Untargeted Identity Retrieval Attack on VGGFace2 a photo of sks person prompt
99.78Rank-1 Retrieval Rate (Untargeted)No Defense
Evaluation results
| Method | Links | ||
|---|---|---|---|
| No DefenseTarget recognition model=IRSE502026.04 | 99.78 | 99.78 | |
| No DefenseTarget recognition model=MobileFace2026.04 | 99.1 | 99.78 | |
| No DefenseTarget recognition model=IR1522026.04 | 98.88 | 99.33 | |
| No DefenseTarget recognition model=Average2026.04 | 98.83 | 99.44 | |
| IDDMTarget recognition model=IRSE502026.04 | 98.14 | 99.3 | |
| Anti-DiffTarget recognition model=IRSE502026.04 | 97.92 | 100 | |
| No DefenseTarget recognition model=FaceNet2026.04 | 97.54 | 98.88 | |
| IDDMTarget recognition model=FaceNet2026.04 | 97.53 | 80.89 | |
| Anti-DBTarget recognition model=IRSE502026.04 | 97.3 | 97.97 | |
| SimACTarget recognition model=IRSE502026.04 | 96.08 | 98.04 | |
| Anti-DBTarget recognition model=IR1522026.04 | 95.27 | 95.95 | |
| Anti-DBTarget recognition model=MobileFace2026.04 | 95.27 | 98.65 | |
| IDDMTarget recognition model=Average2026.04 | 95.01 | 93.88 | |
| Anti-DBTarget recognition model=Average2026.04 | 94.6 | 97.13 | |
| SimACTarget recognition model=MobileFace2026.04 | 94.12 | 96.08 | |
| Anti-DiffTarget recognition model=IR1522026.04 | 93.75 | 97.92 | |
| IDDMTarget recognition model=IR1522026.04 | 93.24 | 97.9 | |
| Anti-DiffTarget recognition model=Average2026.04 | 92.19 | 97.4 | |
| SimACTarget recognition model=IR1522026.04 | 92.16 | 92.16 | |
| SimACTarget recognition model=Average2026.04 | 92.16 | 94.61 | |
| IDDMTarget recognition model=MobileFace2026.04 | 91.14 | 97.44 | |
| Anti-DBTarget recognition model=FaceNet2026.04 | 90.54 | 95.95 | |
| Anti-DiffTarget recognition model=MobileFace2026.04 | 89.58 | 97.92 | |
| Anti-DiffTarget recognition model=FaceNet2026.04 | 87.5 | 93.75 | |
| SimACTarget recognition model=FaceNet2026.04 | 86.27 | 92.16 |