Trojan Attack Evaluation on diffusion models on CelebA
5.4FIDTrojDiff
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| TrojDiffAttack=In-D2D, Poison Type=blend2023.03 | 5.4 | 81.1 | 51.38 | 79.4 | 95.4 | — | |
| TrojDiffAttack=D2I, Poison Type=blend2023.03 | 5.93 | 82.12 | 51.52 | — | — | 0.0001 | |
| TrojDiffAttack=In-D2D, Poison Type=avg2023.03 | 6.08 | 81.55 | 50.64 | 79 | 93.2 | — | |
| TrojDiffAttack=Out-D2D, Poison Type=blend2023.03 | 6.18 | 82 | 50 | 62.8 | 98.3 | — | |
| Pre-trainedAttack=None2023.03 | 6.27 | 80.4 | 49.72 | — | — | — | |
| TrojDiffAttack=Out-D2D, Poison Type=avg2023.03 | 6.28 | 82.23 | 49.25 | 65.8 | 98.85 | — | |
| Fine-tunedAttack=None2023.03 | 6.29 | 81.28 | 50 | — | — | — | |
| TrojDiffAttack=Out-D2D, Poison Type=patch2023.03 | 6.38 | 82.46 | 48.5 | 68.8 | 99.4 | — | |
| TrojDiffAttack=D2I, Poison Type=avg2023.03 | 6.4 | 82.3 | 50.64 | — | — | 0.0004 | |
| TrojDiffAttack=In-D2D, Poison Type=patch2023.03 | 6.75 | 82 | 49.9 | 78.6 | 91 | — | |
| TrojDiffAttack=D2I, Poison Type=patch2023.03 | 6.87 | 82.48 | 49.76 | — | — | 0.0006 | |
| Testing set of target classAttack=In-D2D2023.03 | — | — | — | 71.92 | 89.62 | — | |
| Testing set of target classAttack=Out-D2D2023.03 | — | — | — | 77.21 | 99.59 | — |