Defense against Model Inversion Attack on CelebA high-quality (test)
89.98Accuracy (Acc)Trap-MID
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Trap-MIDArchitecture=DenseNet-169, Fine-tuned=false2024.11 | 89.98 | 55.53 | 71.25 | 0.9571 | 358.67 | 49.37 | |
| Trap-MIDArchitecture=ResNeSt-101, Fine-tuned=false2024.11 | 88.48 | 74.47 | 89.61 | 0.8188 | 319.48 | 42.36 | |
| Trap-MIDArchitecture=ResNet-152, Fine-tuned=false2024.11 | 88.02 | 65.93 | 83.17 | 0.8606 | 344.45 | 41.61 | |
| Unprotected (-*)Architecture=ResNeSt-1012024.11 | 87.35 | 82.96 | 95.44 | 0.7506 | 299.73 | 44.04 | |
| Trap-MIDArchitecture=DenseNet-169, Fine-tuned=true2024.11 | 86.82 | 1.79 | 4.15 | 1.5646 | 552.48 | 74.47 | |
| Unprotected (-*)Architecture=ResNet-1522024.11 | 86.78 | 80.61 | 94.58 | 0.7362 | 312.58 | 40.43 | |
| Unprotected (-*)Architecture=DenseNet-1692024.11 | 85.39 | 73.14 | 90.51 | 0.7635 | 312.32 | 43.24 | |
| Trap-MIDArchitecture=ResNet-152, Fine-tuned=true2024.11 | 83.82 | 0.25 | 0.9 | 1.5807 | 559.08 | 66.54 | |
| NegLSArchitecture=ResNet-1522024.11 | 83.59 | 26.41 | 49.96 | 1.042 | 441.67 | 61.3 | |
| Trap-MIDArchitecture=ResNeSt-101, Fine-tuned=true2024.11 | 83.22 | 15.58 | 26.95 | 1.3162 | 471.61 | 64.34 |