Backdoor Attack on FaceForensics++
98.94BASIG
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| SIGVictim Detector=EfficientNet2025.05 | 98.94 | 97.02 | |
| Passcode-controlled trigger generatorVictim Detector=EfficientNet2025.05 | 98.89 | 97.27 | |
| BadNetVictim Detector=EfficientNet2025.05 | 98.79 | 83.89 | |
| BlendedVictim Detector=EfficientNet2025.05 | 98.59 | 99.04 | |
| ISSBAVictim Detector=EfficientNet2025.05 | 98.54 | 93.08 | |
| SIGVictim Detector=ResNet2025.05 | 98.38 | 88.28 | |
| LCVictim Detector=EfficientNet2025.05 | 98.28 | 94.34 | |
| BadNetVictim Detector=ResNet2025.05 | 98.1 | 73.08 | |
| PFFVictim Detector=EfficientNet2025.05 | 98.05 | 98.53 | |
| PFFVictim Detector=SRM2025.05 | 97.87 | 85.3 | |
| BlendedVictim Detector=ResNet2025.05 | 97.83 | 95.81 | |
| LCVictim Detector=ResNet2025.05 | 97.57 | 87.02 | |
| PFFVictim Detector=Avg2025.05 | 97.56 | 92.05 | |
| LCVictim Detector=Avg2025.05 | 97.5 | 88.59 | |
| Passcode-controlled trigger generatorVictim Detector=ResNet2025.05 | 97.45 | 96.62 | |
| LCVictim Detector=F3Net2025.05 | 97.35 | 95.5 | |
| PFFVictim Detector=ResNet2025.05 | 97.3 | 86.82 | |
| Passcode-controlled trigger generatorVictim Detector=Avg2025.05 | 97.27 | 97.26 | |
| SIGVictim Detector=Avg2025.05 | 97.15 | 92.97 | |
| BadNetVictim Detector=Avg2025.05 | 97.04 | 65.72 | |
| BlendedVictim Detector=Avg2025.05 | 97.03 | 95.98 | |
| PFFVictim Detector=F3Net2025.05 | 97.02 | 97.52 | |
| ISSBAVictim Detector=Avg2025.05 | 96.98 | 81.24 | |
| ISSBAVictim Detector=SRM2025.05 | 96.89 | 78.23 | |
| LCVictim Detector=SRM2025.05 | 96.8 | 77.48 | |
| Passcode-controlled trigger generatorVictim Detector=F3Net2025.05 | 96.64 | 98.99 | |
| BlendedVictim Detector=F3Net2025.05 | 96.49 | 95.3 | |
| ISSBAVictim Detector=ResNet2025.05 | 96.29 | 75.15 | |
| ISSBAVictim Detector=F3Net2025.05 | 96.21 | 78.49 | |
| Passcode-controlled trigger generatorVictim Detector=SRM2025.05 | 96.1 | 96.16 | |
| SIGVictim Detector=F3Net2025.05 | 96.03 | 96.16 | |
| BadNetVictim Detector=F3Net2025.05 | 95.96 | 81.16 | |
| BadNetVictim Detector=SRM2025.05 | 95.3 | 24.75 | |
| BlendedVictim Detector=SRM2025.05 | 95.3 | 93.78 | |
| SIGVictim Detector=SRM2025.05 | 95.25 | 90.4 |