Untargeted Identity Retrieval Attack on VGGFace2
100R1-UAnti-Diff
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Anti-DiffPrompt=a photo of sks person, Face Recognition Model=QMagFace2026.04 | 100 | 100 | |
| No DefensePrompt=a photo of sks person, Face Recognition Model=QMagFace2026.04 | 99.56 | 99.78 | |
| No DefensePrompt=a photo of sks person, Face Recognition Model=AdaFace2026.04 | 99.33 | 99.78 | |
| No DefensePrompt=a photo of sks person, Face Recognition Model=Average2026.04 | 99.33 | 99.63 | |
| No DefensePrompt=a photo of sks person, Face Recognition Model=ElasticFace2026.04 | 99.1 | 99.33 | |
| SimACPrompt=a photo of sks person, Face Recognition Model=AdaFace2026.04 | 98.04 | 98.04 | |
| SimACPrompt=a photo of sks person, Face Recognition Model=QMagFace2026.04 | 98.04 | 98.04 | |
| Anti-DiffPrompt=a photo of sks person, Face Recognition Model=ElasticFace2026.04 | 97.92 | 100 | |
| Anti-DiffPrompt=a photo of sks person, Face Recognition Model=Average2026.04 | 97.92 | 100 | |
| OursPrompt=a photo of sks person, Face Recognition Model=QMagFace2026.04 | 97.67 | 99.3 | |
| OursPrompt=a photo of sks person, Face Recognition Model=ElasticFace2026.04 | 97.67 | 99.3 | |
| OursPrompt=a photo of sks person, Face Recognition Model=Average2026.04 | 97.43 | 99.22 | |
| SimACPrompt=a photo of sks person, Face Recognition Model=Average2026.04 | 97.39 | 97.39 | |
| OursPrompt=a photo of sks person, Face Recognition Model=AdaFace2026.04 | 96.96 | 99.07 | |
| Anti-DBPrompt=a photo of sks person, Face Recognition Model=AdaFace2026.04 | 96.62 | 97.3 | |
| Anti-DBPrompt=a photo of sks person, Face Recognition Model=QMagFace2026.04 | 96.62 | 97.97 | |
| Anti-DBPrompt=a photo of sks person, Face Recognition Model=Average2026.04 | 96.4 | 97.52 | |
| SimACPrompt=a photo of sks person, Face Recognition Model=ElasticFace2026.04 | 96.08 | 96.08 | |
| Anti-DBPrompt=a photo of sks person, Face Recognition Model=ElasticFace2026.04 | 95.95 | 97.3 | |
| Anti-DiffPrompt=a photo of sks person, Face Recognition Model=AdaFace2026.04 | 95.83 | 100 | |
| No DefensePrompt=a dslr portrait of sks person, Face Recognition Model=QMagFace2026.04 | 94.38 | 97.59 | |
| No DefensePrompt=a dslr portrait of sks person, Face Recognition Model=AdaFace2026.04 | 93.98 | 95.58 | |
| No DefensePrompt=a dslr portrait of sks person, Face Recognition Model=Average2026.04 | 93.84 | 96.38 | |
| No DefensePrompt=a dslr portrait of sks person, Face Recognition Model=ElasticFace2026.04 | 93.17 | 95.98 | |
| Anti-DBPrompt=a dslr portrait of sks person, Face Recognition Model=QMagFace2026.04 | 86.82 | 90.7 | |
| Anti-DBPrompt=a dslr portrait of sks person, Face Recognition Model=ElasticFace2026.04 | 85.27 | 92.25 | |
| Anti-DBPrompt=a dslr portrait of sks person, Face Recognition Model=Average2026.04 | 85.27 | 91.22 | |
| Anti-DBPrompt=a dslr portrait of sks person, Face Recognition Model=AdaFace2026.04 | 83.72 | 90.7 | |
| Anti-DiffPrompt=a dslr portrait of sks person, Face Recognition Model=QMagFace2026.04 | 80 | 85 | |
| OursPrompt=a dslr portrait of sks person, Face Recognition Model=AdaFace2026.04 | 78.52 | 88.89 | |
| Anti-DiffPrompt=a dslr portrait of sks person, Face Recognition Model=AdaFace2026.04 | 78.33 | 90 | |
| Anti-DiffPrompt=a dslr portrait of sks person, Face Recognition Model=Average2026.04 | 76.11 | 85.56 | |
| OursPrompt=a dslr portrait of sks person, Face Recognition Model=QMagFace2026.04 | 75.56 | 90.37 | |
| OursPrompt=a dslr portrait of sks person, Face Recognition Model=Average2026.04 | 75.43 | 88.89 | |
| OursPrompt=a dslr portrait of sks person, Face Recognition Model=ElasticFace2026.04 | 72.22 | 87.41 | |
| Anti-DiffPrompt=a dslr portrait of sks person, Face Recognition Model=ElasticFace2026.04 | 70 | 81.67 | |
| SimACPrompt=a dslr portrait of sks person, Face Recognition Model=AdaFace2026.04 | 0 | 33.33 | |
| SimACPrompt=a dslr portrait of sks person, Face Recognition Model=QMagFace2026.04 | 0 | 33.33 | |
| SimACPrompt=a dslr portrait of sks person, Face Recognition Model=ElasticFace2026.04 | 0 | 0 | |
| SimACPrompt=a dslr portrait of sks person, Face Recognition Model=Average2026.04 | 0 | 22.22 |