ResearchBenchmarksFace Identity Protection on FFHQ (train)Face Identity Protection on FFHQ (train)Follow0.54Robustness (Baseline)No attack0.16560.26280.360.4572Dec 8, 2025Evaluation resultsMethodMethodLinksRobustness (Baseline)Robustness (Noise)Robustness (Color-space)Robustness (Blur)Robustness (Stylization)Robustness (Compression)Robustness (Geometric)Robustness (Overall)No attack2025.120.540.5030.5130.5510.4850.4980.4410.496PGD-EOT2025.120.3080.3650.3480.3040.3170.3270.2990.328DF-RAP2025.120.2730.3860.3450.490.3220.3540.3710.373PGD2025.120.1910.3590.3120.5260.3060.3730.3660.364Ours2025.120.180.260.2430.2420.2140.2410.2610.242