Model Inversion Defense on CelebA (test)
86.21AccuracyUnprotected
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| UnprotectedBackbone=VGG-16, Attack Protocol=LOMMA (GMI)2024.11 | 86.21 | 67.6 | 88.96 | 1,414 | 38.94 | |
| UnprotectedBackbone=VGG-16, Attack Protocol=LOMMA (KED-MI)2024.11 | 86.21 | 79.47 | 95.16 | 1,279.48 | 22.7 | |
| NegLSBackbone=VGG-16, Attack Protocol=LOMMA (GMI)2024.11 | 81.99 | 48.9 | 73.74 | 1,430.33 | 38.68 | |
| NegLSBackbone=VGG-16, Attack Protocol=LOMMA (KED-MI)2024.11 | 81.99 | 77.67 | 94.32 | 1,280.84 | 38.66 | |
| Trap-MIDBackbone=VGG-16, Attack Protocol=LOMMA (GMI)2024.11 | 81.37 | 41.63 | 68.24 | 1,569.92 | 39.29 | |
| Trap-MIDBackbone=VGG-16, Attack Protocol=LOMMA (KED-MI)2024.11 | 81.37 | 61.25 | 85.76 | 1,404.77 | 24.19 | |
| BiDOBackbone=VGG-16, Attack Protocol=LOMMA (GMI)2024.11 | 78.97 | 53.89 | 79.12 | 1,479.35 | 37.94 | |
| BiDOBackbone=VGG-16, Attack Protocol=LOMMA (KED-MI)2024.11 | 78.97 | 63.56 | 86.48 | 1,360.75 | 24.37 | |
| MIDBackbone=VGG-16, Attack Protocol=LOMMA (GMI)2024.11 | 77.89 | 53.48 | 79.5 | 1,502.23 | 42.06 | |
| MIDBackbone=VGG-16, Attack Protocol=LOMMA (KED-MI)2024.11 | 77.89 | 67.72 | 90.48 | 1,351.04 | 22.62 |