Imprint Forgery Attack on SDP prompt v1 (val)
100Detection RateTR
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| TRAttacker Model=SD 2.1, Gradient Step=502026.01 | 100 | — | 23.32 | |
| TRAttacker Model=SD 2.1, Gradient Step=1002026.01 | 100 | — | 22.12 | |
| TRAttacker Model=SD 2.1, Gradient Step=1502026.01 | 100 | — | 21.34 | |
| GSAttacker Model=SD 2.1, Gradient Step=502026.01 | 100 | 0.9998 | 23.36 | |
| GSAttacker Model=SD 2.1, Gradient Step=1002026.01 | 100 | 1 | 22.16 | |
| GSAttacker Model=SD 2.1, Gradient Step=1502026.01 | 100 | 1 | 21.4 | |
| PRCAttacker Model=SD 2.1, Gradient Step=502026.01 | 100 | 1 | 23.37 | |
| PRCAttacker Model=SD 2.1, Gradient Step=1002026.01 | 100 | 1 | 22.17 | |
| PRCAttacker Model=SD 2.1, Gradient Step=1502026.01 | 100 | 1 | 21.4 | |
| GS++Attacker Model=SD 2.1, Gradient Step=502026.01 | 100 | 0.9995 | 23.37 | |
| GS++Attacker Model=SD 2.1, Gradient Step=1002026.01 | 100 | 0.9999 | 22.18 | |
| GS++Attacker Model=SD 2.1, Gradient Step=1502026.01 | 100 | 1 | 21.42 | |
| TRAttacker Model=SD 1.5, Gradient Step=502026.01 | 100 | — | 22.88 | |
| TRAttacker Model=SD 1.5, Gradient Step=1002026.01 | 100 | — | 21.85 | |
| TRAttacker Model=SD 1.5, Gradient Step=1502026.01 | 100 | — | 21.17 | |
| GSAttacker Model=SD 1.5, Gradient Step=502026.01 | 100 | 0.9993 | 22.89 | |
| GSAttacker Model=SD 1.5, Gradient Step=1002026.01 | 100 | 0.9998 | 21.86 | |
| GSAttacker Model=SD 1.5, Gradient Step=1502026.01 | 100 | 0.9998 | 21.19 | |
| PRCAttacker Model=SD 1.5, Gradient Step=1002026.01 | 100 | 1 | 21.89 | |
| PRCAttacker Model=SD 1.5, Gradient Step=1502026.01 | 100 | 1 | 21.22 | |
| GS++Attacker Model=SD 1.5, Gradient Step=1502026.01 | 100 | 0.9944 | 21.19 | |
| PRCAttacker Model=SD 1.5, Gradient Step=502026.01 | 99 | 0.9949 | 22.93 | |
| GS++Attacker Model=SD 1.5, Gradient Step=1002026.01 | 99 | 0.9881 | 21.88 | |
| GS++Attacker Model=SD 1.5, Gradient Step=502026.01 | 98 | 0.9803 | 22.91 | |
| GS++-SAttacker Model=SD 2.1, Gradient Step=1502026.01 | 49 | 0.7291 | 21.41 | |
| GS++-SAttacker Model=SD 2.1, Gradient Step=1002026.01 | 36 | 0.672 | 22.17 | |
| PRC-SAttacker Model=SD 2.1, Gradient Step=1502026.01 | 25 | 0.5064 | 21.42 | |
| PRC-SAttacker Model=SD 2.1, Gradient Step=1002026.01 | 18 | 0.5559 | 22.19 | |
| GS++-SAttacker Model=SD 2.1, Gradient Step=502026.01 | 15 | 0.5699 | 23.37 | |
| GS++-SAttacker Model=SD 1.5, Gradient Step=1502026.01 | 9 | 0.5383 | 21.2 | |
| GS-SAttacker Model=SD 2.1, Gradient Step=1502026.01 | 7 | 0.4925 | 21.37 | |
| GS-SAttacker Model=SD 2.1, Gradient Step=1002026.01 | 6 | 0.4843 | 22.14 | |
| PRC-SAttacker Model=SD 2.1, Gradient Step=502026.01 | 6 | 0.5266 | 23.39 | |
| GS-SAttacker Model=SD 1.5, Gradient Step=1502026.01 | 5 | 0.4858 | 21.17 | |
| GS++-SAttacker Model=SD 1.5, Gradient Step=1002026.01 | 5 | 0.5222 | 21.88 | |
| GS-SAttacker Model=SD 2.1, Gradient Step=502026.01 | 4 | 0.4818 | 23.34 | |
| GS-SAttacker Model=SD 1.5, Gradient Step=1002026.01 | 4 | 0.4918 | 21.85 | |
| GS-SAttacker Model=SD 1.5, Gradient Step=502026.01 | 3 | 0.4893 | 22.9 | |
| TR-SAttacker Model=SD 2.1, Gradient Step=1002026.01 | 2 | — | 22.14 | |
| TR-SAttacker Model=SD 2.1, Gradient Step=1502026.01 | 2 | — | 21.38 | |
| PRC-SAttacker Model=SD 1.5, Gradient Step=1502026.01 | 2 | 0.5067 | 21.21 | |
| GS++-SAttacker Model=SD 1.5, Gradient Step=502026.01 | 2 | 0.5063 | 22.91 | |
| TR-SAttacker Model=SD 2.1, Gradient Step=502026.01 | 1 | — | 23.33 | |
| TR-SAttacker Model=SD 1.5, Gradient Step=502026.01 | 1 | — | 22.88 | |
| TR-SAttacker Model=SD 1.5, Gradient Step=1002026.01 | 1 | — | 21.83 | |
| TR-SAttacker Model=SD 1.5, Gradient Step=1502026.01 | 1 | — | 21.16 | |
| PRC-SAttacker Model=SD 1.5, Gradient Step=1002026.01 | 1 | 0.5067 | 21.9 | |
| PRC-SAttacker Model=SD 1.5, Gradient Step=502026.01 | 0 | 0.5015 | 22.93 |