Deep Leakage Defense on CIFAR-10
1SSIMGround Truth
Evaluation results
| Method | Links | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ground TruthBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 1 | 0 | — | 0 | 3.843 | 1 | 73 | — | — | — | — | — | |
| Deep Leakage with Generative Flow Matching DenoiserVRAM(GB)=1.14, TFLOPs=1.1152026.01 | 0.621 | 0.669 | 20.861 | — | — | — | — | 0.288 | 0.087 | 0.023 | 0.057 | — | |
| NoneBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.609 | 1.083 | 19.127 | 0.323 | 3.832 | 1 | 73 | — | — | — | — | — | |
| SMEVRAM(GB)=0.824, TFLOPs=0.3022026.01 | 0.56 | 0.774 | 18.314 | — | — | — | — | 0.312 | 0.075 | 0.031 | 0.064 | — | |
| ClippingBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.46 | 1.339 | 16.777 | 0.515 | 3.126 | 1.03 | 66 | — | — | — | — | — | |
| CompressionBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.321 | 1.608 | 13.882 | 0.462 | 3.067 | 1.2 | 56 | — | — | — | — | — | |
| Gaussian NoiseBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.273 | 2.215 | 13.509 | 0.515 | 2.353 | 1.02 | 63 | — | — | — | — | — | |
| FedADGBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.182 | 1.562 | 12.332 | 0.492 | 2.651 | 1.3 | 65 | — | — | — | — | — | |
| DLFVRAM(GB)=0.654, TFLOPs=3.662026.01 | 0.171 | 1.827 | 12.708 | — | — | — | — | 0.608 | 0.239 | 0.068 | 0.332 | — | |
| GGLVRAM(GB)=2.574, TFLOPs=5.6772026.01 | 0.164 | 2.948 | 11.415 | — | — | — | — | 0.505 | 0.114 | 0.092 | 0.092 | — | |
| GradInversionVRAM(GB)=0.742, TFLOPs=0.0032026.01 | 0.159 | 0.992 | 8.695 | — | — | — | — | 0.598 | 0.18 | 0.152 | 0.653 | — | |
| DCSBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.155 | 2.645 | 12.223 | 0.586 | 1.822 | 4.18 | 60 | — | — | — | — | — | |
| SpooFLBackbone=ResNet18, Batch size=8, Attack Method=SME2026.01 | 0.139 | 6.513 | 11.507 | 0.576 | 1.689 | 1 | 63 | — | — | — | — | — | |
| HCBMNEC=5, Aggregation=EBM2026.05 | — | — | — | — | — | — | — | — | — | — | — | 0 | |
| HCBMNEC=5, Aggregation=TreeHFD2026.05 | — | — | — | — | — | — | — | — | — | — | — | 0 | |
| HCBMNEC=10, Aggregation=EBM2026.05 | — | — | — | — | — | — | — | — | — | — | — | 3 | |
| HCBMNEC=10, Aggregation=TreeHFD2026.05 | — | — | — | — | — | — | — | — | — | — | — | 0 | |
| Linear CBMNEC=52026.05 | — | — | — | — | — | — | — | — | — | — | — | 43 | |
| Linear CBMNEC=102026.05 | — | — | — | — | — | — | — | — | — | — | — | 49 |