Backdoor Attack on CelebA
77.7Backdoor Attack Rate (BA)CAA
Evaluation results
| Method | Links | ||
|---|---|---|---|
| CAABackbone=MobileNetV22026.03 | 77.7 | 100 | |
| BppAttackBackbone=MobileNetV22026.03 | 77.51 | 31.91 | |
| FTrojanBackbone=MobileNetV22026.03 | 77.5 | 29.35 | |
| CleanBackbone=MobileNetV22026.03 | 77.35 | — | |
| CleanBackbone=SENet2026.03 | 77.1 | — | |
| CAABackbone=SENet2026.03 | 77.06 | 99.46 | |
| CleanBackbone=ResNet18, Attack Mode=All-to-all2026.03 | 76.9 | — | |
| CleanBackbone=ResNet182026.03 | 76.9 | — | |
| CAABackbone=ResNet18, Attack Mode=All-to-all2026.03 | 76.85 | 76.77 | |
| CleanBackbone=Pre-activation ResNet182026.03 | 76.78 | — | |
| CAABackbone=ResNet182026.03 | 76.75 | 100 | |
| WaNetBackbone=ResNet18, Attack Mode=All-to-all2026.03 | 76.66 | 55.57 | |
| CAABackbone=Pre-activation ResNet182026.03 | 76.57 | 99.93 | |
| WaNetBackbone=Pre-activation ResNet182026.03 | 76.55 | 88.87 | |
| WaNetBackbone=ResNet182026.03 | 76.49 | 79 | |
| WaNetBackbone=SENet2026.03 | 76.49 | 79 | |
| BppAttackBackbone=Pre-activation ResNet182026.03 | 75.71 | 31.32 | |
| WaNetBackbone=MobileNetV22026.03 | 75.63 | 77.43 | |
| BppAttackBackbone=SENet2026.03 | 75.59 | 31.88 | |
| FTrojanBackbone=ResNet18, Attack Mode=All-to-all2026.03 | 75.5 | 3.5 | |
| FTrojanBackbone=ResNet182026.03 | 75.25 | 31.16 | |
| WaNetReABackbone=MobileNetV22026.03 | 75.21 | 96.3 | |
| FTrojanBackbone=Pre-activation ResNet182026.03 | 74.98 | 27.37 | |
| WaNetReABackbone=Pre-activation ResNet182026.03 | 74.83 | 95.45 | |
| FTrojanBackbone=SENet2026.03 | 74.73 | 30.21 | |
| BppAttackBackbone=ResNet182026.03 | 74.69 | 32.73 | |
| BppAttackBackbone=ResNet18, Attack Mode=All-to-all2026.03 | 73.03 | 19.17 | |
| WaNetReABackbone=ResNet182026.03 | 72.4 | 98.85 | |
| WaNetReABackbone=SENet2026.03 | 72.1 | 96.78 | |
| BppAttackReABackbone=MobileNetV22026.03 | 71.73 | 90.92 | |
| FTrojanReABackbone=SENet2026.03 | 71.71 | 91.58 | |
| FTrojanReABackbone=ResNet182026.03 | 71.65 | 92.25 | |
| BppAttackReABackbone=ResNet182026.03 | 71.58 | 95.97 | |
| BppAttackReABackbone=SENet2026.03 | 71.45 | 94.05 | |
| FTrojanReABackbone=MobileNetV22026.03 | 71.42 | 87.34 | |
| BppAttackReABackbone=Pre-activation ResNet182026.03 | 70.43 | 94.78 | |
| FTrojanReABackbone=Pre-activation ResNet182026.03 | 70.34 | 92.91 |