# Backdoor Attack on CelebA Source: [Backdoor Attack on CelebA]() Collection index: [llms.txt]() Data updated: 2026-03-17T08:50:55.368Z Evaluation of Backdoor Attack performance on the CelebA dataset, measured using metrics like Backdoor Attack Rate (BA) and Attack Success Rate (ASR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Backdoor Attack | | Dataset (including any stated split) | CelebA | | Metric | Backdoor Attack Rate (BA) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 37 of 37 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Backdoor Attack Rate (BA)](): Higher is better; unit: PERCENT. - [Attack Success Rate (ASR)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Backdoor Attack Rate (BA) | Result date | Report paper | | --- | --- | --- | --- | | CAA | 77.7 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttack | 77.51 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojan | 77.5 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | Clean | 77.35 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | Clean | 77.1 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | CAA | 77.06 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | Clean | 76.9 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | Clean | 76.9 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | CAA | 76.85 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | Clean | 76.78 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | CAA | 76.75 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNet | 76.66 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | CAA | 76.57 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNet | 76.55 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNet | 76.49 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNet | 76.49 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttack | 75.71 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNet | 75.63 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttack | 75.59 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojan | 75.5 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojan | 75.25 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNetReA | 75.21 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojan | 74.98 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNetReA | 74.83 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojan | 74.73 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttack | 74.69 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttack | 73.03 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNetReA | 72.4 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | WaNetReA | 72.1 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttackReA | 71.73 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojanReA | 71.71 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojanReA | 71.65 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttackReA | 71.58 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttackReA | 71.45 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojanReA | 71.42 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | BppAttackReA | 70.43 | Not recorded | 69b8dff10636e5bf4afbe8b2 | | FTrojanReA | 70.34 | Not recorded | 69b8dff10636e5bf4afbe8b2 | ### CAA Backdoor Attack Rate (BA): 77.7. Result ID: 69b915e147f34ce924a1c1a2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### BppAttack Backdoor Attack Rate (BA): 77.51. Result ID: 69b915e147f34ce924a1c1a0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### FTrojan Backdoor Attack Rate (BA): 77.5. Result ID: 69b915e147f34ce924a1c19c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### Clean Backdoor Attack Rate (BA): 77.35. Result ID: 69b915e147f34ce924a1c19b. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### Clean Backdoor Attack Rate (BA): 77.1. Result ID: 69b915e147f34ce924a1c1a3. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### CAA Backdoor Attack Rate (BA): 77.06. Result ID: 69b915e147f34ce924a1c1aa. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### Clean Backdoor Attack Rate (BA): 76.9. Result ID: 69b915e147f34ce924a1c143. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"ResNet18","Attack Mode":"All-to-all"}. This record does not assert independent reproduction. ### Clean Backdoor Attack Rate (BA): 76.9. Result ID: 69b915e147f34ce924a1c18b. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### CAA Backdoor Attack Rate (BA): 76.85. Result ID: 69b915e147f34ce924a1c147. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18","Attack Mode":"All-to-all"}. This record does not assert independent reproduction. ### Clean Backdoor Attack Rate (BA): 76.78. Result ID: 69b915e147f34ce924a1c193. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### CAA Backdoor Attack Rate (BA): 76.75. Result ID: 69b915e147f34ce924a1c192. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### WaNet Backdoor Attack Rate (BA): 76.66. Result ID: 69b915e147f34ce924a1c145. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18","Attack Mode":"All-to-all"}. This record does not assert independent reproduction. ### CAA Backdoor Attack Rate (BA): 76.57. Result ID: 69b915e147f34ce924a1c19a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### WaNet Backdoor Attack Rate (BA): 76.55. Result ID: 69b915e147f34ce924a1c196. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### WaNet Backdoor Attack Rate (BA): 76.49. Result ID: 69b915e147f34ce924a1c18e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### WaNet Backdoor Attack Rate (BA): 76.49. Result ID: 69b915e147f34ce924a1c1a6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### BppAttack Backdoor Attack Rate (BA): 75.71. Result ID: 69b915e147f34ce924a1c198. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### WaNet Backdoor Attack Rate (BA): 75.63. Result ID: 69b915e147f34ce924a1c19e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### BppAttack Backdoor Attack Rate (BA): 75.59. Result ID: 69b915e147f34ce924a1c1a8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### FTrojan Backdoor Attack Rate (BA): 75.5. Result ID: 69b915e147f34ce924a1c144. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18","Attack Mode":"All-to-all"}. This record does not assert independent reproduction. ### FTrojan Backdoor Attack Rate (BA): 75.25. Result ID: 69b915e147f34ce924a1c18c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### WaNetReA Backdoor Attack Rate (BA): 75.21. Result ID: 69b915e147f34ce924a1c19f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### FTrojan Backdoor Attack Rate (BA): 74.98. Result ID: 69b915e147f34ce924a1c194. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### WaNetReA Backdoor Attack Rate (BA): 74.83. Result ID: 69b915e147f34ce924a1c197. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### FTrojan Backdoor Attack Rate (BA): 74.73. Result ID: 69b915e147f34ce924a1c1a4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### BppAttack Backdoor Attack Rate (BA): 74.69. Result ID: 69b915e147f34ce924a1c190. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### BppAttack Backdoor Attack Rate (BA): 73.03. Result ID: 69b915e147f34ce924a1c146. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18","Attack Mode":"All-to-all"}. This record does not assert independent reproduction. ### WaNetReA Backdoor Attack Rate (BA): 72.4. Result ID: 69b915e147f34ce924a1c18f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### WaNetReA Backdoor Attack Rate (BA): 72.1. Result ID: 69b915e147f34ce924a1c1a7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### BppAttackReA Backdoor Attack Rate (BA): 71.73. Result ID: 69b915e147f34ce924a1c1a1. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### FTrojanReA Backdoor Attack Rate (BA): 71.71. Result ID: 69b915e147f34ce924a1c1a5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### FTrojanReA Backdoor Attack Rate (BA): 71.65. Result ID: 69b915e147f34ce924a1c18d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### BppAttackReA Backdoor Attack Rate (BA): 71.58. Result ID: 69b915e147f34ce924a1c191. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"ResNet18"}. This record does not assert independent reproduction. ### BppAttackReA Backdoor Attack Rate (BA): 71.45. Result ID: 69b915e147f34ce924a1c1a9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"SENet"}. This record does not assert independent reproduction. ### FTrojanReA Backdoor Attack Rate (BA): 71.42. Result ID: 69b915e147f34ce924a1c19d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"MobileNetV2"}. This record does not assert independent reproduction. ### BppAttackReA Backdoor Attack Rate (BA): 70.43. Result ID: 69b915e147f34ce924a1c199. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. ### FTrojanReA Backdoor Attack Rate (BA): 70.34. Result ID: 69b915e147f34ce924a1c195. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Pre-activation ResNet18"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.