Adversarial VQA: A New Benchmark for Evaluating the Robustness of VQA Models
Not on the map. Why?
Cited by 25 in Multimodal LLMs / vision-language models, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Benefiting from large-scale pre-training, we have witnessed significant performance boost on the popular Visual Question Answering (VQA) task. Despite rapid progress, it remains unclear whether these state-of-the-art (SOTA) models are robust when encountering examples in the wild. To study this, we introduce Adversarial VQA, a new large-scale VQA benchmark, collected iteratively via an adversarial human-and-model-in-the-loop procedure. Through this new benchmark, we discover several interesting findings. (i) Surprisingly, we find that during dataset collection, non-expert annotators can easily attack SOTA VQA models successfully. (ii) Both large-scale pre-trained models and adversarial training methods achieve far worse performance on the new benchmark than over standard VQA v2 dataset, revealing the fragility of these models while demonstrating the effectiveness of our adversarial dataset. (iii) When used for data augmentation, our dataset can effectively boost model performance on other robust VQA benchmarks. We hope our Adversarial VQA dataset can shed new light on robustness study in the community and serve as a valuable benchmark for future work.
Key facts. Cited by 74 papers in the map (data through 7 Oct 2026). Builds on 50 of its 57 references that are in the map. First posted on arXiv 1 Jun 2021.
Builds on
50 of 57 references.
References · 50
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2019ALBERT: A Lite BERT for Self-supervised Learning of Language Representationscited by 2,772
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2016Visual Genome: Connecting Language and Vision Using Crowdsourced Dense Image Annotationscited by 2,646
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2015VQA: Visual Question Answeringcited by 2,489
- 2019ViLBERT: Pretraining Task-Agnostic Visiolinguistic Representations for Vision-and-Language Taskscited by 2,219
- 2015A large annotated corpus for learning natural language inferencecited by 1,837
38 more
- 2019LXMERT: Learning Cross-Modality Encoder Representations from Transformerscited by 1,548
- 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,447
- 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,310
- 2014Deep Visual-Semantic Alignments for Generating Image Descriptionscited by 966
- 2019VL-BERT: Pre-training of Generic Visual-Linguistic Representationscited by 954
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2018Annotation Artifacts in Natural Language Inference Datacited by 656
- 2018From Recognition to Cognition: Visual Commonsense Reasoningcited by 553
- 2021Less is More: ClipBERT for Video-and-Language Learning via Sparse Samplingcited by 484
- 2019Deep Modular Co-Attention Networks for Visual Question Answeringcited by 338
- 2017Don't Just Assume; Look and Answer: Overcoming Priors for Visual Question Answeringcited by 337
- 2018SWAG: A Large-Scale Adversarial Dataset for Grounded Commonsense Inferencecited by 333
- 2020Large-Scale Adversarial Training for Vision-and-Language Representation Learningcited by 327
- 2018Hypothesis Only Baselines in Natural Language Inferencecited by 291
- 2020Pixel-BERT: Aligning Image Pixels with Text by Deep Multi-Modal Transformerscited by 288
- 2019Adversarial Examples Improve Image Recognitioncited by 283
- 2020In Defense of Grid Features for Visual Question Answeringcited by 155
- 2020Beat the AI: Investigating Adversarial Human Annotation for Reading Comprehensioncited by 131
- 2019Relation-Aware Graph Attention Network for Visual Question Answeringcited by 119
- 2018Dynamic Fusion with Intra- and Inter- Modality Attention Flow for Visual Question Answeringcited by 113
- 2021VinVL: Revisiting Visual Representations in Vision-Language Modelscited by 109
- 2019Towards Causal VQA: Revealing and Reducing Spurious Correlations by Invariant and Covariant Semantic Editingcited by 108
- 2019Cycle-Consistency for Robust Visual Question Answeringcited by 105
- 2020Behind the Scene: Revealing the Secrets of Pre-trained Vision-and-Language Modelscited by 90
- 2019GQA: A New Dataset for Real-World Visual Reasoning and Compositional Question Answeringcited by 77
- 2020On the Value of Out-of-Distribution Testing: An Example of Goodhart's Lawcited by 74
- 2020Roses Are Red, Violets Are Blue... but Should Vqa Expect Them To?cited by 69
- 2021UC2: Universal Cross-lingual Cross-modal Vision-and-Language Pre-trainingcited by 64
- 2018Pythia v0.1: the Winning Entry to the VQA Challenge 2018cited by 62
- 2020What is More Likely to Happen Next? Video-and-Language Future Event Predictioncited by 61
- 2019r/Fakeddit: A New Multimodal Benchmark Dataset for Fine-grained Fake News Detectioncited by 53
- 2020VQA-LOL: Visual Question Answering under the Lens of Logiccited by 48
- 2021LightningDOT: Pre-training Visual-Semantic Embeddings for Real-Time Image-Text Retrievalcited by 44
- 2020A Closer Look at the Robustness of Vision-and-Language Pre-trained Modelscited by 37
- 2020MoVie: Revisiting Modulated Convolutions for Visual Counting and Beyondcited by 11
- 2017Mastering the Dungeon: Grounded Language Learning by Mechanical Turker Descentcited by 10
- 2020SQuINTing at VQA Models: Introspecting VQA Models with Sub-Questionscited by 3
Built on by
Citing papers per year: 2021: 6; 2022: 15; 2023: 18; 2024: 11; 2025: 14; 2026: 10.
74 papers.
Sort:
By area:
- 2022Multimodal Learning with Transformers: A Surveycited by 399
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2022Vision-Language Pre-training: Basics, Recent Advances, and Future Trendscited by 117
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samplescited by 94
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attackscited by 89
- 2022Video Question Answering: Datasets, Algorithms and Challengescited by 84
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Modelscited by 80
- 2021Human-Adversarial Visual Question Answeringcited by 57
- 2023Equivariant Similarity for Vision-Language Foundation Modelscited by 51
- 2023Benchmarks for Automated Commonsense Reasoning: A Surveycited by 40
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2024Do Vision-Language Models Really Understand Visual Language?cited by 29
38 more
- 2021Coarse-to-Fine Reasoning for Visual Question Answeringcited by 25
- 2022Causal Reasoning Meets Visual Representation Learning: A Prospective Studycited by 24
- 2022Are Deep Neural Networks SMARTer than Second Graders?cited by 24
- 2023Improving Selective Visual Question Answering by Learning from Your Peerscited by 24
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustnesscited by 23
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challengescited by 23
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Modelscited by 23
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 22
- 2022Reassessing Evaluation Practices in Visual Question Answering: A Case Study on Out-of-Distribution Generalizationcited by 20
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Modelscited by 20
- 2023Q: How to Specialize Large Vision-Language Models to Data-Scarce VQA Tasks? A: Self-Train on Unlabeled Images!cited by 19
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answeringcited by 18
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
- 2024Visual Robustness Benchmark for Visual Question Answering (VQA)cited by 12
- 2025Code-Vision: Evaluating Multimodal LLMs Logic Understanding and Code Generation Capabilitiescited by 11
- 2023Adventures of Trustworthy Vision-Language Models: A Surveycited by 10
- 2021Semantically Distributed Robust Optimization for Vision-and-Language Inferencecited by 9
- 2022MaXM: Towards Multilingual Visual Question Answeringcited by 9
- 2025UniGame: Turning a Unified Multimodal Model Into Its Own Adversarycited by 9
- 2022Correlation Information Bottleneck: Towards Adapting Pretrained Multimodal Models for Robust Visual Question Answeringcited by 7
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Modelscited by 7
- 2026Uncertainty Quantification for Multimodal Large Language Models with Incoherence-adjusted Semantic Volumecited by 7
- 2021Unsupervised Natural Language Inference Using PHL Triplet Generationcited by 6
- 2021MLP Architectures for Vision-and-Language Modeling: An Empirical Studycited by 6
- 2023Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbationscited by 5
- 2024Benchmark Granularity and Model Robustness for Image-Text Retrievalcited by 5
- 2024Identifying Crucial Objects in Blind and Low-Vision Individuals' Navigationcited by 5
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answeringcited by 5
- 2022Robustness of Fusion-based Multimodal Classifiers to Cross-Modal Content Dilutionscited by 4
- 2024A Dataset for Crucial Object Recognition in Blind and Low-Vision Individuals' Navigationcited by 4
- 2024A Hitchhikers Guide to Fine-Grained Face Forgery Detection Using Common Sense Reasoningcited by 4
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Datacited by 4
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answeringcited by 4
- 2025The Artificial Intelligence Cognitive Examination: A Survey on the Evolution of Multimodal Evaluation from Recognition to Reasoningcited by 4
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Modelscited by 3
- 2023Cross-Modal Attribute Insertions for Assessing the Robustness of Vision-and-Language Learningcited by 3
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarkingcited by 3
50 most cited of 74 All 74 (JSON)
- 2026Semantic Uncertainty Quantification Needs Factual Equivalence28 Sep 2026
- 2026When Does an Image Determine the Answer? Benchmarking Visual Answerability across Charts and Scenes28 Sep 2026
- 2026Knowing What Not to Answer: Selective Non-Compliance in Vision-Language Models4 Sep 2026
- 2026RobustMAD: Evaluating Real-World Robustness of Multimodal Small Language Models for Deployable Anomaly Detection Assistants26 Jun 2026
- 2026Remember with Confidence: Uncertainty Quantification for Spatio-temporal Memory with Probabilistic Guarantees6 Jun 2026
- 2026FUSE: Quantifying Uncertainty in Vision-Language Models by Bayesian Fusing Epistemic and Aleatoric Uncertainty1 Jun 2026
- 2026Leveraging Visual Signals for Robust Token-Level Uncertainty in Vision-Language Generation26 May 2026
- 2026AUDITA: A New Dataset to Audit Humans vs. AI Skill at Audio QA23 Apr 2026
- 2026Uncertainty Quantification for Multimodal Large Language Models with Incoherence-adjusted Semantic Volume27 Feb 2026
- 2026Fix Before Search: Benchmarking Agentic Query Visual Pre-processing in Multimodal Retrieval-augmented Generation13 Feb 2026
- 2025Improving Semantic Uncertainty Quantification in LVLMs with Semantic Gaussian Processes16 Dec 2025
- 2025UniGame: Turning a Unified Multimodal Model Into Its Own Adversary24 Nov 2025
38 more
- 2025The Artificial Intelligence Cognitive Examination: A Survey on the Evolution of Multimodal Evaluation from Recognition to Reasoning5 Oct 2025
- 2025ColorBlindnessEval: Can Vision-Language Models Pass Color Blindness Tests?23 Sep 2025
- 2025VisMoDAl: Visual Analytics for Evaluating and Improving Corruption Robustness of Vision-Language Models18 Sep 2025
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answering19 Aug 2025
- 2025On the Reliability of Vision-Language Models Under Adversarial Frequency-Domain Perturbations30 Jul 2025
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2025Breaking Bad Molecules: Are MLLMs Ready for Structure-Level Molecular Detoxification?12 Jun 2025
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models30 May 2025
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answering27 May 2025
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Data27 May 2025
- 2025Code-Vision: Evaluating Multimodal LLMs Logic Understanding and Code Generation Capabilities17 Feb 2025
- 2025Admitting Ignorance Helps the Video Question Answering Models to Answer15 Jan 2025
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samples18 Oct 2024
- 2024A Hitchhikers Guide to Fine-Grained Face Forgery Detection Using Common Sense Reasoning1 Oct 2024
- 2024Do Vision-Language Models Really Understand Visual Language?30 Sep 2024
- 2024Identifying Crucial Objects in Blind and Low-Vision Individuals' Navigation23 Aug 2024
- 2024A Dataset for Crucial Object Recognition in Blind and Low-Vision Individuals' Navigation23 Jul 2024
- 2024Benchmark Granularity and Model Robustness for Image-Text Retrieval21 Jul 2024
- 2024Visual Robustness Benchmark for Visual Question Answering (VQA)3 Jul 2024
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Models13 Jun 2024
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarking6 Jun 2024
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answering18 Apr 2024
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models14 Mar 2024
- 2023Adventures of Trustworthy Vision-Language Models: A Survey7 Dec 2023
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attacks6 Dec 2023
- 2023InViG: Benchmarking Interactive Visual Grounding with 500K Human-Robot Interactions18 Oct 2023
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Models17 Oct 2023
- 2023Uncovering Hidden Connections: Iterative Search and Reasoning for Video-grounded Dialog11 Oct 2023
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Models9 Oct 2023
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challenges21 Jul 2023
- 2023Generative Visual Question Answering18 Jul 2023
- 2023Fooling Contrastive Language-Image Pre-trained Models with CLIPMasterPrints7 Jul 2023
- 2023Cross-Modal Attribute Insertions for Assessing the Robustness of Vision-and-Language Learning19 Jun 2023
- 2023Improving Selective Visual Question Answering by Learning from Your Peers14 Jun 2023
- 2023Q: How to Specialize Large Vision-Language Models to Data-Scarce VQA Tasks? A: Self-Train on Unlabeled Images!6 Jun 2023
- 2023Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbations1 Jun 2023
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May 2023
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models21 Apr 2023
50 newest of 74 All 74 (JSON)
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2022Vision-Language Pre-training: Basics, Recent Advances, and Future Trendscited by 117
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samplescited by 94
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attackscited by 89
- 2023Negative Object Presence Evaluation (NOPE) to Measure Object Hallucination in Vision-Language Modelscited by 80
- 2023Equivariant Similarity for Vision-Language Foundation Modelscited by 51
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2024Do Vision-Language Models Really Understand Visual Language?cited by 29
- 2023Q: How to Specialize Large Vision-Language Models to Data-Scarce VQA Tasks? A: Self-Train on Unlabeled Images!cited by 19
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2025Code-Vision: Evaluating Multimodal LLMs Logic Understanding and Code Generation Capabilitiescited by 11
- 2023Adventures of Trustworthy Vision-Language Models: A Surveycited by 10
12 most cited of 25 All 25 (JSON)
- 2026Knowing What Not to Answer: Selective Non-Compliance in Vision-Language Models4 Sep 2026
- 2026FUSE: Quantifying Uncertainty in Vision-Language Models by Bayesian Fusing Epistemic and Aleatoric Uncertainty1 Jun 2026
- 2026Leveraging Visual Signals for Robust Token-Level Uncertainty in Vision-Language Generation26 May 2026
- 2026Uncertainty Quantification for Multimodal Large Language Models with Incoherence-adjusted Semantic Volume27 Feb 2026
- 2025Improving Semantic Uncertainty Quantification in LVLMs with Semantic Gaussian Processes16 Dec 2025
- 2025ColorBlindnessEval: Can Vision-Language Models Pass Color Blindness Tests?23 Sep 2025
- 2025VisMoDAl: Visual Analytics for Evaluating and Improving Corruption Robustness of Vision-Language Models18 Sep 2025
- 2025On the Reliability of Vision-Language Models Under Adversarial Frequency-Domain Perturbations30 Jul 2025
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2025Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models30 May 2025
- 2025Code-Vision: Evaluating Multimodal LLMs Logic Understanding and Code Generation Capabilities17 Feb 2025
- 2024NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samples18 Oct 2024
12 newest of 25 All 25 (JSON)
- 2023Benchmarks for Automated Commonsense Reasoning: A Surveycited by 40
- 2022Causal Reasoning Meets Visual Representation Learning: A Prospective Studycited by 24
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Modelscited by 20
- 2024A Hitchhikers Guide to Fine-Grained Face Forgery Detection Using Common Sense Reasoningcited by 4
- 2025The Artificial Intelligence Cognitive Examination: A Survey on the Evolution of Multimodal Evaluation from Recognition to Reasoningcited by 4
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Modelscited by 3
- 2025The Artificial Intelligence Cognitive Examination: A Survey on the Evolution of Multimodal Evaluation from Recognition to Reasoning5 Oct 2025
- 2024A Hitchhikers Guide to Fine-Grained Face Forgery Detection Using Common Sense Reasoning1 Oct 2024
- 2023Benchmarks for Automated Commonsense Reasoning: A Survey9 Feb 2023
- 2022WinoGAViL: Gamified Association Benchmark to Challenge Vision-and-Language Models25 Jul 2022
- 2022Causal Reasoning Meets Visual Representation Learning: A Prospective Study26 Apr 2022
- 2022Measuring CLEVRness: Blackbox testing of Visual Reasoning Models24 Feb 2022
- 2022Multimodal Learning with Transformers: A Surveycited by 399
- 2022Video Question Answering: Datasets, Algorithms and Challengescited by 84
- 2021Human-Adversarial Visual Question Answeringcited by 57
- 2021Coarse-to-Fine Reasoning for Visual Question Answeringcited by 25
- 2022Are Deep Neural Networks SMARTer than Second Graders?cited by 24
- 2023Improving Selective Visual Question Answering by Learning from Your Peerscited by 24
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustnesscited by 23
- 2023Robust Visual Question Answering: Datasets, Methods, and Future Challengescited by 23
- 2023UNK-VQA: A Dataset and a Probe into the Abstention Ability of Multi-modal Large Modelscited by 23
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 22
- 2022Reassessing Evaluation Practices in Visual Question Answering: A Case Study on Out-of-Distribution Generalizationcited by 20
- 2024Look, Listen, and Answer: Overcoming Biases for Audio-Visual Question Answeringcited by 18
12 most cited of 42 All 42 (JSON)
- 2026Semantic Uncertainty Quantification Needs Factual Equivalence28 Sep 2026
- 2026When Does an Image Determine the Answer? Benchmarking Visual Answerability across Charts and Scenes28 Sep 2026
- 2026RobustMAD: Evaluating Real-World Robustness of Multimodal Small Language Models for Deployable Anomaly Detection Assistants26 Jun 2026
- 2026Remember with Confidence: Uncertainty Quantification for Spatio-temporal Memory with Probabilistic Guarantees6 Jun 2026
- 2026AUDITA: A New Dataset to Audit Humans vs. AI Skill at Audio QA23 Apr 2026
- 2025UniGame: Turning a Unified Multimodal Model Into Its Own Adversary24 Nov 2025
- 2025Mitigating Easy Option Bias in Multiple-Choice Question Answering19 Aug 2025
- 2025Breaking Bad Molecules: Are MLLMs Ready for Structure-Level Molecular Detoxification?12 Jun 2025
- 2025FRAMES-VQA: Benchmarking Fine-Tuning Robustness across Multi-Modal Shifts in Visual Question Answering27 May 2025
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Data27 May 2025
- 2025Admitting Ignorance Helps the Video Question Answering Models to Answer15 Jan 2025
- 2024Identifying Crucial Objects in Blind and Low-Vision Individuals' Navigation23 Aug 2024
12 newest of 42 All 42 (JSON)