Backdoor Attack on SD TPA 3
100ASRFull fine-tuning
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| Full fine-tuningPoisoned Text Encoders=L + G + T5, Params (#)=5583.96M, Params (%)=1002026.03 | 100 | 20.68 | 15.31 | 25.01 | |
| MELTPoisoned Text Encoders=L + G, Params (#)=8.06M, Params (%)=0.142026.03 | 100 | 20.55 | 15.61 | 24.29 | |
| ME-RickrollingPoisoned Text Encoders=L + G, Params (#)=818M, Params (%)=14.652026.03 | 99.6 | 20.43 | 15.33 | 24.35 | |
| MELTPoisoned Text Encoders=L + G + T5, Params (#)=11.40M, Params (%)=0.22026.03 | 99 | 30.36 | 15.34 | 25.01 | |
| Full Fine-tuningPoisoned Text Encoders=L + G + T5, Params (#)=5583.96M, Params (%)=1002026.03 | 97.8 | 29.77 | 15.23 | 25.99 | |
| ME-RickrollingPoisoned Text Encoders=L + G + T5, Params (#)=5583.96M, Params (%)=1002026.03 | 97.8 | 29.77 | 15.23 | 25.99 | |
| Clean ModelPoisoned Text Encoders=-2026.03 | 0 | 30.61 | 15.03 | 24.46 | |
| Clean ModelPoisoned Text Encoders=-2026.03 | 0 | 19.85 | 15.03 | 24.46 |