Reprompt forgery attack on SDP prompt (val)
100Detection RateGS
Evaluation results
| Method | Links | ||
|---|---|---|---|
| GSAttacker Model=SD 2.12026.01 | 100 | 0.9887 | |
| TRAttacker Model=SD 1.52026.01 | 100 | — | |
| GSAttacker Model=SD 1.52026.01 | 100 | 0.9895 | |
| TRAttacker Model=SD 2.12026.01 | 99 | — | |
| PRCAttacker Model=SD 2.12026.01 | 95 | 0.9745 | |
| PRCAttacker Model=SD 1.52026.01 | 94 | 0.9711 | |
| GS++Attacker Model=SD 2.12026.01 | 91 | 0.9527 | |
| GS++Attacker Model=SD 1.52026.01 | 69 | 0.8377 | |
| GS-SAttacker Model=SD 2.12026.01 | 60 | 0.7054 | |
| GS-SAttacker Model=SD 1.52026.01 | 56 | 0.6867 | |
| TR-SAttacker Model=SD 2.12026.01 | 54 | — | |
| PRC-SAttacker Model=SD 2.12026.01 | 51 | 0.7338 | |
| TR-SAttacker Model=SD 1.52026.01 | 48 | — | |
| GS++-SAttacker Model=SD 2.12026.01 | 43 | 0.7044 | |
| GS++-SAttacker Model=SD 1.52026.01 | 15 | 0.5679 | |
| PRC-SAttacker Model=SD 1.52026.01 | 12 | 0.5622 |