Backdoor Detection on Stable Diffusion ObjRepAtt attacks v1.5
100PrecisionBlackMirror
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BlackMirrorAccess=Black-box, Attack Variant=PaaS2026.03 | 100 | 95.65 | 97.78 | 0 | |
| GrainPSAccess=White-box, Attack Variant=RickTPA2026.03 | 99.07 | 94.5 | 96.73 | 0.89 | |
| BlackMirrorAccess=Black-box, Attack Variant=RickTPA2026.03 | 96.15 | 100 | 98.04 | 4 | |
| NaviT2IAccess=White-box, Attack Variant=BadT2I2026.03 | 95.24 | 80 | 86.96 | 4 | |
| NaviT2IAccess=White-box, Attack Variant=PaaS2026.03 | 92 | 92 | 92 | 8.16 | |
| GrainPSAccess=White-box, Attack Variant=PaaS2026.03 | 91.03 | 86.69 | 88.4 | 8.56 | |
| NaviT2IAccess=White-box, Attack Variant=RickTPA2026.03 | 90.38 | 94 | 92.16 | 10 | |
| BlackMirrorAccess=Black-box, Attack Variant=EvilEdit2026.03 | 85.71 | 85.71 | 85.71 | 10.34 | |
| GrainPSAccess=White-box, Attack Variant=EvilEdit2026.03 | 83.99 | 90.61 | 86.93 | 17.27 | |
| BlackMirrorAccess=Black-box, Attack Variant=BadT2I2026.03 | 83.33 | 90.01 | 86.96 | 14.29 | |
| UFIDAccess=Black-box, Attack Variant=RickTPA2026.03 | 79.55 | 100 | 94.59 | 60 | |
| NaviT2IAccess=White-box, Attack Variant=EvilEdit2026.03 | 77.5 | 62 | 68.89 | 18 | |
| T2IShieldAccess=White-box, Attack Variant=RickTPA2026.03 | 74.2 | 65.71 | 69.7 | 53.33 | |
| T2IShieldAccess=White-box, Attack Variant=BadT2I2026.03 | 73.33 | 31.43 | 44 | 26.67 | |
| CLIPAccess=Black-box, Attack Variant=PaaS2026.03 | 72.73 | 96 | 82.76 | 28 | |
| CLIPAccess=Black-box, Attack Variant=RickTPA2026.03 | 72.73 | 96 | 82.76 | 36 | |
| T2IShieldAccess=White-box, Attack Variant=PaaS2026.03 | 68.75 | 62.86 | 69.7 | 66.67 | |
| UFIDAccess=Black-box, Attack Variant=EvilEdit2026.03 | 64 | 66.67 | 60.87 | 37.93 | |
| CLIPAccess=Black-box, Attack Variant=EvilEdit2026.03 | 63.64 | 87.5 | 73.68 | 50 | |
| UFIDAccess=Black-box, Attack Variant=BadT2I2026.03 | 59.38 | 76 | 66.67 | 52 | |
| CLIPAccess=Black-box, Attack Variant=BadT2I2026.03 | 56 | 56 | 56 | 44 | |
| UFIDAccess=Black-box, Attack Variant=PaaS2026.03 | 54.84 | 73.91 | 62.96 | 51.85 | |
| T2IShieldAccess=White-box, Attack Variant=EvilEdit2026.03 | 42.86 | 42.86 | 42.86 | 73.33 |