# Backdoor Attack on CelebA-HQ

Source: [Backdoor Attack on CelebA-HQ](<https://www.sota2.com/research/sota/backdoor-attack-on-celeba-hq>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-06-23T12:33:01.126Z

Evaluation of Backdoor Attack performance on the CelebA-HQ dataset, measured using Attack Success Rate (ASR), Mean Squared Error (MSE), and Structural Similarity Index Measure (SSIM).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Backdoor attack |
| Dataset (including any stated split) | CelebA-HQ |
| Metric | ASR |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 6 of 6 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [ASR](<https://www.sota2.com/research/sota/backdoor-attack-on-celeba-hq.md?metric=ASR>): Higher is better; unit: PERCENT.

- [MSE](<https://www.sota2.com/research/sota/backdoor-attack-on-celeba-hq.md?metric=MSE>): Lower is better; unit: SCALAR.

- [SSIM](<https://www.sota2.com/research/sota/backdoor-attack-on-celeba-hq.md?metric=SSIM>): Higher is better; unit: PERCENT.

## Recorded results

| Method | ASR | Result date | Report paper |
| --- | --- | --- | --- |
| TooBad | 99 | Not recorded | 6a3a1392206542251d7c769c |
| TooBad | 98 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 76 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 71 | Not recorded | 6a3a1392206542251d7c769c |
| VillanDiffusion | 32 | Not recorded | 6a3a1392206542251d7c769c |
| UIBDiffusion | 19 | Not recorded | 6a3a1392206542251d7c769c |

### TooBad

ASR: 99. Result ID: 6a3a7ce3fbc373592c38f121.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison rate (p)":"10%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

### TooBad

ASR: 98. Result ID: 6a3a7ce3fbc373592c38f11e.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

Recorded evaluation configuration: {"Poison rate (p)":"5%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 76. Result ID: 6a3a7ce3fbc373592c38f11f.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison rate (p)":"10%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 71. Result ID: 6a3a7ce3fbc373592c38f120.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison rate (p)":"10%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

### VillanDiffusion

ASR: 32. Result ID: 6a3a7ce3fbc373592c38f11c.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71a41e209131cea523f5.md>)

[Implementation](<https://github.com/IBM/villandiffusion>)

Recorded evaluation configuration: {"Poison rate (p)":"5%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

### UIBDiffusion

ASR: 19. Result ID: 6a3a7ce3fbc373592c38f11d.

[Reporting paper](<https://www.sota2.com/research/paper/6a3a1392206542251d7c769c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77261e209131cea7167d.md>)

Recorded evaluation configuration: {"Poison rate (p)":"5%","Model architecture":"LDM","Latent space size":"64 x 64"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.