Backdoor Detection on Balanced 50% clean, 50% backdoored (test)
98.2Detection AccuracyVillanDiffusion
Evaluation results
| Method | Links | |
|---|---|---|
| VillanDiffusionDefense Method=NaviT2I2026.02 | 98.2 | |
| PersonalizationDefense Method=NaviT2I2026.02 | 92.8 | |
| BadT2IDefense Method=NaviT2I2026.02 | 90.8 | |
| RickrollingDefense Method=NaviT2I2026.02 | 88.3 | |
| VillanDiffusionDefense Method=UFID2026.02 | 87.4 | |
| VillanDiffusionDefense Method=T2IShield_CDA2026.02 | 78.9 | |
| VillanDiffusionDefense Method=T2IShield_FFT2026.02 | 75 | |
| RickrollingDefense Method=T2IShield_CDA2026.02 | 64.5 | |
| SemBDDefense Method=T2IShield_FFT2026.02 | 57 | |
| EvilEditDefense Method=T2IShield_FFT2026.02 | 55.5 | |
| BadT2IDefense Method=UFID2026.02 | 54.9 | |
| RickrollingDefense Method=UFID2026.02 | 54.6 | |
| EvilEditDefense Method=NaviT2I2026.02 | 54.3 | |
| EvilEditDefense Method=T2IShield_CDA2026.02 | 54 | |
| SemBDDefense Method=NaviT2I2026.02 | 52.5 | |
| BadT2IDefense Method=T2IShield_FFT2026.02 | 52 | |
| BadT2IDefense Method=T2IShield_CDA2026.02 | 51.3 | |
| PersonalizationDefense Method=T2IShield_CDA2026.02 | 50.7 | |
| IBADefense Method=NaviT2I2026.02 | 49.5 | |
| IBADefense Method=T2IShield_CDA2026.02 | 49.5 | |
| SemBDDefense Method=T2IShield_CDA2026.02 | 48.5 | |
| RickrollingDefense Method=T2IShield_FFT2026.02 | 47 | |
| PersonalizationDefense Method=T2IShield_FFT2026.02 | 45.8 | |
| EvilEditDefense Method=UFID2026.02 | 45.5 | |
| PersonalizationDefense Method=UFID2026.02 | 43 | |
| IBADefense Method=UFID2026.02 | 42.5 | |
| IBADefense Method=T2IShield_FFT2026.02 | 41 | |
| SemBDDefense Method=UFID2026.02 | 39.5 |