Watermark Similarity Restoration on Watermarked ResNet-18 and EfficientNet models
100Clean SimilarityCANON
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| CANONWatermark Scheme=uchida17, Backbone=ResNet-18, Attack Type=nso_zero, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 57.03 | 100 | 57.81 | |
| CANONWatermark Scheme=uchida17, Backbone=ResNet-18, Attack Type=nso_clique, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 53.12 | 100 | 57.81 | |
| CANONWatermark Scheme=uchida17, Backbone=ResNet-18, Attack Type=nso_split, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 48.44 | 100 | 42.97 | |
| CANONWatermark Scheme=uchida17, Backbone=ResNet-18, Attack Type=mix-opseq, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 45.31 | 100 | 60.16 | |
| CANONWatermark Scheme=uchida17, Backbone=ResNet-18, Attack Type=mix-opseq (per-merge-group), Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 60.94 | 100 | 48.44 | |
| CANONWatermark Scheme=greedy, Backbone=ResNet-18, Attack Type=nso_zero, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 50 | 100 | 50 | |
| CANONWatermark Scheme=lottery, Backbone=ResNet-18, Attack Type=mix-opseq, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 46.88 | 100 | 48.44 | |
| CANONWatermark Scheme=ipr_ic, Backbone=ResNet-18, Attack Type=nso_split, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 51.56 | 100 | 50.78 | |
| CANONWatermark Scheme=deepsigns, Backbone=ResNet-18, Attack Type=nso_clique, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 55.47 | 100 | 48.44 | |
| CANONWatermark Scheme=deepipr, Backbone=ResNet-18, Attack Type=nso_zero, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 40.62 | 100 | 53.12 | |
| CANONWatermark Scheme=uchida17, Backbone=EfficientNet, Attack Type=nso_zero, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 55.47 | 100 | 43.75 | |
| CANONWatermark Scheme=greedy, Backbone=EfficientNet, Attack Type=mix-opseq, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 58.59 | 100 | 53.12 | |
| CANONWatermark Scheme=lottery, Backbone=EfficientNet, Attack Type=nso_split, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 46.09 | 100 | 46.88 | |
| CANONWatermark Scheme=passport_aware, Backbone=EfficientNet, Attack Type=nso_clique, Attack Ratio=0.22026.03 | 100 | 0 | 0 | — | 48.44 | 100 | 49.22 | |
| CANONWatermark Scheme=riga21, Backbone=ResNet-18, Attack Type=mix-opseq (per-merge-group), Attack Ratio=0.22026.03 | 97.66 | 0 | 0 | — | 45.31 | 97.66 | 99.22 | |
| CANONWatermark Scheme=riga21, Backbone=EfficientNet, Attack Type=mix-opseq (per-merge-group), Attack Ratio=0.22026.03 | 90.62 | 0 | 0 | — | 61.72 | 90.62 | 92.19 |