Black-box Attack on LADN-dataset
73.4ASR (IR152)Flux-Guard
Evaluation results
| Method | Links | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Flux-GuardAttack Type=Facial edit2026.06 | 73.4 | — | — | — | — | — | 94.8 | 49.3 | 84.9 | 75.6 | |
| EFPPAttack Type=Facial Semantic Invariant2026.06 | 70.2 | — | — | — | — | — | 91.8 | 48.1 | 84.2 | 73.5 | |
| DiffAMAttack Type=Makeup-Based2026.06 | 59.9 | — | — | — | — | — | 93.5 | 43.6 | 84.1 | 70.2 | |
| TIP-IMAttack Type=Noise-Based2026.06 | 50.5 | — | — | — | — | — | 45.3 | 15.1 | 55.3 | 41.5 | |
| AMT-GANAttack Type=Makeup-Based2026.06 | 49.1 | — | — | — | — | — | 89.6 | 32.1 | 72.4 | 60.8 | |
| Clip2ProtectAttack Type=Makeup-Based2026.06 | 41.5 | — | — | — | — | — | 68.3 | 42.1 | 50.8 | 50.6 | |
| DiffProtectAttack Type=Facial Semantic Invariant2026.06 | 33.9 | — | — | — | — | — | 52.6 | 23.4 | 47.2 | 39.2 | |
| Adv-DiffusionAttack Type=Facial Semantic Invariant2026.06 | 25.9 | — | — | — | — | — | 46.6 | 17.5 | 40.6 | 32.6 | |
| PGDAttack Type=Noise-Based2026.06 | 19.5 | — | — | — | — | — | 40 | 3.8 | 41 | 26 | |
| CleanAttack Type=Baseline2026.06 | 0.9 | — | — | — | — | — | 3.3 | 0.6 | 6.3 | 2.77 | |
| Adv MakeupCategory=Makeup-based2024.05 | — | 29.64 | 10.03 | 0.97 | 22.38 | 14.72 | — | — | — | — | |
| AMT-GANCategory=Makeup-based2024.05 | — | 89.64 | 49.12 | 32.13 | 72.43 | 52.84 | — | — | — | — | |
| Clean2024.05 | — | 2.71 | 3.61 | 0.6 | 5.11 | 4.61 | — | — | — | — | |
| CLIP2ProtectCategory=Makeup-based2024.05 | — | 91.57 | 53.31 | 47.91 | 79.94 | 64.9 | — | — | — | — | |
| DiffAMCategory=Makeup-based2024.05 | — | 95.66 | 66.75 | 65.44 | 92.04 | 77.88 | — | — | — | — | |
| MI-FGSMCategory=Noise-based2024.05 | — | 48.9 | 25.57 | 6.31 | 45.01 | 30.63 | — | — | — | — | |
| PGDCategory=Noise-based2024.05 | — | 40.09 | 19.59 | 3.82 | 41.09 | 25.6 | — | — | — | — | |
| TI-DIMCategory=Noise-based2024.05 | — | 56.36 | 34.18 | 22.11 | 48.3 | 41.64 | — | — | — | — | |
| TIP-IMCategory=Noise-based2024.05 | — | 65.89 | 43.57 | 63.5 | 46.48 | 50.06 | — | — | — | — |