Backdoor Detection on Stable Diffusion StyleAtt attacks v1.5
93.33PrecisionNaviT2I
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| NaviT2IAccess=White-box, Attack Variant=BadT2I2026.03 | 93.33 | 84 | 88.42 | 6 | |
| NaviT2IAccess=White-box, Attack Variant=RickTAA2026.03 | 91.49 | 86 | 88.66 | 8 | |
| BlackMirrorAccess=Black-box, Attack Variant=RickTAA2026.03 | 83.33 | 100 | 90.91 | 20 | |
| BlackMirrorAccess=Black-box, Attack Variant=BadT2I2026.03 | 77.42 | 96 | 85.71 | 28 | |
| CLIPAccess=Black-box, Attack Variant=RickTAA2026.03 | 66.67 | 64 | 65.31 | 32 | |
| UFIDAccess=Black-box, Attack Variant=RickTAA2026.03 | 60.6 | 64.52 | 62.5 | 68.42 | |
| UFIDAccess=Black-box, Attack Variant=BadT2I2026.03 | 59.46 | 88 | 70.97 | 60 | |
| CLIPAccess=Black-box, Attack Variant=BadT2I2026.03 | 47.06 | 32 | 38.1 | 36 | |
| T2IShieldAccess=White-box, Attack Variant=RickTAA2026.03 | 40 | 32 | 35.56 | 48 | |
| T2IShieldAccess=White-box, Attack Variant=BadT2I2026.03 | 11.11 | 4 | 5.89 | 32 |