Trojan Attack Evaluation on Diffusion Models on CIFAR-10
4.21FIDPre-trained
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Pre-trainedAttack=None2023.03 | 4.21 | 0.8018 | 0.6148 | — | — | — | |
| Fine-tunedAttack=None2023.03 | 4.25 | 0.8106 | 0.6 | — | — | — | |
| TrojDiffAttack=In-D2D, Poison Type=patch2023.03 | 4.28 | 0.826 | 0.611 | 76.9 | 81.5 | — | |
| TrojDiffAttack=D2I, Poison Type=patch2023.03 | 4.31 | 0.8094 | 0.6104 | — | — | 0.0001 | |
| TrojDiffAttack=In-D2D, Poison Type=avg2023.03 | 4.37 | 0.8221 | 0.6048 | 77.9 | 84.4 | — | |
| TrojDiffAttack=D2I, Poison Type=avg2023.03 | 4.39 | 0.8106 | 0.6087 | — | — | 0 | |
| TrojDiffAttack=In-D2D, Poison Type=blend2023.03 | 4.47 | 0.8182 | 0.5986 | 78.9 | 87.3 | — | |
| TrojDiffAttack=D2I, Poison Type=blend2023.03 | 4.47 | 0.8118 | 0.607 | — | — | 0 | |
| TrojDiffAttack=Out-D2D, Poison Type=patch2023.03 | 4.65 | 0.8182 | 0.5996 | 64.7 | 98.7 | — | |
| TrojDiffAttack=Out-D2D, Poison Type=avg2023.03 | 4.82 | 0.8163 | 0.5996 | 64.95 | 98.15 | — | |
| TrojDiffAttack=Out-D2D, Poison Type=blend2023.03 | 4.98 | 0.8144 | 0.5996 | 65.2 | 97.6 | — | |
| Testing set of target classAttack=In-D2D2023.03 | — | — | — | 73.2 | 90 | — | |
| Testing set of target classAttack=Out-D2D2023.03 | — | — | — | 77 | 99.43 | — |