Imprint Removal Attack on ImageNet (test)
100Detection RateTree Ring + PGID
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Tree Ring + PGIDAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 100 | — | 100 | |
| Gaussian Shading + PGIDAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 100 | 99.75 | 100 | |
| Gaussian Shading + PGIDAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 100 | 99.64 | 100 | |
| T2SMark + PGIDAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 100 | 99.99 | 100 | |
| T2SMark + PGIDAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 100 | 99.98 | 100 | |
| Tree Ring + PGIDAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 99 | — | 99.98 | |
| PRC + PGIDAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 97 | 95.9 | — | |
| PRC + PGIDAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 97 | 89.07 | — | |
| T2SMarkAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 50 | 50.93 | 86.95 | |
| T2SMarkAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 44 | 51.77 | 88.06 | |
| Tree RingAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 25 | — | 42.35 | |
| Tree RingAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 24 | — | 40.85 | |
| Gaussian ShadingAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 1 | 28.91 | 10.22 | |
| Gaussian ShadingAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 0 | 25.82 | 7.47 | |
| PRCAttacker Model=SD 2.1, Optimization Steps=50/100/1502026.05 | 0 | 50.12 | — | |
| PRCAttacker Model=SD 1.5, Optimization Steps=50/100/1502026.05 | 0 | 50.11 | — |