# Transferable Adversarial Attack on Llama 11B-V 3.2 Source: [Transferable Adversarial Attack on Llama 11B-V 3.2]() Collection index: [llms.txt]() Data updated: 2026-05-22T07:12:09.983Z Evaluation of the effectiveness of transferable adversarial attacks against the Llama 11B-V 3.2 model, measured by Attack Success Rate (ASR) and Average Similarity (AvgSim). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Transferable Adversarial Attack | | Dataset (including any stated split) | Llama 11B-V 3.2 | | Metric | Attack Success Rate (ASR) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 16 of 16 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Attack Success Rate (ASR)](): Higher is better; unit: PERCENT. - [Average Similarity (AvgSim)](): Higher is better; unit: SCALAR. ## Recorded results | Method | Attack Success Rate (ASR) | Result date | Report paper | | --- | --- | --- | --- | | FRA-Attack | 57.3 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | M-Attack-V2 | 52.3 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | FOA-Attack | 41.7 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | M-Attack | 36.8 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | FRA-Attack | 4.8 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | M-Attack-V2 | 3.4 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | M-Attack | 2.7 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | FOA-Attack | 1.9 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AttackVLM | 1 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AdvDiffVLM | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | SSA-CWA | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AnyAttack | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AttackVLM | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AdvDiffVLM | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | SSA-CWA | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | | AnyAttack | 0 | Not recorded | 6a0fe2e2f984739ed6739ba4 | ### FRA-Attack Attack Success Rate (ASR): 57.3. Result ID: 6a1001c8fbc373592c087905. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### M-Attack-V2 Attack Success Rate (ASR): 52.3. Result ID: 6a1001c8fbc373592c087904. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### FOA-Attack Attack Success Rate (ASR): 41.7. Result ID: 6a1001c8fbc373592c087903. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### M-Attack Attack Success Rate (ASR): 36.8. Result ID: 6a1001c8fbc373592c087902. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### FRA-Attack Attack Success Rate (ASR): 4.8. Result ID: 6a1001c8fbc373592c087965. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### M-Attack-V2 Attack Success Rate (ASR): 3.4. Result ID: 6a1001c8fbc373592c087964. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### M-Attack Attack Success Rate (ASR): 2.7. Result ID: 6a1001c8fbc373592c087962. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### FOA-Attack Attack Success Rate (ASR): 1.9. Result ID: 6a1001c8fbc373592c087963. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### AttackVLM Attack Success Rate (ASR): 1. Result ID: 6a1001c8fbc373592c0878fe. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### AdvDiffVLM Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c0878ff. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### SSA-CWA Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c087900. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### AnyAttack Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c087901. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### AttackVLM Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c08795e. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### AdvDiffVLM Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c08795f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### SSA-CWA Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c087960. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. ### AnyAttack Attack Success Rate (ASR): 0. Result ID: 6a1001c8fbc373592c087961. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Similarity Threshold":"0.9"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.