Model Inversion Attack on CelebA (test)
100Attack AccuracyPIPE
Evaluation results
| Method | Links | ||
|---|---|---|---|
| PIPEProt scheme=Unprotected, Embedding model=Facenet2025.10 | 100 | — | |
| PIPEProt scheme=Facial-FE E8, Embedding model=Facenet2025.10 | 99.8 | — | |
| BobProt scheme=Unprotected, Embedding model=Facenet2025.10 | 99.8 | — | |
| KEDMIProt scheme=Facial-FE E8, Embedding model=Facenet2025.10 | 97.9 | — | |
| GMIProt scheme=Facial-FE E8, Embedding model=Facenet2025.10 | 95.3 | — | |
| KEDMIProt scheme=Unprotected, Embedding model=Facenet2025.10 | 94.5 | — | |
| KEDMIProt scheme=Facial-FE Leech, Embedding model=Facenet2025.10 | 91.6 | — | |
| GMIProt scheme=Unprotected, Embedding model=Facenet2025.10 | 85 | — | |
| BobProt scheme=Facial-FE E8, Embedding model=Facenet2025.10 | 81.8 | — | |
| KEDMITarget Model Defense=None, Base Attack Method=KEDMI, Evaluation Model=face.evoLve2023.04 | 74 | 1,289.88 | |
| GMIProt scheme=Facial-FE Leech, Embedding model=Facenet2025.10 | 73 | — | |
| LOMMATarget Model Defense=BiDO-HSIC [36], Base Attack Method=KEDMI, Evaluation Model=face.evoLve2023.04 | 70.47 | 1,293.25 | |
| PIPEProt scheme=Facial-FE Leech Rand, Embedding model=Facenet2025.10 | 66.5 | — | |
| PIPEProt scheme=Facial-FE Leech, Embedding model=Facenet2025.10 | 65.1 | — | |
| LOMTarget Model Defense=BiDO-HSIC [36], Base Attack Method=KEDMI, Evaluation Model=face.evoLve2023.04 | 64.33 | 1,360.57 | |
| LOMMATarget Model Defense=BiDO-HSIC [36], Base Attack Method=GMI, Evaluation Model=face.evoLve2023.04 | 62.13 | 1,358.54 | |
| LOMTarget Model Defense=BiDO-HSIC [36], Base Attack Method=GMI, Evaluation Model=face.evoLve2023.04 | 55.8 | 1,397.05 | |
| MATarget Model Defense=BiDO-HSIC [36], Base Attack Method=KEDMI, Evaluation Model=face.evoLve2023.04 | 49.27 | 1,413.81 | |
| KEDMITarget Model Defense=BiDO-HSIC [36], Base Attack Method=KEDMI, Evaluation Model=face.evoLve2023.04 | 42.8 | 1,469.75 | |
| MATarget Model Defense=BiDO-HSIC [36], Base Attack Method=GMI, Evaluation Model=face.evoLve2023.04 | 23.93 | 1,634.84 | |
| BobProt scheme=Facial-FE Leech, Embedding model=Facenet2025.10 | 19.3 | — | |
| GMITarget Model Defense=None, Base Attack Method=GMI, Evaluation Model=face.evoLve2023.04 | 19.07 | 1,715.6 | |
| KEDMIProt scheme=Facial-FE Leech Rand, Embedding model=Facenet2025.10 | 5.5 | — | |
| GMITarget Model Defense=BiDO-HSIC [36], Base Attack Method=GMI, Evaluation Model=face.evoLve2023.04 | 5.2 | 1,962.58 | |
| GMIProt scheme=Facial-FE Leech Rand, Embedding model=Facenet2025.10 | 4.72 | — | |
| KEDMIProt scheme=Snapper-FE, Embedding model=Facenet2025.10 | 3.6 | — | |
| GMIProt scheme=Snapper-FE, Embedding model=Facenet2025.10 | 3.1 | — | |
| BobProt scheme=Facial-FE Leech Rand, Embedding model=Facenet2025.10 | 0.8 | — | |
| BobProt scheme=Snapper-FE, Embedding model=Facenet2025.10 | 0.5 | — | |
| PIPEProt scheme=Snapper-FE, Embedding model=Facenet2025.10 | 0.4 | — |