mlsanityData to 14 Oct 2026

RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models

arXiv 2304.10727 ↗First posted 21 Apr 2023cs.CV cs.AIcited by 7

On the map: Multimodal LLMs / vision-language models → VLM benchmarks and visual reasoning

Abstract (arXiv)

With the extensive use of vision-language models in various downstream tasks, evaluating their robustness is crucial. In this paper, we propose a benchmark for assessing the robustness of vision-language models. We believe that a robust model should properly understand both linguistic and visual semantics and be resilient to explicit variations. In pursuit of this goal, we create new variants of texts and images in the MS-COCO test set and re-evaluate the state-of-the-art (SOTA) models with the new data. Specifically, we alter the meaning of text by replacing a word, and generate visually altered images that maintain some visual context while introducing noticeable pixel changes through image mixing techniques.Our evaluations on the proposed benchmark reveal substantial performance degradation in many SOTA models (e.g., Image-to-Text Recall@1: 81.9% rightarrow 48.4% in BLIP, 66.1% rightarrow 37.6% in VSE∞), with the models often favoring the altered texts/images over the original ones. This indicates the current vision-language models struggle with subtle changes and often fail to understand the overall context of texts and images. Based on these findings, we propose semantic contrastive loss and visual contrastive loss to learn more robust embedding. Datasets and code are available at urlhttps://github.com/pseulki/rococo.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in VLM benchmarks and visual reasoning, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 70 of its 86 references that are in the map. First posted on arXiv 21 Apr 2023.

Builds on

70 of 86 references.

Closest ancestors · 2

Same direction, newest first

  1. 2022Flamingo: a Visual Language Model for Few-Shot Learning29 Apr
  2. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation28 Jan

Other references · 68

  1. 2017Attention Is All You Needcited by 60,361
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  3. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  5. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  8. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  9. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
  10. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
  11. 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
  12. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
38 more
  1. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
  2. 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,516
  3. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
  4. 2021Align before Fuse: Vision and Language Representation Learning with Momentum Distillationcited by 1,619
  5. 2019Natural Adversarial Examplescited by 1,408
  6. 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,362
  7. 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,312
  8. 2014On the Properties of Neural Machine Translation: Encoder-Decoder Approachescited by 1,304
  9. 2022CoCa: Contrastive Captioners are Image-Text Foundation Modelscited by 1,274
  10. 2021ViLT: Vision-and-Language Transformer Without Convolution or Region Supervisioncited by 1,230
  11. 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,214
  12. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
  13. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
  14. 2021StyleCLIP: Text-Driven Manipulation of StyleGAN Imagerycited by 991
  15. 2014Deep Visual-Semantic Alignments for Generating Image Descriptionscited by 968
  16. 2016Adversarial Machine Learning at Scalecited by 936
  17. 2021CLIPort: What and Where Pathways for Robotic Manipulationcited by 622
  18. 2022When and why vision-language models behave like bags-of-words, and what to do about it?cited by 610
  19. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
  20. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
  21. 2018Generating Natural Language Adversarial Examplescited by 424
  22. 2018Stacked Cross Attention for Image-Text Matchingcited by 416
  23. 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
  24. 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
  25. 2017Certified Defenses for Data Poisoning Attackscited by 303
  26. 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
  27. 2019Simple Black-box Adversarial Attackscited by 251
  28. 2018Using Trusted Data to Train Deep Networks on Labels Corrupted by Severe Noisecited by 216
  29. 2019Visual Semantic Reasoning for Image-Text Matchingcited by 185
  30. 2019Certified Robustness to Adversarial Word Substitutionscited by 168
  31. 2021Probabilistic Embeddings for Cross-Modal Retrievalcited by 151
  32. 2021Poisoning and Backdooring Contrastive Learningcited by 151
  33. 2020Learning the Best Pooling Strategy for Visual Semantic Embeddingcited by 137
  34. 2020Contextualized Perturbation for Textual Adversarial Attackcited by 136
  35. 2021Similarity Reasoning and Filtration for Image-Text Matchingcited by 121
  36. 2015Yin and Yang: Balancing and Answering Binary Visual Questionscited by 109
  37. 2019Cycle-Consistency for Robust Visual Question Answeringcited by 105
  38. 2019Sparse and Imperceivable Adversarial Attackscited by 95

50 most cited of 68 All 68 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 1; 2025: 4; 2026: 2.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Models
  2. 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models
  3. 2026Scaling Test-Time Robustness of Vision-Language Models via Self-Critical Inference Framework
  4. 2026How Robust is OCR-Reasoning? Evaluating OCR-Reasoning Robustness of Vision-Language Models under Visual Perturbations
  5. 2022Benchmarking Robustness of Multimodal Image-Text Models under Distribution Shift
  6. 2025Analysing the Robustness of Vision-Language-Models to Common Corruptions
  7. 2025PCRI: Measuring Context Robustness in Multimodal Models for Enterprise Applications
  8. 2025MASS: Overcoming Language Bias in Image-Text Matching