Face Privacy Protection on CelebA-HQ
93.3PSR (IRSE50)MAP
Evaluation results
| Method | Links | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MAPMethod Category=Emotion-based, Setting=Black-box, FAR=1e-22026.03 | 93.3 | — | — | — | — | 78.98 | 72.35 | 92.5 | — | — | — | — | — | — | — | — | — | |
| PhantomDeepfakes=UniFace, lambda_ori=1.0, lambda_tgt=0.52026.06 | 93 | — | — | — | — | 97.6 | 97 | 96.9 | — | — | — | — | — | — | — | — | 96.1 | |
| PhantomDeepfakes=SimSwap, lambda_ori=1.0, lambda_tgt=0.52026.06 | 92.7 | — | — | — | — | 96.2 | 97.9 | 98.6 | — | — | — | — | — | — | — | — | 96.4 | |
| DiffAMMethod Category=Makeup-based, Setting=Black-box, FAR=1e-22026.03 | 92 | — | — | — | — | 63.13 | 64.67 | 83.35 | — | — | — | — | — | — | — | — | — | |
| PhantomDeepfakes=INSwapper, lambda_ori=1.0, lambda_tgt=0.52026.06 | 82 | — | — | — | — | 78.3 | 84 | 95.3 | — | — | — | — | — | — | — | — | 84.9 | |
| CLIP2ProtectMethod Category=Makeup-based, Setting=Black-box, FAR=1e-22026.03 | 81.1 | — | — | — | — | 48.42 | 41.72 | 75.26 | — | — | — | — | — | — | — | — | — | |
| TIP-IMDeepfakes=SimSwap2026.06 | 77.5 | — | — | — | — | 65.7 | 75.4 | 79 | — | — | — | — | — | — | — | — | 74.4 | |
| AMT-GANMethod Category=Makeup-based, Setting=Black-box, FAR=1e-22026.03 | 76.96 | — | — | — | — | 35.13 | 16.62 | 50.71 | — | — | — | — | — | — | — | — | — | |
| CLIP2ProtectDeepfakes=SimSwap2026.06 | 72.8 | — | — | — | — | 74.1 | 83.7 | 88.4 | — | — | — | — | — | — | — | — | 79.8 | |
| TIP-IMDeepfakes=INSwapper2026.06 | 66 | — | — | — | — | 42.2 | 60.4 | 68.4 | — | — | — | — | — | — | — | — | 59.3 | |
| TI-DIMMethod Category=Noise-based, Setting=Black-box, FAR=1e-22026.03 | 63.63 | — | — | — | — | 36.17 | 15.3 | 57.12 | — | — | — | — | — | — | — | — | — | |
| TIP-IMMethod Category=Noise-based, Setting=Black-box, FAR=1e-22026.03 | 54.4 | — | — | — | — | 37.23 | 40.74 | 48.72 | — | — | — | — | — | — | — | — | — | |
| CLIP2ProtectDeepfakes=UniFace2026.06 | 50.5 | — | — | — | — | 77.1 | 75.7 | 70 | — | — | — | — | — | — | — | — | 68.3 | |
| CLIP2ProtectDeepfakes=INSwapper2026.06 | 49.5 | — | — | — | — | 44.7 | 64 | 73.8 | — | — | — | — | — | — | — | — | 58 | |
| AMT-GANDeepfakes=SimSwap2026.06 | 48.6 | — | — | — | — | 53.4 | 85.6 | 58 | — | — | — | — | — | — | — | — | 61.4 | |
| MI-FGSMMethod Category=Noise-based, Setting=Black-box, FAR=1e-22026.03 | 45.79 | — | — | — | — | 25.03 | 2.58 | 45.85 | — | — | — | — | — | — | — | — | — | |
| PGDMethod Category=Noise-based, Setting=Black-box, FAR=1e-22026.03 | 36.87 | — | — | — | — | 20.68 | 1.85 | 43.99 | — | — | — | — | — | — | — | — | — | |
| DiffAMDeepfakes=SimSwap2026.06 | 31.9 | — | — | — | — | 28.3 | 70.7 | 53 | — | — | — | — | — | — | — | — | 46 | |
| TIP-IMDeepfakes=UniFace2026.06 | 30.9 | — | — | — | — | 68.1 | 42.7 | 34.7 | — | — | — | — | — | — | — | — | 44.1 | |
| Adv-MakeupMethod Category=Makeup-based, Setting=Black-box, FAR=1e-22026.03 | 21.95 | — | — | — | — | 9.48 | 1.37 | 22 | — | — | — | — | — | — | — | — | — | |
| AMT-GANDeepfakes=INSwapper2026.06 | 21.8 | — | — | — | — | 27.5 | 72.8 | 35.9 | — | — | — | — | — | — | — | — | 39.5 | |
| AMT-GANDeepfakes=UniFace2026.06 | 19.1 | — | — | — | — | 56.3 | 79.3 | 28.4 | — | — | — | — | — | — | — | — | 45.8 | |
| DiffAMDeepfakes=INSwapper2026.06 | 14 | — | — | — | — | 9.2 | 47.3 | 32.8 | — | — | — | — | — | — | — | — | 25.8 | |
| DiffAMDeepfakes=UniFace2026.06 | 9.5 | — | — | — | — | 33.7 | 58.2 | 27.3 | — | — | — | — | — | — | — | — | 32.2 | |
| CleanSetting=Black-box, FAR=1e-22026.03 | 7.29 | — | — | — | — | 3.8 | 1.08 | 12.68 | — | — | — | — | — | — | — | — | — | |
| CleanDeepfakes=INSwapper2026.06 | 0.3 | — | — | — | — | 0.3 | 1 | 0.6 | — | — | — | — | — | — | — | — | 0.6 | |
| CleanDeepfakes=UniFace2026.06 | 0 | — | — | — | — | 0 | 0.3 | 0 | — | — | — | — | — | — | — | — | 0.1 | |
| CleanDeepfakes=SimSwap2026.06 | 0 | — | — | — | — | 0 | 2.4 | 0.5 | — | — | — | — | — | — | — | — | 0.7 | |
| Adv-Diffusion2026.06 | — | 30.51 | 14.85 | 51.23 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| Adv-Makeup2026.03 | — | 4.22 | 34.51 | 98.5 | 0 | — | — | — | — | — | — | — | — | — | — | — | — | |
| AMT-GAN2026.03 | — | 34.44 | 19.5 | 78.7 | 38.12 | — | — | — | — | — | — | — | — | — | — | — | — | |
| AMT-GANensemble strategy=from [19]2026.06 | — | — | — | — | — | — | — | — | 71.1 | 52.8 | 65.2 | 47.3 | 87.3 | 70.9 | 76.5 | 59.4 | — | |
| Clean2026.06 | — | — | — | — | — | — | — | — | 7.3 | 4.4 | 4 | 3.3 | 16.2 | 7.7 | 18 | 10.8 | — | |
| Clip2Protect2026.06 | — | 28.11 | 18.92 | 55.37 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| CLIP2Protect2026.03 | — | 26.62 | 19.31 | 75 | 50.18 | — | — | — | — | — | — | — | — | — | — | — | — | |
| CLIP2Protectensemble strategy=from [19]2026.06 | — | — | — | — | — | — | — | — | 87.7 | 73.3 | 78.4 | 61.3 | 83.3 | 65.8 | 94.5 | 85.2 | — | |
| DiffAM2026.03 | — | 26.1 | 20.52 | 88.6 | 63.13 | — | — | — | — | — | — | — | — | — | — | — | — | |
| DiffAM2026.06 | — | 27.42 | 18.81 | 59.12 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| DiffAMensemble strategy=from [19]2026.06 | — | — | — | — | — | — | — | — | 68.9 | 42.1 | 44.5 | 25.6 | 78 | 55.1 | 80.5 | 57.4 | — | |
| DiffProtect2026.06 | — | 25.1 | 25.23 | 82.62 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| EFPP2026.06 | — | 25.73 | 22.6 | 77.71 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| Flux-Guard2026.06 | — | 25.19 | 24.71 | 82.63 | — | — | — | — | — | — | — | — | — | — | — | — | — | |
| MAP2026.03 | — | 24.21 | 29.07 | 87.6 | 73.76 | — | — | — | — | — | — | — | — | — | — | — | — | |
| Phantomlambda_ori=1.0, lambda_tgt=0.5, ensemble strategy=from [19]2026.06 | — | — | — | — | — | — | — | — | 95.8 | 91.9 | 91.6 | 85.4 | 93.9 | 83.9 | 98.8 | 97.3 | — | |
| TIP-IMensemble strategy=from [19]2026.06 | — | — | — | — | — | — | — | — | 84.5 | 73.3 | 65.2 | 60 | 82.4 | 66.6 | 81.9 | 68.3 | — |