Model Inversion Attack on FaceScrub (private) + FFHQ (public) 64x64 (test)
91.16Attack AccuracyNoDef
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| NoDefArchitecture=IR152, Resolution=64x642024.09 | 91.16 | 96.6 | — | 1,187.37 | |
| NoDefArchitecture=FaceNet64, Resolution=64x642024.09 | 88.5 | 95 | — | 1,250.9 | |
| NoDefArchitecture=VGG16, Resolution=64x642024.09 | 86.9 | 81.8 | — | 1,323.27 | |
| MIDREArchitecture=IR152, Resolution=64x642024.09 | 84.91 | 54.02 | 6.81 | 1,579.28 | |
| MIDREArchitecture=FaceNet64, Resolution=64x642024.09 | 81.56 | 51.6 | 6.25 | 1,501.85 | |
| BiDOArchitecture=VGG16, Resolution=64x642024.09 | 79.85 | 60.93 | 2.96 | 1,440.16 | |
| MIDREArchitecture=VGG16, Resolution=64x642024.09 | 79.85 | 36.07 | 6.49 | 1,654.41 |