Adversarial Purification on CelebA-HQ
0.09FDFRUDAP
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| UDAPAttack=Anti-DB2026.01 | 0.09 | 0.62 | 0.72 | 17.53 | 142.54 | 4.21 | |
| No PurificationAttack=clean2026.01 | 0.09 | 0.63 | 0.74 | 18.36 | 142.38 | 4.34 | |
| DiffPureAttack=MIST2026.01 | 0.1 | 0.56 | 0.67 | 25.64 | 224.33 | 4.53 | |
| UDAPAttack=MIST2026.01 | 0.11 | 0.61 | 0.73 | 20.42 | 163.25 | 4.24 | |
| GridPureAttack=MIST2026.01 | 0.11 | 0.58 | 0.66 | 22.83 | 185.72 | 4.35 | |
| GridPureAttack=Anti-DB2026.01 | 0.11 | 0.58 | 0.69 | 22.75 | 158.54 | 4.74 | |
| No PurificationAttack=MIST2026.01 | 0.12 | 0.51 | 0.63 | 33.72 | 273.37 | 4.93 | |
| UDAPAttack=PID2026.01 | 0.14 | 0.57 | 0.59 | 21.45 | 185.72 | 4.38 | |
| DiffPureAttack=Anti-DB2026.01 | 0.14 | 0.58 | 0.66 | 26.48 | 205.82 | 4.48 | |
| GridPureAttack=PID2026.01 | 0.21 | 0.48 | 0.46 | 25.29 | 205.62 | 4.46 | |
| UDAPAttack=Anti-DF2026.01 | 0.22 | 0.51 | 0.64 | 25.08 | 202.67 | 4.56 | |
| DiffPureAttack=PID2026.01 | 0.24 | 0.42 | 0.42 | 29.93 | 238.52 | 4.54 | |
| UDAPAttack=MetaCloak2026.01 | 0.24 | 0.53 | 0.58 | 30.36 | 264.81 | 4.49 | |
| GridPureAttack=Anti-DF2026.01 | 0.33 | 0.46 | 0.56 | 27.32 | 235.11 | 4.62 | |
| DiffPureAttack=Anti-DF2026.01 | 0.46 | 0.33 | 0.55 | 29.5 | 356.22 | 4.57 | |
| GridPureAttack=MetaCloak2026.01 | 0.48 | 0.35 | 0.51 | 34.52 | 325.74 | 4.64 | |
| DiffPureAttack=MetaCloak2026.01 | 0.54 | 0.31 | 0.44 | 35.15 | 332.52 | 4.62 | |
| No PurificationAttack=Anti-DB2026.01 | 0.55 | 0.4 | 0.38 | 38.24 | 342.36 | 5.58 | |
| No PurificationAttack=Anti-DF2026.01 | 0.59 | 0.25 | 0.45 | 39.46 | 257.98 | 5.82 | |
| No PurificationAttack=MetaCloak2026.01 | 0.73 | 0.03 | 0.08 | 47.38 | 404.82 | 5.88 | |
| No PurificationAttack=PID2026.01 | 0.87 | 0.02 | 0.06 | 48.24 | 414.35 | 5.96 |