Visual Question Answering on OKVQA (ASR, CU)
100ASRNo defense
Evaluation results
| Method | Links | ||
|---|---|---|---|
| No defenseAttack=BadNet2026.03 | 100 | 61.07 | |
| No defenseAttack=Blended2026.03 | 100 | 57.55 | |
| No defenseAttack=TrojVLM2026.03 | 100 | 52.67 | |
| No defenseAttack=VLOOD2026.03 | 100 | 66.54 | |
| BlurAttack=BadNet2026.03 | 100 | 52.73 | |
| BlurAttack=Blended2026.03 | 100 | 58.2 | |
| BlurAttack=TrojVLM2026.03 | 100 | 48.18 | |
| BlurAttack=VLOOD2026.03 | 100 | 57.29 | |
| SampDetoxAttack=Blended2026.03 | 100 | 54.56 | |
| No defenseAttack=WaNet2026.03 | 99.61 | 61.98 | |
| BDMAEAttack=WaNet2026.03 | 99.61 | 35.81 | |
| No defenseAttack=ISSBA2026.03 | 99.22 | 57.55 | |
| BlurAttack=WaNet2026.03 | 99.22 | 50.13 | |
| ZIPAttack=Blended2026.03 | 99.22 | 52.6 | |
| BlurAttack=ISSBA2026.03 | 98.83 | 57.42 | |
| BDMAEAttack=Blended2026.03 | 98.83 | 52.47 | |
| BDMAEAttack=ISSBA2026.03 | 98.83 | 52.34 | |
| ST defenseAttack=Blended2026.03 | 98.05 | 52.6 | |
| SampDetoxAttack=WaNet2026.03 | 95.7 | 49.87 | |
| SampDetoxAttack=ISSBA2026.03 | 93.75 | 56.12 | |
| SampDetoxAttack=BadNet2026.03 | 91.8 | 55.73 | |
| SampDetoxAttack=VLOOD2026.03 | 91.02 | 22.27 | |
| SampDetoxAttack=TrojVLM2026.03 | 89.84 | 16.15 | |
| ST defenseAttack=BadNet2026.03 | 85.55 | 56.38 | |
| ZIPAttack=BadNet2026.03 | 85.16 | 54.17 | |
| ST defenseAttack=VLOOD2026.03 | 82.42 | 54.95 | |
| ZIPAttack=VLOOD2026.03 | 81.25 | 20.7 | |
| ZIPAttack=TrojVLM2026.03 | 80.47 | 16.02 | |
| BDMAEAttack=BadNet2026.03 | 79.3 | 50.26 | |
| ST defenseAttack=TrojVLM2026.03 | 77.73 | 48.96 | |
| BDMAEAttack=TrojVLM2026.03 | 67.97 | 45.7 | |
| ST defenseAttack=ISSBA2026.03 | 67.19 | 32.55 | |
| BDMAEAttack=VLOOD2026.03 | 65.23 | 55.08 | |
| ZIPAttack=ISSBA2026.03 | 55.08 | 54.17 | |
| ST defenseAttack=WaNet2026.03 | 53.91 | 54.95 | |
| CleanSightAttack=TrojVLM2026.03 | 4.74 | 48.66 | |
| ZIPAttack=WaNet2026.03 | 3.91 | 51.95 | |
| CleanSightAttack=Blended2026.03 | 2.73 | 57.81 | |
| CleanSightAttack=BadNet2026.03 | 0 | 56.9 | |
| CleanSightAttack=ISSBA2026.03 | 0 | 57.94 | |
| CleanSightAttack=WaNet2026.03 | 0 | 55.86 | |
| CleanSightAttack=VLOOD2026.03 | 0 | 53.26 |