# Untargeted Identity Retrieval Attack on VGGFace2 a photo of sks person prompt Source: [Untargeted Identity Retrieval Attack on VGGFace2 a photo of sks person prompt]() Collection index: [llms.txt]() Data updated: 2026-04-02T10:13:38.603Z Evaluation of an untargeted identity retrieval attack performance on the VGGFace2 dataset, specifically using images generated or filtered by the prompt 'a photo of sks person'. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Untargeted identity retrieval attack | | Dataset (including any stated split) | VGGFace2 a photo of sks person prompt | | Metric | Rank-1 Retrieval Rate (Untargeted) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 25 of 25 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Rank-1 Retrieval Rate (Untargeted)](): Higher is better; unit: PERCENT. - [Rank-5 Retrieval Rate (Untargeted)](): Higher is better; unit: PERCENT. ## Recorded results | Method | Rank-1 Retrieval Rate (Untargeted) | Result date | Report paper | | --- | --- | --- | --- | | No Defense | 99.78 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 99.1 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 98.88 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 98.83 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 98.14 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 97.92 | Not recorded | 69cdf8160636e5bf4afccaf0 | | No Defense | 97.54 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 97.53 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 97.3 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 96.08 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 95.27 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 95.27 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 95.01 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 94.6 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 94.12 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 93.75 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 93.24 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 92.19 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 92.16 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 92.16 | Not recorded | 69cdf8160636e5bf4afccaf0 | | IDDM | 91.14 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-DB | 90.54 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 89.58 | Not recorded | 69cdf8160636e5bf4afccaf0 | | Anti-Diff | 87.5 | Not recorded | 69cdf8160636e5bf4afccaf0 | | SimAC | 86.27 | Not recorded | 69cdf8160636e5bf4afccaf0 | ### No Defense Rank-1 Retrieval Rate (Untargeted): 99.78. Result ID: 69ce408c47f34ce924b7fe08. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### No Defense Rank-1 Retrieval Rate (Untargeted): 99.1. Result ID: 69ce408c47f34ce924b7fe0b. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### No Defense Rank-1 Retrieval Rate (Untargeted): 98.88. Result ID: 69ce408c47f34ce924b7fe09. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### No Defense Rank-1 Retrieval Rate (Untargeted): 98.83. Result ID: 69ce408c47f34ce924b7fe0c. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### IDDM Rank-1 Retrieval Rate (Untargeted): 98.14. Result ID: 69ce408c47f34ce924b7fe1c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### Anti-Diff Rank-1 Retrieval Rate (Untargeted): 97.92. Result ID: 69ce408c47f34ce924b7fe17. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### No Defense Rank-1 Retrieval Rate (Untargeted): 97.54. Result ID: 69ce408c47f34ce924b7fe0a. [Reporting paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### IDDM Rank-1 Retrieval Rate (Untargeted): 97.53. Result ID: 69ce408c47f34ce924b7fe1e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### Anti-DB Rank-1 Retrieval Rate (Untargeted): 97.3. Result ID: 69ce408c47f34ce924b7fe0d. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### SimAC Rank-1 Retrieval Rate (Untargeted): 96.08. Result ID: 69ce408c47f34ce924b7fe12. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IRSE50"}. This record does not assert independent reproduction. ### Anti-DB Rank-1 Retrieval Rate (Untargeted): 95.27. Result ID: 69ce408c47f34ce924b7fe0e. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### Anti-DB Rank-1 Retrieval Rate (Untargeted): 95.27. Result ID: 69ce408c47f34ce924b7fe10. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### IDDM Rank-1 Retrieval Rate (Untargeted): 95.01. Result ID: 69ce408c47f34ce924b7fe20. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### Anti-DB Rank-1 Retrieval Rate (Untargeted): 94.6. Result ID: 69ce408c47f34ce924b7fe11. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### SimAC Rank-1 Retrieval Rate (Untargeted): 94.12. Result ID: 69ce408c47f34ce924b7fe15. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### Anti-Diff Rank-1 Retrieval Rate (Untargeted): 93.75. Result ID: 69ce408c47f34ce924b7fe18. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### IDDM Rank-1 Retrieval Rate (Untargeted): 93.24. Result ID: 69ce408c47f34ce924b7fe1d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### Anti-Diff Rank-1 Retrieval Rate (Untargeted): 92.19. Result ID: 69ce408c47f34ce924b7fe1b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### SimAC Rank-1 Retrieval Rate (Untargeted): 92.16. Result ID: 69ce408c47f34ce924b7fe13. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"IR152"}. This record does not assert independent reproduction. ### SimAC Rank-1 Retrieval Rate (Untargeted): 92.16. Result ID: 69ce408c47f34ce924b7fe16. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"Average"}. This record does not assert independent reproduction. ### IDDM Rank-1 Retrieval Rate (Untargeted): 91.14. Result ID: 69ce408c47f34ce924b7fe1f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### Anti-DB Rank-1 Retrieval Rate (Untargeted): 90.54. Result ID: 69ce408c47f34ce924b7fe0f. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### Anti-Diff Rank-1 Retrieval Rate (Untargeted): 89.58. Result ID: 69ce408c47f34ce924b7fe1a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"MobileFace"}. This record does not assert independent reproduction. ### Anti-Diff Rank-1 Retrieval Rate (Untargeted): 87.5. Result ID: 69ce408c47f34ce924b7fe19. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. ### SimAC Rank-1 Retrieval Rate (Untargeted): 86.27. Result ID: 69ce408c47f34ce924b7fe14. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target recognition model":"FaceNet"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.