RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models
On the map: Multimodal LLMs / vision-language models → VLM benchmarks and visual reasoning
Abstract (arXiv)
With the extensive use of vision-language models in various downstream tasks, evaluating their robustness is crucial. In this paper, we propose a benchmark for assessing the robustness of vision-language models. We believe that a robust model should properly understand both linguistic and visual semantics and be resilient to explicit variations. In pursuit of this goal, we create new variants of texts and images in the MS-COCO test set and re-evaluate the state-of-the-art (SOTA) models with the new data. Specifically, we alter the meaning of text by replacing a word, and generate visually altered images that maintain some visual context while introducing noticeable pixel changes through image mixing techniques.Our evaluations on the proposed benchmark reveal substantial performance degradation in many SOTA models (e.g., Image-to-Text Recall@1: 81.9% rightarrow 48.4% in BLIP, 66.1% rightarrow 37.6% in VSE∞), with the models often favoring the altered texts/images over the original ones. This indicates the current vision-language models struggle with subtle changes and often fail to understand the overall context of texts and images. Based on these findings, we propose semantic contrastive loss and visual contrastive loss to learn more robust embedding. Datasets and code are available at urlhttps://github.com/pseulki/rococo.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in VLM benchmarks and visual reasoning, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 70 of its 86 references that are in the map. First posted on arXiv 21 Apr 2023.
Builds on
70 of 86 references.
Closest ancestors · 2
Same direction, newest first
- 2022Flamingo: a Visual Language Model for Few-Shot Learning29 Apr
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation28 Jan
Other references · 68
- 2017Attention Is All You Needcited by 60,361
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
38 more
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,516
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2021Align before Fuse: Vision and Language Representation Learning with Momentum Distillationcited by 1,619
- 2019Natural Adversarial Examplescited by 1,408
- 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,362
- 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,312
- 2014On the Properties of Neural Machine Translation: Encoder-Decoder Approachescited by 1,304
- 2022CoCa: Contrastive Captioners are Image-Text Foundation Modelscited by 1,274
- 2021ViLT: Vision-and-Language Transformer Without Convolution or Region Supervisioncited by 1,230
- 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,214
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
- 2021StyleCLIP: Text-Driven Manipulation of StyleGAN Imagerycited by 991
- 2014Deep Visual-Semantic Alignments for Generating Image Descriptionscited by 968
- 2016Adversarial Machine Learning at Scalecited by 936
- 2021CLIPort: What and Where Pathways for Robotic Manipulationcited by 622
- 2022When and why vision-language models behave like bags-of-words, and what to do about it?cited by 610
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2018Stacked Cross Attention for Image-Text Matchingcited by 416
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
- 2017Certified Defenses for Data Poisoning Attackscited by 303
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2019Simple Black-box Adversarial Attackscited by 251
- 2018Using Trusted Data to Train Deep Networks on Labels Corrupted by Severe Noisecited by 216
- 2019Visual Semantic Reasoning for Image-Text Matchingcited by 185
- 2019Certified Robustness to Adversarial Word Substitutionscited by 168
- 2021Probabilistic Embeddings for Cross-Modal Retrievalcited by 151
- 2021Poisoning and Backdooring Contrastive Learningcited by 151
- 2020Learning the Best Pooling Strategy for Visual Semantic Embeddingcited by 137
- 2020Contextualized Perturbation for Textual Adversarial Attackcited by 136
- 2021Similarity Reasoning and Filtration for Image-Text Matchingcited by 121
- 2015Yin and Yang: Balancing and Answering Binary Visual Questionscited by 109
- 2019Cycle-Consistency for Robust Visual Question Answeringcited by 105
- 2019Sparse and Imperceivable Adversarial Attackscited by 95
50 most cited of 68 All 68 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 4; 2026: 2.
7 papers.
- 2024SUGARCREPE++ Dataset: Vision-Language Model Sensitivity to Semantic and Lexical Alterationscited by 42
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attackscited by 34
- 2025Visually Prompted Benchmarks Are Surprisingly Fragilecited by 7
- 2025Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updatescited by 1
- 2026Seeing Through Circuits: Faithful Mechanistic Interpretability for Vision Transformerscited by 1
- 2026TEVI: Text-Conditioned Editing of Visual Representations via Sparse Autoencoders for Improved Vision-Language Alignmentcited by 1
- 2025Evaluating Robustness of Vision-Language Models Under Noisy Conditionscited by 0
- 2026TEVI: Text-Conditioned Editing of Visual Representations via Sparse Autoencoders for Improved Vision-Language Alignment5 Jun 2026
- 2026Seeing Through Circuits: Faithful Mechanistic Interpretability for Vision Transformers15 Apr 2026
- 2025Visually Prompted Benchmarks Are Surprisingly Fragile19 Dec 2025
- 2025Evaluating Robustness of Vision-Language Models Under Noisy Conditions15 Sep 2025
- 2025Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates28 May 2025
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks18 Feb 2025
- 2024SUGARCREPE++ Dataset: Vision-Language Model Sensitivity to Semantic and Lexical Alterations17 Jun 2024
Similar, not cited
Close in wording, no citation either way
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Models
- 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models
- 2026Scaling Test-Time Robustness of Vision-Language Models via Self-Critical Inference Framework
- 2026How Robust is OCR-Reasoning? Evaluating OCR-Reasoning Robustness of Vision-Language Models under Visual Perturbations
- 2022Benchmarking Robustness of Multimodal Image-Text Models under Distribution Shift
- 2025Analysing the Robustness of Vision-Language-Models to Common Corruptions
- 2025PCRI: Measuring Context Robustness in Multimodal Models for Enterprise Applications
- 2025MASS: Overcoming Language Bias in Image-Text Matching