Red-teaming on I2P Nudity prompts
0Failure Rate (FR)Ring-A-Bell
Evaluation Results
| Method | Links | |
|---|---|---|
| Ring-A-BellSafe T2I Model=Receler, Attack Access=black-box2024.11 | 0 | |
| PEZSafe T2I Model=AdvUnlearn, Attack Access=black-box2024.11 | 0.64 | |
| MMA-DiffusionSafe T2I Model=AdvUnlearn, Attack Access=white-box2024.11 | 0.86 | |
| PEZSafe T2I Model=RECE, Attack Access=black-box2024.11 | 0.86 | |
| PEZSafe T2I Model=ESD, Attack Access=black-box2024.11 | 1.07 | |
| PEZSafe T2I Model=Receler, Attack Access=black-box2024.11 | 1.5 | |
| Ring-A-BellSafe T2I Model=AdvUnlearn, Attack Access=black-box2024.11 | 2.11 | |
| SneakyPromptSafe T2I Model=AdvUnlearn, Attack Access=black-box2024.11 | 2.15 | |
| P4DSafe T2I Model=AdvUnlearn, Attack Access=white-box2024.11 | 3.22 | |
| UnlearnDiffAtkSafe T2I Model=AdvUnlearn, Attack Access=white-box2024.11 | 4.08 | |
| PEZSafe T2I Model=SAFREE, Attack Access=black-box2024.11 | 5.15 | |
| Flirt-ScoringSafe T2I Model=AdvUnlearn, Attack Access=black-box2024.11 | 6.22 | |
| MMA-DiffusionSafe T2I Model=RECE, Attack Access=white-box2024.11 | 6.44 | |
| UnlearnDiffAtkSafe T2I Model=SAFREE, Attack Access=white-box2024.11 | 6.44 | |
| SneakyPromptSafe T2I Model=SAFREE, Attack Access=black-box2024.11 | 7.3 | |
| SneakyPromptSafe T2I Model=RECE, Attack Access=black-box2024.11 | 7.3 | |
| SneakyPromptSafe T2I Model=Receler, Attack Access=black-box2024.11 | 8.58 | |
| PEZSafe T2I Model=SLD-MAX, Attack Access=black-box2024.11 | 9.87 | |
| P4DSafe T2I Model=SAFREE, Attack Access=white-box2024.11 | 10.3 | |
| Ring-A-BellSafe T2I Model=ESD, Attack Access=black-box2024.11 | 11.58 | |
| P4DSafe T2I Model=RECE, Attack Access=white-box2024.11 | 11.59 | |
| MMA-DiffusionSafe T2I Model=ESD, Attack Access=white-box2024.11 | 12.23 | |
| MMA-DiffusionSafe T2I Model=Receler, Attack Access=white-box2024.11 | 12.23 | |
| UnlearnDiffAtkSafe T2I Model=Receler, Attack Access=white-box2024.11 | 13.09 | |
| MMA-DiffusionSafe T2I Model=SAFREE, Attack Access=white-box2024.11 | 13.73 | |
| SneakyPromptSafe T2I Model=ESD, Attack Access=black-box2024.11 | 14.59 | |
| Flirt-ScoringSafe T2I Model=SAFREE, Attack Access=black-box2024.11 | 14.59 | |
| Flirt-ScoringSafe T2I Model=Receler, Attack Access=black-box2024.11 | 15.24 | |
| UnlearnDiffAtkSafe T2I Model=ESD, Attack Access=white-box2024.11 | 16.95 | |
| UnlearnDiffAtkSafe T2I Model=RECE, Attack Access=white-box2024.11 | 17.17 | |
| P4DSafe T2I Model=SLD-MAX, Attack Access=white-box2024.11 | 17.38 | |
| ICERSafe T2I Model=AdvUnlearn, Attack Access=black-box2024.11 | 17.6 | |
| P4DSafe T2I Model=Receler, Attack Access=white-box2024.11 | 18.24 | |
| Ring-A-BellSafe T2I Model=RECE, Attack Access=black-box2024.11 | 21.05 | |
| MMA-DiffusionSafe T2I Model=SLD-MAX, Attack Access=white-box2024.11 | 23.82 | |
| Flirt-ScoringSafe T2I Model=RECE, Attack Access=black-box2024.11 | 24.03 | |
| UnlearnDiffAtkSafe T2I Model=SLD-MAX, Attack Access=white-box2024.11 | 24.25 | |
| Ring-A-BellSafe T2I Model=SAFREE, Attack Access=black-box2024.11 | 25.26 | |
| Ring-A-BellSafe T2I Model=SLD-MAX, Attack Access=black-box2024.11 | 26.32 | |
| ICERSafe T2I Model=RECE, Attack Access=black-box2024.11 | 29.62 | |
| P4DSafe T2I Model=ESD, Attack Access=white-box2024.11 | 33.05 | |
| Flirt-ScoringSafe T2I Model=ESD, Attack Access=black-box2024.11 | 34.55 | |
| ICERSafe T2I Model=Receler, Attack Access=black-box2024.11 | 36.27 | |
| ICERSafe T2I Model=SAFREE, Attack Access=black-box2024.11 | 39.92 | |
| Flirt-ScoringSafe T2I Model=SLD-MAX, Attack Access=black-box2024.11 | 42.06 | |
| SneakyPromptSafe T2I Model=SLD-MAX, Attack Access=black-box2024.11 | 47 | |
| ICERSafe T2I Model=ESD, Attack Access=black-box2024.11 | 48.71 | |
| ICERSafe T2I Model=SLD-MAX, Attack Access=black-box2024.11 | 57.37 |