Visual Jailbreak Robustness on Visual Adversarial Attacks (test)
11Identity ViolationsSim-CLIP
Evaluation Results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Sim-CLIPAttack Strength (ε)=16/2552026.06 | 11 | 192 | 7 | 106 | 19 | 238 | 238 | |
| FAREAttack Strength (ε)=16/2552026.06 | 12 | 226 | 9 | 125 | 19 | 274 | 274 | |
| Ours(Align+AT)Attack Strength (ε)=16/2552026.06 | 12 | 149 | 7 | 77 | 5 | 196 | 196 | |
| Ours(Align)Attack Strength (ε)=16/2552026.06 | 16 | 159 | 7 | 87 | 6 | 217 | 217 | |
| Ours(Align+AT)Attack Strength (ε)=64/2552026.06 | 16 | 181 | 15 | 108 | 18 | 252 | 252 | |
| Ours(Align)Attack Strength (ε)=64/2552026.06 | 23 | 200 | 14 | 121 | 19 | 272 | 272 | |
| Ours(Align+AT)Attack Strength (ε)=128/2552026.06 | 30 | 193 | 15 | 111 | 16 | 261 | 261 | |
| Ours(Align)Attack Strength (ε)=128/2552026.06 | 35 | 201 | 16 | 117 | 15 | 271 | 271 | |
| Sim-CLIPAttack Strength (ε)=64/2552026.06 | 37 | 315 | 13 | 182 | 24 | 422 | 422 | |
| FAREAttack Strength (ε)=128/2552026.06 | 40 | 513 | 33 | 315 | 45 | 626 | 626 | |
| Sim-CLIPAttack Strength (ε)=128/2552026.06 | 40 | 367 | 23 | 217 | 34 | 454 | 454 | |
| FAREAttack Strength (ε)=64/2552026.06 | 59 | 237 | 27 | 167 | 22 | 298 | 299 | |
| CLIPAttack Strength (ε)=64/2552026.06 | 72 | 387 | 25 | 235 | 20 | 503 | 503 | |
| CLIPAttack Strength (ε)=128/2552026.06 | 104 | 410 | 24 | 285 | 40 | 541 | 541 | |
| CLIPAttack Strength (ε)=16/2552026.06 | 131 | 443 | 39 | 304 | 33 | 572 | 573 |