Jianda Mao

Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks