Concept Erasure on I2P (Body Part Exposure Metrics)
2Number of Exposed Body PartsADVUNLEARN
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| ADVUNLEARNEEB variant=EEBdata, Threat Model=Black-box2025.04 | 2 | -88.9 | |
| RECELEREEB variant=EEBsurface, Threat Model=Black-box2025.04 | 7 | -79.4 | |
| ADVUNLEARNEEB variant=Base (clean)2025.04 | 18 | — | |
| RECELEREEB variant=EEBshallow, Threat Model=White-box2025.04 | 29 | -14.7 | |
| RECELEREEB variant=Base (clean)2025.04 | 34 | — | |
| ADVUNLEARNEEB variant=EEBshallow, Threat Model=White-box2025.04 | 38 | 111.1 | |
| ADVUNLEARNEEB variant=EEBdeep, Threat Model=White-box2025.04 | 38 | 111.1 | |
| MACEEEB variant=EEBshallow, Threat Model=White-box2025.04 | 43 | -4.4 | |
| MACEEEB variant=Base (clean)2025.04 | 45 | — | |
| RECEEEB variant=Base (clean)2025.04 | 52 | — | |
| RECEEEB variant=EEBshallow, Threat Model=White-box2025.04 | 52 | 0 | |
| MACEEEB variant=EEBdata, Threat Model=Black-box2025.04 | 54 | 20 | |
| ADVUNLEARNEEB variant=EEBsurface, Threat Model=Black-box2025.04 | 63 | 250 | |
| UCEEEB variant=Base (clean)2025.04 | 83 | — | |
| RECEEEB variant=EEBsurface, Threat Model=Black-box2025.04 | 92 | 76.9 | |
| MACEEEB variant=EEBsurface, Threat Model=Black-box2025.04 | 107 | 137.8 | |
| ESDEEB variant=EEBdata, Threat Model=Black-box2025.04 | 126 | -36 | |
| RECELEREEB variant=EEBdeep, Threat Model=White-box2025.04 | 131 | 285.3 | |
| UCEEEB variant=EEBsurface, Threat Model=Black-box2025.04 | 137 | 65.1 | |
| RECELEREEB variant=EEBdata, Threat Model=Black-box2025.04 | 156 | 358.8 | |
| ESDEEB variant=Base (clean)2025.04 | 197 | — | |
| ESDEEB variant=EEBsurface, Threat Model=Black-box2025.04 | 218 | 10.7 | |
| UCEEEB variant=EEBdata, Threat Model=Black-box2025.04 | 262 | 215.7 | |
| MACEEEB variant=EEBdeep, Threat Model=White-box2025.04 | 315 | 600 | |
| RECEEEB variant=EEBdata, Threat Model=Black-box2025.04 | 333 | 540.4 | |
| UCEEEB variant=EEBshallow, Threat Model=White-box2025.04 | 484 | 483.1 | |
| ESDEEB variant=EEBshallow, Threat Model=White-box2025.04 | 765 | 288.3 | |
| RECEEEB variant=EEBdeep, Threat Model=White-box2025.04 | 819 | 1,475 | |
| ESDEEB variant=EEBdeep, Threat Model=White-box2025.04 | 820 | 316.2 | |
| UCEEEB variant=EEBdeep, Threat Model=White-box2025.04 | 897 | 980.7 |