List your company
ResearchFormerly WizWand

Face Template Inversion Attack on CelebA-HQ

97.15Type-I TARCLIP-FTI
10.944433.324755.70578.0853Dec 17, 2025
Updated 8mo ago

Evaluation results

MethodLinks
CLIP-FTIF_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=ElasticFace, FAR (False Acceptance Rate)=10^-32025.1297.15——
Otroshi et al.F_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=ElasticFace, FAR (False Acceptance Rate)=10^-32025.1296.91——
CLIP-FTIF_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=ArcFace, FAR (False Acceptance Rate)=10^-32025.1295.43——
CLIP-FTIF_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=ArcFace, FAR (False Acceptance Rate)=10^-32025.1295.35——
Otroshi et al.F_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=ArcFace, FAR (False Acceptance Rate)=10^-32025.1295.22——
CLIP-FTIF_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=ElasticFace, FAR (False Acceptance Rate)=10^-32025.1291.84——
Otroshi et al.F_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=ArcFace, FAR (False Acceptance Rate)=10^-32025.1289.79——
Otroshi et al.F_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=ElasticFace, FAR (False Acceptance Rate)=10^-32025.1285.31——
CLIP-FTIF_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=HRNet, FAR (False Acceptance Rate)=10^-32025.1264.81——
Otroshi et al.F_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=HRNet, FAR (False Acceptance Rate)=10^-32025.1262.99——
CLIP-FTIF_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=HRNet, FAR (False Acceptance Rate)=10^-32025.1259.15——
Otroshi et al.F_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=HRNet, FAR (False Acceptance Rate)=10^-32025.1244.29——
CLIP-FTIF_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=AttentionNet, FAR (False Acceptance Rate)=10^-32025.1232.67——
Otroshi et al.F_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=AttentionNet, FAR (False Acceptance Rate)=10^-32025.1232.02——
CLIP-FTIF_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=GhostNet, FAR (False Acceptance Rate)=10^-32025.1228.87——
Otroshi et al.F_database (Leaked Backbone)=ElasticFace, F_loss (Surrogate Backbone)=ArcFace, F_target (Target Backbone)=GhostNet, FAR (False Acceptance Rate)=10^-32025.1224——
CLIP-FTIF_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=AttentionNet, FAR (False Acceptance Rate)=10^-32025.1223.06——
CLIP-FTIF_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=GhostNet, FAR (False Acceptance Rate)=10^-32025.1222.97——
Otroshi et al.F_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=GhostNet, FAR (False Acceptance Rate)=10^-32025.1215.22——
Otroshi et al.F_database (Leaked Backbone)=ArcFace, F_loss (Surrogate Backbone)=ElasticFace, F_target (Target Backbone)=AttentionNet, FAR (False Acceptance Rate)=10^-32025.1214.26——
CLIP-FTIF_database=ArcFace, F_loss=ElasticFace2025.12—95.3599.37
CLIP-FTIF_database=ElasticFace, F_loss=ArcFace2025.12—97.1599.67
Otroshi et al.F_database=ArcFace, F_loss=ElasticFace2025.12—89.7998.27
Otroshi et al.F_database=ElasticFace, F_loss=ArcFace2025.12—96.9199.6