Model Inversion Defense on FFHQ
87.83AccuracyUnprotected
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| UnprotectedBackbone=VGG-16, Attack Method=PLG-MI2024.11 | 87.83 | 89.22 | 97.72 | 1,278.05 | 18.36 | |
| No DefenseAttack=PLG-MI+, Backbone=VGG-162024.11 | 87.83 | 89.36 | 96.96 | 1,267.65 | 15.32 | |
| NegLSBackbone=VGG-16, Attack Method=PLG-MI2024.11 | 81.76 | 78.12 | 92.6 | 1,506.23 | 109.67 | |
| NegLSAttack=PLG-MI+, Backbone=VGG-162024.11 | 81.76 | 85.52 | 96.78 | 1,446.69 | 86.98 | |
| Trap-MIDBackbone=VGG-16, Attack Method=PLG-MI2024.11 | 81.62 | 0.86 | 2.85 | 2,227.09 | 94.57 | |
| Trap-MID*Attack=PLG-MI, Backbone=VGG-162024.11 | 81.62 | 0.86 | 2.85 | 2,227.09 | 94.57 | |
| Trap-MID*Attack=PLG-MI+, Backbone=VGG-162024.11 | 81.62 | 21.85 | 31.32 | 1,897.36 | 46.47 | |
| Trap-MID*Attack=PLG-MI++, Backbone=VGG-162024.11 | 81.62 | 31.03 | 44.09 | 1,789.95 | 38.98 | |
| BiDOBackbone=VGG-16, Attack Method=PLG-MI2024.11 | 79.62 | 64.3 | 86 | 1,416.98 | 18.37 | |
| BiDOAttack=PLG-MI+, Backbone=VGG-162024.11 | 79.62 | 60.64 | 83.22 | 1,430.52 | 17.29 | |
| MIDBackbone=VGG-16, Attack Method=PLG-MI2024.11 | 76.67 | 66.06 | 87.54 | 1,371.81 | 15.75 | |
| MIDAttack=PLG-MI+, Backbone=VGG-162024.11 | 76.67 | 63.92 | 85.96 | 1,369.63 | 13.25 |