Backdoor Attack on SD TOA 3
100ASRFull fine-tuning
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| Full fine-tuningPoisoned Text Encoders=L + G + T5, Params (#)=5583.96M, Params (%)=1002026.03 | 100 | 26.93 | 15.16 | 25.08 | |
| ME-RickrollingPoisoned Text Encoders=G, Params (#)=695M, Params (%)=12.442026.03 | 100 | 27.11 | 15.11 | 24.82 | |
| MELTPoisoned Text Encoders=G, Params (#)=6.32M, Params (%)=0.112026.03 | 99 | 26.87 | 15.1 | 24.78 | |
| Clean ModelPoisoned Text Encoders=-2026.03 | 0 | 26.77 | 15.03 | 24.46 |