Face Verification on LADN-Dataset
91.57PSR (IRSE50)CLIP2Protect
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| CLIP2ProtectAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 91.57 | 53.31 | 47.91 | 79.94 | |
| AMT-GANAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 89.64 | 49.12 | 32.13 | 72.43 | |
| TIP-IMAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 65.89 | 43.57 | 63.5 | 46.48 | |
| TI-DIMAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 56.36 | 34.18 | 22.11 | 48.3 | |
| MI-FGSMAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 48.9 | 25.57 | 6.31 | 45.01 | |
| PGDAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 40.09 | 19.59 | 3.82 | 41.09 | |
| Adv-MakeupAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 29.64 | 10.03 | 0.97 | 22.38 | |
| InvertedAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 6.8 | 4.51 | 0.25 | 11.66 | |
| CleanAttack Type=Black-box impersonation, Surrogate Models=Other three FR systems2023.06 | 2.71 | 3.61 | 0.6 | 5.11 |