| SGASurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 70.33 | — | — | — | |
| DRASurrogate=TCL, Target Model=CLIPViT2026.06 | 70.32 | — | — | — | |
| TMMSurrogate=CLIPViT, Target Model=CLIPCNN2026.06 | 70.27 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=TCL2026.06 | 70.19 | — | — | — | |
| DRASurrogate=TCL, Target Model=CLIPCNN2026.06 | 70.11 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=TCL2026.06 | 69.21 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=CLIPViT2026.06 | 69.02 | — | — | — | |
| TMMSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 68.37 | — | — | — | |
| DRASurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 68.31 | — | — | — | |
| DeBias-AttackSurrogate=CLIPCNN, Target Model=ALBEF2026.06 | 66.72 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=TCL2026.06 | 64.89 | — | — | — | |
| TMMSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 64.51 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 63.87 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 63.77 | — | — | — | |
| SGASurrogate=ALBEF, Target Model=CLIPViT2026.06 | 63.41 | — | — | — | |
| SGASurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 62.07 | — | — | — | |
| SGASurrogate=TCL, Target Model=CLIPCNN2026.06 | 60.39 | — | — | — | |
| SGASurrogate=TCL, Target Model=CLIPViT2026.06 | 59.46 | — | — | — | |
| GLEAMSurrogate=CLIPViT, Target Model=TCL2026.06 | 59.3 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=ALBEF2026.06 | 57.42 | — | — | — | |
| SA-AETSurrogate=CLIPViT, Target Model=TCL2026.06 | 57.3 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=CLIPCNN2026.06 | 56.41 | — | — | — | |
| Co-AttackSurrogate=ALBEF, Target Model=CLIPViT2026.06 | 55.62 | — | — | — | |
| BERT-AttackSurrogate=CLIPCNN, Target Model=CLIPCNN2026.06 | 54.29 | — | — | — | |
| Co-AttackSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 53.41 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=ALBEF2026.06 | 52.93 | — | — | — | |
| GLEAMSurrogate=CLIPCNN, Target Model=TCL2026.06 | 52.51 | — | — | — | |
| BERT-AttackSurrogate=TCL, Target Model=CLIPCNN2026.06 | 52.4 | — | — | — | |
| DRASurrogate=CLIPViT, Target Model=TCL2026.06 | 51.66 | — | — | — | |
| BERT-AttackSurrogate=TCL, Target Model=CLIPViT2026.06 | 51.37 | — | — | — | |
| BERT-AttackSurrogate=CLIPCNN, Target Model=CLIPViT2026.06 | 51.05 | — | — | — | |
| Co-AttackSurrogate=TCL, Target Model=ALBEF2026.06 | 50.09 | — | — | — |