Visual Question Answering on VQA v2 (ASR and CU)
100ASRNo defense
Evaluation results
| Method | Links | ||
|---|---|---|---|
| No defenseAttack=BadNet2026.03 | 100 | 62.89 | |
| No defenseAttack=Blended2026.03 | 100 | 67.06 | |
| No defenseAttack=WaNet2026.03 | 100 | 68.1 | |
| No defenseAttack=TrojVLM2026.03 | 100 | 68.36 | |
| No defenseAttack=VLOOD2026.03 | 100 | 53.65 | |
| BlurAttack=BadNet2026.03 | 100 | 58.98 | |
| BlurAttack=Blended2026.03 | 100 | 41.02 | |
| BlurAttack=TrojVLM2026.03 | 100 | 67.71 | |
| BlurAttack=VLOOD2026.03 | 100 | 67.32 | |
| ST defenseAttack=ISSBA2026.03 | 100 | 9.38 | |
| BDMAEAttack=Blended2026.03 | 100 | 26.82 | |
| BDMAEAttack=ISSBA2026.03 | 100 | 36.46 | |
| SampDetoxAttack=VLOOD2026.03 | 99.61 | 67.58 | |
| BlurAttack=WaNet2026.03 | 99.22 | 27.47 | |
| BDMAEAttack=WaNet2026.03 | 99.22 | 5.73 | |
| No defenseAttack=ISSBA2026.03 | 98.83 | 65.49 | |
| SampDetoxAttack=Blended2026.03 | 98.83 | 64.97 | |
| BlurAttack=ISSBA2026.03 | 98.44 | 61.46 | |
| SampDetoxAttack=TrojVLM2026.03 | 98.44 | 68.36 | |
| SampDetoxAttack=ISSBA2026.03 | 98.05 | 60.81 | |
| ST defenseAttack=Blended2026.03 | 97.66 | 55.08 | |
| SampDetoxAttack=WaNet2026.03 | 95.31 | 63.02 | |
| ZIPAttack=VLOOD2026.03 | 95.31 | 63.15 | |
| SampDetoxAttack=BadNet2026.03 | 94.53 | 61.59 | |
| ST defenseAttack=VLOOD2026.03 | 93.36 | 63.02 | |
| ST defenseAttack=WaNet2026.03 | 92.58 | 12.24 | |
| ST defenseAttack=TrojVLM2026.03 | 89.84 | 62.76 | |
| BDMAEAttack=BadNet2026.03 | 88.28 | 29.3 | |
| BDMAEAttack=VLOOD2026.03 | 86.33 | 61.2 | |
| ZIPAttack=TrojVLM2026.03 | 85.94 | 66.15 | |
| ZIPAttack=Blended2026.03 | 84.77 | 64.06 | |
| ST defenseAttack=BadNet2026.03 | 82.81 | 56.51 | |
| BDMAEAttack=TrojVLM2026.03 | 80.86 | 62.5 | |
| ZIPAttack=BadNet2026.03 | 80.47 | 59.38 | |
| ZIPAttack=ISSBA2026.03 | 74.22 | 65.49 | |
| ZIPAttack=WaNet2026.03 | 7.03 | 66.15 | |
| CleanSightAttack=TrojVLM2026.03 | 3.14 | 65.46 | |
| CleanSightAttack=BadNet2026.03 | 0 | 62.63 | |
| CleanSightAttack=Blended2026.03 | 0 | 68.36 | |
| CleanSightAttack=ISSBA2026.03 | 0 | 63.02 | |
| CleanSightAttack=WaNet2026.03 | 0 | 68.1 | |
| CleanSightAttack=VLOOD2026.03 | 0 | 64.97 |