# Nudity Erasure on I2P 1.0 (test)

Source: [Nudity Erasure on I2P 1.0 (test)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:24:03.695Z

Evaluation of Nudity Erasure model performance on the I2P 1.0 test set, focusing on Attack Success Rate (ASR) across specific adversarial attacks (UD, RAB, CCE) and image quality metrics (FID, CLIP score).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Nudity Erasure |
| Dataset (including any stated split) | I2P 1.0 (test) |
| Metric | ASR (UD Attack) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 16 of 16 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [ASR (UD Attack)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(UD%20Attack)>): Higher is better; unit: PERCENT.

- [ASR (Erased)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(Erased)>): Higher is better; unit: PERCENT.

- [ASR (RAB Attack)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(RAB%20Attack)>): Higher is better; unit: PERCENT.

- [ASR (CCE Attack)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(CCE%20Attack)>): Higher is better; unit: PERCENT.

- [FID](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=FID>): Lower is better; unit: SCALAR.

- [CLIP Score](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=CLIP%20Score>): Higher is better; unit: SCALAR.

- [ASR (IG)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(IG)>): Higher is better; unit: PERCENT.

- [ASR (NN)](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=ASR%20(NN)>): Higher is better; unit: PERCENT.

- [Consistency](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=Consistency>): Higher is better; unit: SCALAR.

- [HM](<https://www.sota2.com/research/sota/nudity-erasure-on-i2p-1-0-test.md?metric=HM>): Higher is better; unit: SCALAR.

## Recorded results

| Method | ASR (UD Attack) | Result date | Report paper |
| --- | --- | --- | --- |
| SD 1.4 | 90.27 | Not recorded | 68fa77c81e209131cea754cd |
| SD | 70.53 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| UCE | 70.52 | Not recorded | 68fa77c81e209131cea754cd |
| RECE | 53.08 | Not recorded | 68fa77c81e209131cea754cd |
| ESD | 43.15 | Not recorded | 68fa77c81e209131cea754cd |
| MACE | 41.93 | Not recorded | 68fa77c81e209131cea754cd |
| SPM | 41.05 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| RACE | 30.68 | Not recorded | 68fa77c81e209131cea754cd |
| AC | 25.8 | Not recorded | 68fa77c81e209131cea754cd |
| ESD | 12.63 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| AGE | 9.47 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| Co-Erasing | 8.42 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| PAIR | 7.37 | Not recorded | 69857582c97a0b3e3b5d5c08 |
| STEREO | 4.21 | Not recorded | 68fa77c81e209131cea754cd |
| AdvUnlearn | 3.4 | Not recorded | 68fa77c81e209131cea754cd |
| RECE | 3.16 | Not recorded | 69857582c97a0b3e3b5d5c08 |

### SD 1.4

ASR (UD Attack): 90.27. Result ID: 699568c43badfaffe65c86b7.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6c391e209131cea32e4a.md>)

[Implementation](<https://github.com/CompVis/latent-diffusion>)

Recorded evaluation configuration: {"status":"base model"}. This record does not assert independent reproduction.

### SD

ASR (UD Attack): 70.53. Result ID: 69973fd35698665ec4907f8a.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6c391e209131cea32e4a.md>)

[Implementation](<https://github.com/CompVis/latent-diffusion>)

Recorded evaluation configuration: {"Params. (%)":"-"}. This record does not assert independent reproduction.

### UCE

ASR (UD Attack): 70.52. Result ID: 699568c43badfaffe65c86ba.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa755b1e209131cea67702.md>)

Recorded evaluation configuration: {"venue":"WACV'24"}. This record does not assert independent reproduction.

### RECE

ASR (UD Attack): 53.08. Result ID: 699568c43badfaffe65c86bd.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa756f1e209131cea67e49.md>)

Recorded evaluation configuration: {"venue":"ECCV'24"}. This record does not assert independent reproduction.

### ESD

ASR (UD Attack): 43.15. Result ID: 699568c43badfaffe65c86b8.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6fc61e209131cea47556.md>)

Recorded evaluation configuration: {"venue":"ICCV'23"}. This record does not assert independent reproduction.

### MACE

ASR (UD Attack): 41.93. Result ID: 699568c43badfaffe65c86bb.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72731e209131cea566f7.md>)

[Implementation](<https://github.com/Shilin-LU/MACE>)

Recorded evaluation configuration: {"venue":"CVPR'24"}. This record does not assert independent reproduction.

### SPM

ASR (UD Attack): 41.05. Result ID: 69973fd35698665ec4907f8c.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa72761e209131cea56871.md>)

[Implementation](<https://lyumengyao.github.io/projects/spm>)

Recorded evaluation configuration: {"Params. (%)":"0.05"}. This record does not assert independent reproduction.

### RACE

ASR (UD Attack): 30.68. Result ID: 699568c43badfaffe65c86bc.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa74411e209131cea608f1.md>)

Recorded evaluation configuration: {"venue":"ECCV'24"}. This record does not assert independent reproduction.

### AC

ASR (UD Attack): 25.8. Result ID: 699568c43badfaffe65c86b9.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa705c1e209131cea4a98a.md>)

Recorded evaluation configuration: {"venue":"ICCV'23"}. This record does not assert independent reproduction.

### ESD

ASR (UD Attack): 12.63. Result ID: 69973fd35698665ec4907f8b.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6fc61e209131cea47556.md>)

Recorded evaluation configuration: {"Params. (%)":"94.65"}. This record does not assert independent reproduction.

### AGE

ASR (UD Attack): 9.47. Result ID: 69973fd35698665ec4907f8f.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa78b41e209131cea79e15.md>)

Recorded evaluation configuration: {"Params. (%)":"94.65"}. This record does not assert independent reproduction.

### Co-Erasing

ASR (UD Attack): 8.42. Result ID: 69973fd35698665ec4907f8e.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa78c71e209131cea7a739.md>)

Recorded evaluation configuration: {"Params. (%)":"100.00"}. This record does not assert independent reproduction.

### PAIR

ASR (UD Attack): 7.37. Result ID: 69973fd35698665ec4907f90.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

Recorded evaluation configuration: {"Params. (%)":"0.05"}. This record does not assert independent reproduction.

### STEREO

ASR (UD Attack): 4.21. Result ID: 699568c43badfaffe65c86bf.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Implementation](<https://github.com/koushiksrivats/robust-concept-erasing>)

Recorded evaluation configuration: {"venue":"Ours"}. This record does not assert independent reproduction.

### AdvUnlearn

ASR (UD Attack): 3.4. Result ID: 699568c43badfaffe65c86be.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c81e209131cea754cd.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa751e1e209131cea65e5e.md>)

Recorded evaluation configuration: {"venue":"NeurIPS'24"}. This record does not assert independent reproduction.

### RECE

ASR (UD Attack): 3.16. Result ID: 69973fd35698665ec4907f8d.

[Reporting paper](<https://www.sota2.com/research/paper/69857582c97a0b3e3b5d5c08.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa756f1e209131cea67e49.md>)

Recorded evaluation configuration: {"Params. (%)":"2.23"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
