Adversarial Attack on I2P
99Attack Success Rate (ASR) (NudeNet)BEAP
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BEAPUnlearning Backbone=UCE, Embedding Guidance=true2026.05 | 99 | 28 | 3.19 | 9.07 | |
| BEAP (w/o EG)Unlearning Backbone=ESD, Embedding Guidance=false2026.05 | 99 | 60 | 2.18 | 7.67 | |
| BEAPUnlearning Backbone=SPM, Embedding Guidance=true2026.05 | 99 | 72 | 1.71 | 6.28 | |
| BEAPUnlearning Backbone=Receler, Embedding Guidance=true2026.05 | 99 | 55 | 2.63 | 8.06 | |
| BEAPUnlearning Backbone=MACE, Embedding Guidance=true2026.05 | 97 | 42 | 3.97 | 9.24 | |
| BEAP (w/o EG)Unlearning Backbone=Receler, Embedding Guidance=false2026.05 | 97 | 50 | 3.42 | 8.15 | |
| BEAP (w/o EG)Unlearning Backbone=SPM, Embedding Guidance=false2026.05 | 96 | 67 | 2.49 | 6.31 | |
| BEAP (w/o EG)Unlearning Backbone=UCE, Embedding Guidance=false2026.05 | 95 | 22 | 4.77 | 9.14 | |
| BEAPUnlearning Backbone=ESD, Embedding Guidance=true2026.05 | 95 | 69 | 3.86 | 6.83 | |
| BEAP (w/o EG)Unlearning Backbone=MACE, Embedding Guidance=false2026.05 | 86 | 44 | 5.79 | 9.54 | |
| Ring-a-BellUnlearning Backbone=Receler2026.05 | 61 | 0 | — | — | |
| Ring-a-BellUnlearning Backbone=SPM2026.05 | 60 | 0 | — | — | |
| Ring-a-BellUnlearning Backbone=ESD2026.05 | 55 | 0 | — | — | |
| SD 1.4Unlearning Backbone=None (Original Model)2026.05 | 50 | 17 | — | — | |
| ESD (w/o Att.)Unlearning Backbone=ESD2026.05 | 46 | 17 | — | — | |
| SPM (w/o Att.)Unlearning Backbone=SPM2026.05 | 46 | 15 | — | — | |
| Ring-a-BellUnlearning Backbone=UCE2026.05 | 32 | 0 | — | — | |
| Receler (w/o Att.)Unlearning Backbone=Receler2026.05 | 26 | 9 | — | — | |
| MACE (w/o Att.)Unlearning Backbone=MACE2026.05 | 12 | 2 | — | — | |
| UCE (w/o Att.)Unlearning Backbone=UCE2026.05 | 6 | 0 | — | — | |
| Ring-a-BellUnlearning Backbone=MACE2026.05 | 2 | 0 | — | — |