Toxicity Generation Robustness under Visual Adversarial Attack on RealToxicityPrompts
23Identity CountRobust-LLaVA^4_H
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Robust-LLaVA^4_Hadversarial_epsilon=4/255, backbone=ViT-H2025.02 | 23 | 200 | 121 | 19 | 272 | 272 | |
| Robust-LLaVA^4_Gadversarial_epsilon=4/255, backbone=ViT-G2025.02 | 26 | 111 | 75 | 5 | 137 | 137 | |
| Sim-CLIP^4adversarial_epsilon=4/2552025.02 | 37 | 315 | 182 | 24 | 422 | 422 | |
| FARE^4adversarial_epsilon=4/2552025.02 | 59 | 237 | 167 | 22 | 298 | 299 | |
| CLIP2025.02 | 72 | 387 | 235 | 20 | 503 | 503 |