{"total":126,"rows":[{"id":"2105.05233","title":"Diffusion Models Beat GANs on Image Synthesis","created":"2021-05-11","cited_by_count":8255,"area":"diffusion"},{"id":"2111.14818","title":"Blended Diffusion for Text-driven Editing of Natural Images","created":"2021-11-29","cited_by_count":927,"area":"diffusion"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2206.09012","title":"Diffusion models as plug-and-play priors","created":"2022-06-17","cited_by_count":231,"area":"diffusion"},{"id":"2211.14305","title":"SpaText: Spatio-Textual Representation for Controllable Image Generation","created":"2022-11-25","cited_by_count":217,"area":"diffusion"},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163,"area":"diffusion"},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132,"area":"diffusion"},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2208.07791","title":"Your ViT is Secretly a Hybrid Discriminative-Generative Diffusion Model","created":"2022-08-16","cited_by_count":58,"area":"diffusion"},{"id":"2110.00473","title":"Score-Based Generative Classifiers","created":"2021-10-01","cited_by_count":53,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2310.07972","title":"Interpretable Diffusion via Information Decomposition","created":"2023-10-12","cited_by_count":37,"area":"diffusion"},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2312.07865","title":"SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Models","created":"2023-12-13","cited_by_count":36,"area":"diffusion"},{"id":"2206.10875","title":"Guided Diffusion Model for Adversarial Purification from Random Noise","created":"2022-06-22","cited_by_count":35,"area":"diffusion"},{"id":"2208.08664","title":"Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance","created":"2022-08-18","cited_by_count":33,"area":"diffusion"},{"id":"2403.12404","title":"Understanding and Improving Training-free Loss-based Diffusion Guidance","created":"2024-03-19","cited_by_count":32,"area":"diffusion"},{"id":"2405.09882","title":"DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection","created":"2024-05-16","cited_by_count":32,"area":"diffusion"},{"id":"2209.08891","title":"Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis","created":"2022-09-19","cited_by_count":29,"area":"diffusion"},{"id":"2502.01189","title":"Compressed Image Generation with Denoising Diffusion Codebook Models","created":"2025-02-03","cited_by_count":28,"area":"diffusion"},{"id":"2306.00974","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","created":"2023-06-01","cited_by_count":25,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2306.13103","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","created":"2023-06-16","cited_by_count":24,"area":"diffusion"},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2404.11615","title":"Factorized Diffusion: Perceptual Illusions by Noise Decomposition","created":"2024-04-17","cited_by_count":23,"area":"diffusion"},{"id":"2502.20946","title":"Generative Uncertainty in Diffusion Models","created":"2025-02-28","cited_by_count":23,"area":"diffusion"},{"id":"2311.11017","title":"Improving Adversarial Transferability by Stable Diffusion","created":"2023-11-18","cited_by_count":22,"area":"diffusion"},{"id":"2308.09889","title":"DUAW: Data-free Universal Adversarial Watermark against Stable Diffusion Customization","created":"2023-08-19","cited_by_count":20,"area":"diffusion"},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2403.18035","title":"Bidirectional Consistency Models","created":"2024-03-26","cited_by_count":18,"area":"diffusion"},{"id":"2405.19424","title":"Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies","created":"2024-05-29","cited_by_count":18,"area":"diffusion"},{"id":"2411.12858","title":"CDI: Copyrighted Data Identification in Diffusion Models","created":"2024-11-19","cited_by_count":17,"area":"diffusion"},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2404.12488","title":"Global Counterfactual Directions","created":"2024-04-18","cited_by_count":15,"area":"diffusion"},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2408.10901","title":"A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse","created":"2024-08-20","cited_by_count":13,"area":"diffusion"},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12,"area":"diffusion"},{"id":"2407.11942","title":"Context-Guided Diffusion for Out-of-Distribution Molecular and Protein Design","created":"2024-07-16","cited_by_count":11,"area":"diffusion"},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2402.15429","title":"ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation","created":"2024-02-23","cited_by_count":10,"area":"diffusion"},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2412.11441","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","created":"2024-12-16","cited_by_count":9,"area":"diffusion"},{"id":"2504.21072","title":"Erased but Not Forgotten: How Backdoors Compromise Concept Erasure","created":"2025-04-29","cited_by_count":9,"area":"diffusion"},{"id":"2403.12063","title":"Consistency Model is an Effective Posterior Sample Approximation for Diffusion Inverse Solvers","created":"2024-02-09","cited_by_count":8,"area":"diffusion"},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2407.11424","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","created":"2024-07-16","cited_by_count":8,"area":"diffusion"},{"id":"2305.10388","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","created":"2023-05-17","cited_by_count":7,"area":"diffusion"},{"id":"2409.08255","title":"LoRID: Low-Rank Iterative Diffusion for Adversarial Purification","created":"2024-09-12","cited_by_count":7,"area":"diffusion"},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2504.17219","title":"Enhancing Variational Autoencoders with Smooth Robust Latent Encoding","created":"2025-04-24","cited_by_count":6,"area":"diffusion"},{"id":"2307.16865","title":"Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models","created":"2023-07-31","cited_by_count":5,"area":"diffusion"},{"id":"2310.03664","title":"Certification of Deep Learning Models for Medical Image Segmentation","created":"2023-10-05","cited_by_count":5,"area":"diffusion"},{"id":"2311.12981","title":"SD-NAE: Generating Natural Adversarial Examples with Stable Diffusion","created":"2023-11-21","cited_by_count":5,"area":"diffusion"},{"id":"2403.07842","title":"DP-TLDM: Differentially Private Tabular Latent Diffusion Model","created":"2024-03-12","cited_by_count":5,"area":"diffusion"},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2501.14999","title":"VideoPure: Diffusion-based Adversarial Purification for Video Recognition","created":"2025-01-25","cited_by_count":5,"area":"diffusion"},{"id":"2503.20595","title":"Diffusion Counterfactuals for Image Regressors","created":"2025-03-26","cited_by_count":5,"area":"diffusion"},{"id":"2504.08591","title":"ZipIR: Latent Pyramid Diffusion Transformer for High-Resolution Image Restoration","created":"2025-04-11","cited_by_count":5,"area":"diffusion"},{"id":"2506.07841","title":"Diffusion models under low-noise regime","created":"2025-06-09","cited_by_count":5,"area":"diffusion"},{"id":"2510.14623","title":"LeapFactual: Reliable Visual Counterfactual Explanation Using Conditional Flow Matching","created":"2025-10-16","cited_by_count":5,"area":"diffusion"},{"id":"2308.15692","title":"Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models","created":"2023-08-30","cited_by_count":4,"area":"diffusion"},{"id":"2310.15952","title":"Improving Robustness and Reliability in Medical Image Classification with Latent-Guided Diffusion and Nested-Ensembles","created":"2023-10-24","cited_by_count":4,"area":"diffusion"},{"id":"2402.08200","title":"Fine-Tuning Text-To-Image Diffusion Models for Class-Wise Spurious Feature Generation","created":"2024-02-13","cited_by_count":4,"area":"diffusion"},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2410.22725","title":"One Prompt to Verify Your Models: Black-Box Text-to-Image Models Verification via Non-Transferable Adversarial Attacks","created":"2024-10-30","cited_by_count":4,"area":"diffusion"},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2311.11629","title":"Generating Realistic Counterfactuals for Retinal Fundus and OCT Images using Diffusion Models","created":"2023-11-20","cited_by_count":3,"area":"diffusion"},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2409.07936","title":"Detecting and Defending Against Adversarial Attacks on Automatic Speech Recognition via Diffusion Models","created":"2024-09-12","cited_by_count":3,"area":"diffusion"},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2504.11923","title":"SemDiff: Generating Natural Unrestricted Adversarial Examples via Semantic Attributes Optimization in Diffusion Models","created":"2025-04-16","cited_by_count":3,"area":"diffusion"},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2301.06871","title":"Denoising Diffusion Probabilistic Models as a Defense against Adversarial Attacks","created":"2023-01-17","cited_by_count":2,"area":"diffusion"},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2312.16401","title":"Natural Adversarial Patch Generation Method Based on Latent Diffusion Model","created":"2023-12-27","cited_by_count":2,"area":"diffusion"},{"id":"2403.01485","title":"Approximations to the Fisher Information Metric of Deep Generative Models for Out-Of-Distribution Detection","created":"2024-03-03","cited_by_count":2,"area":"diffusion"},{"id":"2405.16260","title":"Enhancing Consistency-Based Image Generation via Adversarialy-Trained Classification and Energy-Based Discrimination","created":"2024-05-25","cited_by_count":2,"area":"diffusion"},{"id":"2406.19807","title":"Deceptive Diffusion: Generating Synthetic Adversarial Examples","created":"2024-06-28","cited_by_count":2,"area":"diffusion"},{"id":"2408.08502","title":"Efficient Image-to-Image Diffusion Classifier for Adversarial Robustness","created":"2024-08-16","cited_by_count":2,"area":"diffusion"},{"id":"2409.18897","title":"Detecting Dataset Abuse in Fine-Tuning Stable Diffusion Models for Text-to-Image Synthesis","created":"2024-09-27","cited_by_count":2,"area":"diffusion"},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2505.13280","title":"FlowPure: Continuous Normalizing Flows for Adversarial Purification","created":"2025-05-19","cited_by_count":2,"area":"diffusion"},{"id":"2505.18097","title":"Towards more transferable adversarial attack in black-box manner","created":"2025-05-23","cited_by_count":2,"area":"diffusion"},{"id":"2603.21175","title":"Reward Sharpness-Aware Fine-Tuning for Diffusion Models","created":"2026-03-22","cited_by_count":2,"area":"diffusion"},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2404.10588","title":"Do Counterfactual Examples Complicate Adversarial Training?","created":"2024-04-16","cited_by_count":1,"area":"diffusion"},{"id":"2406.17606","title":"Diffusion-based Adversarial Purification for Intrusion Detection","created":"2024-06-25","cited_by_count":1,"area":"diffusion"},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2505.22839","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","created":"2025-05-28","cited_by_count":1,"area":"diffusion"},{"id":"2507.22813","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","created":"2025-07-30","cited_by_count":1,"area":"diffusion"},{"id":"2509.25082","title":"MANI-Pure: Magnitude-Adaptive Noise Injection for Adversarial Purification","created":"2025-09-29","cited_by_count":1,"area":"diffusion"}],"next_cursor":"100"}