Face Verification on FFHQ
93.1ASR (IR152)SIDeR
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| SIDeRvariant=Decoy2026.02 | 93.1 | 98.3 | 96.5 | 98.4 | 97.16 | — | |
| SIDeRvariant=Recovery-Unauthorized2026.02 | 93.1 | 98.3 | 96.7 | 98.6 | 97.26 | — | |
| SIDeRvariant=Cover2026.02 | 92.7 | 98.6 | 96.3 | 99.4 | 97.33 | — | |
| SIDeRvariant=Hidden2026.02 | 92.6 | 98.6 | 96.5 | 99.5 | 97.36 | — | |
| Adv-TGDCategory=Portrait / Semantic2026.06 | 88.8 | 94.6 | 63.4 | — | 85.9 | 95.4 | |
| DiffAIMCategory=Makeup / Attribute2026.06 | 82.2 | 91.04 | 68.21 | — | 82.85 | 94.21 | |
| Adv-CPGattack_type=Portraits, surrogate_models=leave-one-out2025.03 | 75.26 | 91.03 | 63.84 | 89.94 | 79.65 | — | |
| Adv-CPGcategory=Facial Semantic Invariant2026.02 | 75.26 | 91.03 | 63.84 | 89.94 | 79.65 | — | |
| Adv-CPGCategory=Portrait / Semantic2026.06 | 75.26 | 91.03 | 62.84 | — | 79.65 | 89.94 | |
| P3-Maskattack_type=Facial Semantic Invariant, surrogate_models=leave-one-out2025.03 | 73.18 | 85.35 | 57.92 | 70.69 | 71.74 | — | |
| P3-Maskcategory=Facial Semantic Invariant2026.02 | 73.18 | 85.35 | 57.92 | 70.69 | 71.74 | — | |
| P3-MaskCategory=Noise-Based2026.06 | 70.98 | 82.79 | 56.18 | — | 69.58 | 68.57 | |
| GIFTattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 69.72 | 87.64 | 54.49 | 82.93 | 74.4 | — | |
| GIFTcategory=Makeup-Based2026.02 | 69.72 | 87.64 | 54.49 | 82.93 | 74.4 | — | |
| DiffAMattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 67.24 | 90.3 | 64.96 | 89.56 | 76.79 | — | |
| DiffAMcategory=Makeup-Based2026.02 | 67.24 | 90.3 | 64.96 | 89.56 | 76.79 | — | |
| DiffAMCategory=Makeup / Attribute2026.06 | 65.22 | 87.59 | 63.01 | — | 74.49 | 86.87 | |
| DiffProtectattack_type=Facial Semantic Invariant, surrogate_models=leave-one-out2025.03 | 57.62 | 60.14 | 49.38 | 67.52 | 59.16 | — | |
| DiffProtectcategory=Facial Semantic Invariant2026.02 | 57.62 | 60.14 | 49.38 | 67.52 | 59.16 | — | |
| DFPPattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 54.25 | 90.63 | 52.13 | 80.09 | 69.2 | — | |
| DFPPcategory=Makeup-Based2026.02 | 54.25 | 90.63 | 52.13 | 80.09 | 69.2 | — | |
| TCA2Category=Portrait / Semantic2026.06 | 53.63 | 77.31 | 41.62 | — | 60.76 | 72.21 | |
| DFPPCategory=Makeup / Attribute2026.06 | 52.62 | 87.91 | 50.57 | — | 63.24 | 77.69 | |
| Clip2Protectattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 52.12 | 86.53 | 45.01 | 76.29 | 63.09 | — | |
| Clip2Protectcategory=Makeup-Based2026.02 | 52.12 | 86.53 | 45.01 | 76.29 | 63.09 | — | |
| SD4Privacyattack_type=Facial Semantic Invariant, surrogate_models=leave-one-out2025.03 | 51.31 | 79.94 | 43.57 | 71.55 | 65.16 | — | |
| SD4Privacycategory=Facial Semantic Invariant2026.02 | 51.31 | 79.94 | 43.57 | 71.55 | 65.16 | — | |
| Adv-Diffusionattack_type=Facial Semantic Invariant, surrogate_models=leave-one-out2025.03 | 50.93 | 81.76 | 30.84 | 67.52 | 58.91 | — | |
| Adv-Diffusioncategory=Facial Semantic Invariant2026.02 | 50.93 | 81.76 | 30.84 | 67.52 | 58.91 | — | |
| CLIP2ProtectCategory=Makeup / Attribute2026.06 | 50.56 | 83.93 | 43.66 | — | 61.2 | 74 | |
| Adv-DiffusionCategory=Portrait / Semantic2026.06 | 49.4 | 79.31 | 29.91 | — | 57.14 | 65.49 | |
| MI-FGSMattack_type=Noise-Based, surrogate_models=leave-one-out2025.03 | 46.31 | 69.24 | 20.62 | 69.26 | 51.07 | — | |
| MI-FGSMcategory=Noise-Based2026.02 | 46.31 | 69.24 | 20.62 | 69.26 | 51.07 | — | |
| TIP-IMattack_type=Noise-Based, surrogate_models=leave-one-out2025.03 | 46.25 | 67.38 | 59.82 | 52.03 | 51.58 | — | |
| TIP-IMcategory=Noise-Based2026.02 | 46.25 | 67.38 | 59.82 | 52.03 | 51.58 | — | |
| TIP-IMCategory=Noise-Based2026.06 | 44.86 | 65.36 | 58.03 | — | 50.04 | 50.47 | |
| TI-DIMattack_type=Noise-Based, surrogate_models=leave-one-out2025.03 | 43.57 | 65.89 | 14.72 | 53.31 | 42.69 | — | |
| TI-DIMcategory=Noise-Based2026.02 | 43.57 | 65.89 | 14.72 | 53.31 | 42.69 | — | |
| TI-DIMCategory=Noise-Based2026.06 | 42.26 | 63.91 | 14.28 | — | 41.41 | 51.71 | |
| DPGattack_type=Facial Semantic Invariant, surrogate_models=leave-one-out2025.03 | 34.87 | 76.82 | 36.57 | 69.03 | 53.11 | — | |
| DPGcategory=Facial Semantic Invariant2026.02 | 34.87 | 76.82 | 36.57 | 69.03 | 53.11 | — | |
| PGDattack_type=Noise-Based, surrogate_models=leave-one-out2025.03 | 31.64 | 75.38 | 18.59 | 63.12 | 46.35 | — | |
| PGDcategory=Noise-Based2026.02 | 31.64 | 75.38 | 18.59 | 63.12 | 46.35 | — | |
| Adv-Hatattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 13.77 | 15.36 | 5.26 | 9.83 | 10.46 | — | |
| Adv-Hatcategory=Makeup-Based2026.02 | 13.77 | 15.36 | 5.26 | 9.83 | 10.46 | — | |
| AMT-GANattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 11.52 | 56.02 | 9.74 | 41.32 | 29.6 | — | |
| AMT-GANcategory=Makeup-Based2026.02 | 11.52 | 56.02 | 9.74 | 41.32 | 29.6 | — | |
| Adv-Makeupattack_type=Makeup-Based, surrogate_models=leave-one-out2025.03 | 10.03 | 25.57 | 1.08 | 20.38 | 14.15 | — | |
| Adv-Makeupcategory=Makeup-Based2026.02 | 10.03 | 25.57 | 1.08 | 20.38 | 14.15 | — | |
| FGSMattack_type=Noise-Based, surrogate_models=leave-one-out2025.03 | 9.86 | 48.53 | 4.23 | 51.48 | 28.29 | — | |
| FGSMcategory=Noise-Based2026.02 | 9.86 | 48.53 | 4.23 | 51.48 | 28.29 | — | |
| Clean2026.06 | 3.2 | 2.2 | 2.1 | — | 4.31 | 4.9 | |
| Cleanattack_type=None, surrogate_models=None2025.03 | 3.14 | 4.73 | 1.49 | 8.96 | 5.38 | — | |
| Cleantype=baseline2026.02 | 3.14 | 4.73 | 1.49 | 8.96 | 5.38 | — |