Top-1 White-box Attack on NQ (test)
55.7ASRHotFlip-based
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| HotFlip-basedTarget Model=SimLM2025.04 | 55.7 | 77.3 | 81.7 | 2.5 | 98.3 | 83 | 8,021.7 | 588.3 | |
| OursTarget Model=SimLM2025.04 | 41.7 | 49 | 70 | 9.9 | 94 | 79.3 | 231.2 | 127.5 | |
| Random TokenTarget Model=SimLM2025.04 | 17.7 | 21.7 | 40 | 34.8 | 94 | 59.7 | 2,889.4 | 0.1 | |
| Random NoiseTarget Model=SimLM2025.04 | 6.3 | 3 | 10 | 5.2 | 100 | 99.3 | 3,001.5 | 0.1 |