Face Recognition Attack on CelebA-HQ
90.6ASR (IR152)Adv-TGD
Evaluation results
| Method | Links | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Adv-TGDCategory=Portrait / Semantic2026.06 | 90.6 | 94.8 | 63.4 | 96.2 | 85.9 | — | — | — | — | — | — | — | — | — | — | |
| DiffAIMCategory=Makeup / Attribute2026.06 | 80.56 | 90.37 | 64.14 | 93.1 | 82.85 | — | — | — | — | — | — | — | — | — | — | |
| Adv-CPGCategory=Portrait / Semantic2026.06 | 76.96 | 88.72 | 63.5 | 87.95 | 79.65 | — | — | — | — | — | — | — | — | — | — | |
| PhantomFAR=0.01, λori=0.0, λtgt=1.02026.06 | 73.7 | 96 | 40.7 | 93.4 | 76 | — | — | — | — | — | — | — | — | — | — | |
| P3-MaskCategory=Noise-Based2026.06 | 71.27 | 80.9 | 58.43 | 67.55 | 69.58 | — | — | — | — | — | — | — | — | — | — | |
| DiffAMFAR=0.012026.06 | 63.1 | 92 | 64.7 | 83.5 | 75.8 | — | — | — | — | — | — | — | — | — | — | |
| DiffAMCategory=Makeup / Attribute2026.06 | 62.14 | 86.97 | 61.1 | 81.97 | 74.49 | — | — | — | — | — | — | — | — | — | — | |
| TCA2Category=Portrait / Semantic2026.06 | 52.5 | 76.21 | 40.72 | 71.92 | 60.76 | — | — | — | — | — | — | — | — | — | — | |
| RMT-GANFAR=0.012026.06 | 51.8 | 91.4 | 31 | 93.4 | 66.9 | — | — | — | — | — | — | — | — | — | — | |
| Adv-DiffusionCategory=Portrait / Semantic2026.06 | 51.25 | 79.22 | 33.9 | 68.66 | 57.14 | — | — | — | — | — | — | — | — | — | — | |
| TIP-IMFAR=0.012026.06 | 50 | 72.1 | 11.5 | 79 | 53.2 | — | — | — | — | — | — | — | — | — | — | |
| CLIP2ProtectFAR=0.012026.06 | 48.4 | 81.1 | 41.7 | 75.2 | 61.6 | — | — | — | — | — | — | — | — | — | — | |
| CLIP2ProtectCategory=Makeup / Attribute2026.06 | 46.2 | 78.53 | 41.29 | 71.43 | 61.2 | — | — | — | — | — | — | — | — | — | — | |
| DFPPCategory=Makeup / Attribute2026.06 | 45 | 78.37 | 44.01 | 69.97 | 63.24 | — | — | — | — | — | — | — | — | — | — | |
| TIP-IMCategory=Noise-Based2026.06 | 40.02 | 55.57 | 37.9 | 48.07 | 50.04 | — | — | — | — | — | — | — | — | — | — | |
| TI-DIMFAR=0.012026.06 | 36.2 | 63.6 | 15.3 | 57.1 | 43.1 | — | — | — | — | — | — | — | — | — | — | |
| AMT-GANFAR=0.012026.06 | 35.1 | 77 | 16.6 | 50.7 | 44.9 | — | — | — | — | — | — | — | — | — | — | |
| TI-DIMCategory=Noise-Based2026.06 | 34.08 | 60.51 | 13.27 | 51.25 | 41.41 | — | — | — | — | — | — | — | — | — | — | |
| MI-FGSMFAR=0.012026.06 | 25 | 45.8 | 2.6 | 45.9 | 29.8 | — | — | — | — | — | — | — | — | — | — | |
| Adv-makeupFAR=0.012026.06 | 9.5 | 17.2 | 1.4 | 22 | 12.5 | — | — | — | — | — | — | — | — | — | — | |
| Clean2026.06 | 2.1 | 5.61 | 0.8 | 13.6 | 4.31 | — | — | — | — | — | — | — | — | — | — | |
| Adv-Diffusion2026.06 | — | — | — | — | — | 11.2 | 40 | 20.6 | 79.4 | 13.7 | 37.2 | 15.8 | 59.2 | 15.3 | 53.9 | |
| Clip2Protect2026.06 | — | — | — | — | — | 13.4 | 42.5 | 33.6 | 68.8 | 18.6 | 42.4 | 20.2 | 60 | 21.4 | 53.4 | |
| DiffAM2026.06 | — | — | — | — | — | 29.4 | 55.6 | 50.2 | 89.6 | 22.6 | 61 | 30 | 72.4 | 33 | 69.9 | |
| DiffProtect2026.06 | — | — | — | — | — | 15.6 | 46.2 | 16.8 | 68.4 | 15.4 | 47 | 12.4 | 46.8 | 15 | 52.1 | |
| EFPP2026.06 | — | — | — | — | — | 44.4 | 71.2 | 61.4 | 92.4 | 23.6 | 63.2 | 41.2 | 81.4 | 42.6 | 77 | |
| Flux-GuardFoundation Model=FLUX.1-dev, Inversion Steps=25, Learning Rate=1e-22026.06 | — | — | — | — | — | 46.6 | 82.2 | 78.8 | 98.9 | 26.3 | 67.8 | 82.4 | 95.4 | 58.5 | 86 |