Mimicry Defense on TI-Dataset
5.27FIDSmooth
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| SmoothAttack=Inpaint [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 5.27 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 5.88 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 7.81 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 25.5 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 29.88 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 32.24 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 36.26 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 37.22 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 38.89 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 40.99 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 47.98 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 49.04 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 50.2 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 51.19 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 61.06 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 61.62 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 62.43 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 66.01 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 66.78 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 72.32 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 72.39 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 73.33 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 74.6 | — | — | |
| ACEAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 74.6 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 75.72 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 76.97 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 83.33 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 86.74 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 87.99 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 92.46 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 97.75 | — | — | |
| SmoothAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 100.32 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 101.9 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 109.15 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 109.15 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 109.15 | — | — | |
| SmoothAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 109.15 | — | — | |
| SmoothAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 111.34 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 113.24 | — | — | |
| Smooth2026.06 | 113.69 | 24.01 | 0.64 | |
| ACEAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 114.88 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 122.16 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 123.51 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 131.43 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 134.53 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 140.94 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 143.08 | — | — | |
| ACE2026.06 | 149.28 | 23.39 | 0.66 | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 152.96 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 162.34 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 163.32 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 165.2 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 167.72 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=DiffShortcut [40]2026.06 | 172.33 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 173.08 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 175.7 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 177.25 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 180.81 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 181.08 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 191.93 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 192.34 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 195.93 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 196.23 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 196.49 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 197.31 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 197.91 | — | — | |
| ACEAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 198.58 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 200.42 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 200.54 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 203.09 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 204.49 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 205.26 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 206.78 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 207.55 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 207.87 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 209.01 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 209.01 | — | — | |
| ACEAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 209.69 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 224.96 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 225.4 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GSmooth2026.06 | 244.92 | — | — | |
| VOID2026.06 | 247.47 | 19.85 | 0.6 | |
| VOIDAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 249.45 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 254.78 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 262.47 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 267.76 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=JPEG Comp.2026.06 | 275.52 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 280.63 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 291.3 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress++ [22]2026.06 | 295.5 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Upscale [13]2026.06 | 304.42 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Prior-Guided Purification, Countermeasure=Impress [6]2026.06 | 307.21 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Model-Agnostic Transformation, Countermeasure=GNoise2026.06 | 313.1 | — | — | |
| VOIDAttack=ControlNet [72], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 316.11 | — | — | |
| VOIDAttack=SDEdit [45], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 316.67 | — | — | |
| VOIDAttack=Inpaint [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 339.21 | — | — | |
| VOIDAttack=SVDiff [39], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 349.42 | — | — | |
| VOIDAttack=LoRA [24], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 377.56 | — | — | |
| VOIDAttack=Fine-tuning [50], Countermeasure Category=Mechanism-Aware Adaptation, Countermeasure=TimestepSel.2026.06 | 417.38 | — | — |