Backdoor Attack on ImageNet-1K
98.64ASR (%)Transfer-based Re-activation Attack (TA)
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Transfer-based Re-activation Attack (TA)Base Attack=Blended [10], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 98.64 | — | |
| TrojanVQADefense=None, Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 98.21 | — | |
| BlendedDefense=None, Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 97.71 | — | |
| Transfer-based Re-activation Attack (TA)Base Attack=TrojanVQA [44], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 97.46 | — | |
| White-box Re-activation Attack (WBA)Base Attack=TrojanVQA [44], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 97.14 | — | |
| BadNetsDefense=None, Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 96.65 | — | |
| White-box Re-activation Attack (WBA)Base Attack=Blended [10], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 96.57 | — | |
| IUPoison Rate=0.62%, Backbone=ResNet-502026.02 | 93.75 | 74.84 | |
| White-box Re-activation Attack (WBA)Base Attack=SIG [4], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 92.56 | — | |
| IUPoison Rate=0.39%, Backbone=ResNet-502026.02 | 90.66 | 75.17 | |
| White-box Re-activation Attack (WBA)Base Attack=Blended [10], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 89.61 | — | |
| Transfer-based Re-activation Attack (TA)Base Attack=SIG [4], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 87.99 | — | |
| White-box Re-activation Attack (WBA)Base Attack=TrojanVQA [44], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 87.43 | — | |
| White-box Re-activation Attack (WBA)Base Attack=SIG [4], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 87.04 | — | |
| Transfer-based Re-activation Attack (TA)Base Attack=BadNets [15], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 82.73 | — | |
| Transfer-based Re-activation Attack (TA)Base Attack=SIG [4], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 82.55 | — | |
| TrojanVQADefense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 82.07 | — | |
| White-box Re-activation Attack (WBA)Base Attack=BadNets [15], Defense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 82.05 | — | |
| IUPoison Rate=0.16%, Backbone=ResNet-502026.02 | 79.35 | 74.6 | |
| Transfer-based Re-activation Attack (TA)Base Attack=TrojanVQA [44], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 78.25 | — | |
| SIGDefense=None, Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 77.71 | — | |
| IUPoison Rate (%)=0.62, Backbone=ViT2026.02 | 75.37 | 61.15 | |
| Transfer-based Re-activation Attack (TA)Base Attack=Blended [10], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 72.65 | — | |
| BadNetsDefense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 64.6 | — | |
| White-box Re-activation Attack (WBA)Base Attack=BadNets [15], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 57.76 | — | |
| IUPoison Rate (%)=0.39, Backbone=ViT2026.02 | 57.72 | 61.46 | |
| TrojanVQADefense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 49.82 | — | |
| BlendedDefense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 49.77 | — | |
| Transfer-based Re-activation Attack (TA)Base Attack=BadNets [15], Defense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 47.3 | — | |
| SIGDefense=FT [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 30.91 | — | |
| SIGDefense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 21.68 | — | |
| BlendedDefense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 18.57 | — | |
| BadNetsDefense=CleanCLIP [3], Norm Bound=l∞ = 0.05, Model Architecture=CLIP2024.05 | 17.29 | — | |
| IUPoison Rate (%)=0.16, Backbone=ViT2026.02 | 5.1 | 61.62 |