# Untargeted Identity Retrieval Attack on VGGFace2 a dslr portrait of sks person prompt Source: [Untargeted Identity Retrieval Attack on VGGFace2 a dslr portrait of sks person prompt]() Collection index: [llms.txt]() Data updated: 2026-04-02T10:13:38.649Z Evaluation of an untargeted identity retrieval attack performance specifically on the subset of VGGFace2 filtered by the prompt 'a dslr portrait of sks person', measured using rank-based metrics R1-U and R5-U. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Untargeted identity retrieval attack | | Dataset (including any stated split) | VGGFace2 a dslr portrait of sks person prompt | | Metric | R1-U | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 25 of 25 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [R1-U](): Higher is better; unit: PERCENT. - [R5-U](): Higher is better; unit: PERCENT. ## Recorded results | Method | R1-U | Result date | Report paper | | --- | --- | --- | --- | | No Defense | 93.98 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 90.76 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 90.36 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 89.76 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 83.94 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 83.72 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 82.17 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 81.11 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 79.07 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 78.68 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 73.33 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 73.33 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 71.67 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 71.48 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 70.83 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 69.77 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 69.35 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 67.41 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 65 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 57.41 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 0 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 0 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 0 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 0 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 0 | Not recorded | 69cdf8160636e5bf4afccaf0 | ### No Defense R1-U: 93.98. Result ID: 69ce408c47f34ce924b7fe21. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### No Defense R1-U: 90.76. Result ID: 69ce408c47f34ce924b7fe24. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### No Defense R1-U: 90.36. Result ID: 69ce408c47f34ce924b7fe22. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### No Defense R1-U: 89.76. Result ID: 69ce408c47f34ce924b7fe25. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### No Defense R1-U: 83.94. Result ID: 69ce408c47f34ce924b7fe23. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### Anti-DB R1-U: 83.72. Result ID: 69ce408c47f34ce924b7fe26. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### Anti-DB R1-U: 82.17. Result ID: 69ce408c47f34ce924b7fe27. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### IDDM R1-U: 81.11. Result ID: 69ce408c47f34ce924b7fe35. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### Anti-DB R1-U: 79.07. Result ID: 69ce408c47f34ce924b7fe29. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### Anti-DB R1-U: 78.68. Result ID: 69ce408c47f34ce924b7fe2a. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### Anti-Diff R1-U: 73.33. Result ID: 69ce408c47f34ce924b7fe30. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### Anti-Diff R1-U: 73.33. Result ID: 69ce408c47f34ce924b7fe31. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### Anti-Diff R1-U: 71.67. Result ID: 69ce408c47f34ce924b7fe33. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### IDDM R1-U: 71.48. Result ID: 69ce408c47f34ce924b7fe38. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### Anti-Diff R1-U: 70.83. Result ID: 69ce408c47f34ce924b7fe34. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### Anti-DB R1-U: 69.77. Result ID: 69ce408c47f34ce924b7fe28. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### IDDM R1-U: 69.35. Result ID: 69ce408c47f34ce924b7fe39. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### IDDM R1-U: 67.41. Result ID: 69ce408c47f34ce924b7fe36. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### Anti-Diff R1-U: 65. Result ID: 69ce408c47f34ce924b7fe32. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### IDDM R1-U: 57.41. Result ID: 69ce408c47f34ce924b7fe37. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### SimAC R1-U: 0. Result ID: 69ce408c47f34ce924b7fe2b. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### SimAC R1-U: 0. Result ID: 69ce408c47f34ce924b7fe2c. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### SimAC R1-U: 0. Result ID: 69ce408c47f34ce924b7fe2d. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### SimAC R1-U: 0. Result ID: 69ce408c47f34ce924b7fe2e. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### SimAC R1-U: 0. Result ID: 69ce408c47f34ce924b7fe2f. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.