Imprint Forgery Attack on ImageNet
100Detection RateGS
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| GSAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 100 | 99.84 | 100 | |
| T2SMarkAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 100 | 99.99 | 100 | |
| GSAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 100 | 99.72 | 100 | |
| T2SMarkAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 100 | 99.99 | 100 | |
| TRAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 99 | — | 99.94 | |
| PRCAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 99 | 98.46 | — | |
| TRAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 99 | — | 99.9 | |
| PRCAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 89 | 88.15 | — | |
| TR+PAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 6 | — | 56.42 | |
| TR+PAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 5 | — | 56.53 | |
| GS+PAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 1 | 55.12 | 80.44 | |
| GS+PAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 0 | 54.79 | 78.01 | |
| PRC+PAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 0 | 50.12 | — | |
| T2SMark+PAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 0 | 50 | 53.39 | |
| PRC+PAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 0 | 49.44 | — | |
| T2SMark+PAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 0 | 50.27 | 55.93 |