Imprinting Attack on COCO
0Detection RateGS-S
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| GS-SStep=502026.01 | 0 | 50.2 | 23.4579 | |
| GS-SStep=1002026.01 | 0 | 50 | 23.4579 | |
| GS-SStep=1502026.01 | 0 | 50.39 | 23.4579 | |
| PRC-SStep=50, Attacker Model=SD 1.52026.01 | 5 | 0.5241 | 22.92 | |
| PRC-SStep=100, Attacker Model=SD 1.52026.01 | 5 | 0.5241 | 21.89 | |
| GS++-SStep=50, Attacker Model=SD 1.52026.01 | 5 | 0.5166 | 22.92 | |
| PRC-SStep=150, Attacker Model=SD 1.52026.01 | 6 | 0.5295 | 21.19 | |
| TR-SStep=50, Attacker Model=SD 1.52026.01 | 7 | — | 22.86 | |
| TR-SStep=100, Attacker Model=SD 1.52026.01 | 7 | — | 21.82 | |
| TR-SStep=150, Attacker Model=SD 1.52026.01 | 7 | — | 21.14 | |
| GS++-SStep=100, Attacker Model=SD 1.52026.01 | 7 | 0.5323 | 21.88 | |
| TR-SStep=50, Attacker Model=SD 2.12026.01 | 8 | — | 23.33 | |
| TR-SStep=100, Attacker Model=SD 2.12026.01 | 8 | — | 22.13 | |
| TR-SStep=150, Attacker Model=SD 2.12026.01 | 8 | — | 21.36 | |
| GS-SStep=50, Attacker Model=SD 1.52026.01 | 8 | 0.5078 | 22.87 | |
| PRC-SStep=50, Attacker Model=SD 2.12026.01 | 8 | 0.5444 | 23.37 | |
| GS-SStep=50, Attacker Model=SD 2.12026.01 | 9 | 0.5084 | 23.32 | |
| GS-SStep=100, Attacker Model=SD 1.52026.01 | 9 | 0.5122 | 21.82 | |
| GS-SStep=100, Attacker Model=SD 2.12026.01 | 10 | 0.506 | 22.11 | |
| GS-SStep=150, Attacker Model=SD 2.12026.01 | 10 | 0.5077 | 21.34 | |
| GS-SStep=150, Attacker Model=SD 1.52026.01 | 10 | 0.5122 | 21.13 | |
| GS++-SStep=150, Attacker Model=SD 1.52026.01 | 13 | 0.5586 | 21.19 | |
| PRC-SStep=100, Attacker Model=SD 2.12026.01 | 14 | 0.5547 | 22.17 | |
| GS++-SStep=50, Attacker Model=SD 2.12026.01 | 15 | 0.505 | 23.36 | |
| PRC-SStep=150, Attacker Model=SD 2.12026.01 | 27 | 0.6211 | 21.4 | |
| GS++-SStep=100, Attacker Model=SD 2.12026.01 | 43 | 0.7096 | 22.16 | |
| GS++-SStep=150, Attacker Model=SD 2.12026.01 | 59 | 0.7769 | 21.39 | |
| GSStep=502026.01 | 86 | 75.66 | 23.4399 | |
| GSStep=1002026.01 | 91 | 89.3 | 23.4399 | |
| GSStep=1502026.01 | 94 | 92.54 | 23.4399 | |
| TRStep=50, Attacker Model=SD 2.12026.01 | 99 | — | 23.34 | |
| TRStep=50, Attacker Model=SD 1.52026.01 | 99 | — | 22.88 | |
| PRCStep=50, Attacker Model=SD 1.52026.01 | 99 | 0.9941 | 22.92 | |
| GS++Step=50, Attacker Model=SD 1.52026.01 | 99 | 0.9845 | 22.92 | |
| TRStep=100, Attacker Model=SD 2.12026.01 | 100 | — | 22.15 | |
| TRStep=150, Attacker Model=SD 2.12026.01 | 100 | — | 21.38 | |
| TRStep=100, Attacker Model=SD 1.52026.01 | 100 | — | 21.84 | |
| TRStep=150, Attacker Model=SD 1.52026.01 | 100 | — | 21.15 | |
| GSStep=50, Attacker Model=SD 2.12026.01 | 100 | 0.9998 | 23.34 | |
| GSStep=100, Attacker Model=SD 2.12026.01 | 100 | 0.9999 | 22.15 | |
| GSStep=150, Attacker Model=SD 2.12026.01 | 100 | 1 | 21.37 | |
| GSStep=50, Attacker Model=SD 1.52026.01 | 100 | 0.996 | 22.87 | |
| GSStep=100, Attacker Model=SD 1.52026.01 | 100 | 1 | 21.83 | |
| GSStep=150, Attacker Model=SD 1.52026.01 | 100 | 1 | 21.15 | |
| PRCStep=50, Attacker Model=SD 2.12026.01 | 100 | 1 | 23.37 | |
| PRCStep=100, Attacker Model=SD 2.12026.01 | 100 | 1 | 22.15 | |
| PRCStep=150, Attacker Model=SD 2.12026.01 | 100 | 1 | 21.38 | |
| PRCStep=100, Attacker Model=SD 1.52026.01 | 100 | 1 | 21.87 | |
| PRCStep=150, Attacker Model=SD 1.52026.01 | 100 | 1 | 21.18 | |
| GS++Step=50, Attacker Model=SD 2.12026.01 | 100 | 0.9994 | 23.36 | |
| GS++Step=100, Attacker Model=SD 2.12026.01 | 100 | 0.9999 | 22.15 | |
| GS++Step=150, Attacker Model=SD 2.12026.01 | 100 | 0.9999 | 21.37 | |
| GS++Step=100, Attacker Model=SD 1.52026.01 | 100 | 0.9951 | 21.87 | |
| GS++Step=150, Attacker Model=SD 1.52026.01 | 100 | 0.9964 | 21.17 |