{"total":77,"rows":[{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205,"area":"diffusion"},{"id":"2311.17516","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","created":"2023-11-29","cited_by_count":194,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2302.04578","title":"Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples","created":"2023-02-09","cited_by_count":167,"area":"diffusion"},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132,"area":"diffusion"},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2405.16341","title":"R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model","created":"2024-05-25","cited_by_count":58,"area":"diffusion"},{"id":"2305.13800","title":"Generalizable Synthetic Image Detection via Language-guided Contrastive Learning","created":"2023-05-23","cited_by_count":49,"area":"diffusion"},{"id":"2303.09962","title":"Adversarial Counterfactual Visual Explanations","created":"2023-03-17","cited_by_count":47,"area":"diffusion"},{"id":"2311.00500","title":"Intriguing Properties of Data Attribution on Diffusion Models","created":"2023-11-01","cited_by_count":47,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2306.02583","title":"Stable Diffusion is Unstable","created":"2023-06-05","cited_by_count":27,"area":"diffusion"},{"id":"2211.08615","title":"GLFF: Global and Local Feature Fusion for AI-synthesized Image Detection","created":"2022-11-16","cited_by_count":25,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2404.09401","title":"Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models","created":"2024-04-15","cited_by_count":23,"area":"diffusion"},{"id":"2408.11071","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","created":"2024-08-18","cited_by_count":22,"area":"diffusion"},{"id":"2411.16832","title":"Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing","created":"2024-11-25","cited_by_count":21,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2405.19424","title":"Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies","created":"2024-05-29","cited_by_count":18,"area":"diffusion"},{"id":"2411.12858","title":"CDI: Copyrighted Data Identification in Diffusion Models","created":"2024-11-19","cited_by_count":17,"area":"diffusion"},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14,"area":"diffusion"},{"id":"2309.07398","title":"Semantic Adversarial Attacks via Diffusion Models","created":"2023-09-14","cited_by_count":12,"area":"diffusion"},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12,"area":"diffusion"},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2404.13320","title":"Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think","created":"2024-04-20","cited_by_count":10,"area":"diffusion"},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9,"area":"diffusion"},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2305.08031","title":"On enhancing the robustness of Vision Transformers: Defensive Diffusion","created":"2023-05-14","cited_by_count":5,"area":"diffusion"},{"id":"2307.16865","title":"Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models","created":"2023-07-31","cited_by_count":5,"area":"diffusion"},{"id":"2310.03664","title":"Certification of Deep Learning Models for Medical Image Segmentation","created":"2023-10-05","cited_by_count":5,"area":"diffusion"},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5,"area":"diffusion"},{"id":"2512.23953","title":"T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models","created":"2025-12-30","cited_by_count":5,"area":"diffusion"},{"id":"2308.15692","title":"Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models","created":"2023-08-30","cited_by_count":4,"area":"diffusion"},{"id":"2410.22725","title":"One Prompt to Verify Your Models: Black-Box Text-to-Image Models Verification via Non-Transferable Adversarial Attacks","created":"2024-10-30","cited_by_count":4,"area":"diffusion"},{"id":"2412.01440","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","created":"2024-12-02","cited_by_count":4,"area":"diffusion"},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2307.02881","title":"Probabilistic and Semantic Descriptions of Image Manifolds and Their Applications","created":"2023-07-06","cited_by_count":3,"area":"diffusion"},{"id":"2409.07936","title":"Detecting and Defending Against Adversarial Attacks on Automatic Speech Recognition via Diffusion Models","created":"2024-09-12","cited_by_count":3,"area":"diffusion"},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2511.01307","title":"Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models","created":"2025-11-03","cited_by_count":3,"area":"diffusion"},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2312.16401","title":"Natural Adversarial Patch Generation Method Based on Latent Diffusion Model","created":"2023-12-27","cited_by_count":2,"area":"diffusion"},{"id":"2408.08502","title":"Efficient Image-to-Image Diffusion Classifier for Adversarial Robustness","created":"2024-08-16","cited_by_count":2,"area":"diffusion"},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2505.13280","title":"FlowPure: Continuous Normalizing Flows for Adversarial Purification","created":"2025-05-19","cited_by_count":2,"area":"diffusion"},{"id":"2506.00325","title":"Towards Effective and Efficient Adversarial Defense with Diffusion Models for Robust Visual Tracking","created":"2025-05-31","cited_by_count":2,"area":"diffusion"},{"id":"2507.10578","title":"When and Where do Data Poisons Attack Textual Inversion?","created":"2025-07-11","cited_by_count":2,"area":"diffusion"},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2406.17606","title":"Diffusion-based Adversarial Purification for Intrusion Detection","created":"2024-06-25","cited_by_count":1,"area":"diffusion"},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2507.21163","title":"Generating Adversarial Point Clouds Using Diffusion Model","created":"2025-07-25","cited_by_count":1,"area":"diffusion"},{"id":"2511.02793","title":"Diffusion Models are Robust Pretrainers","created":"2025-11-04","cited_by_count":1,"area":"diffusion"},{"id":"2311.13841","title":"Adversarial defense based on distribution transfer","created":"2023-11-23","cited_by_count":0,"area":"diffusion"},{"id":"2407.10077","title":"Transferable 3D Adversarial Shape Completion using Diffusion Models","created":"2024-07-14","cited_by_count":0,"area":"diffusion"},{"id":"2409.00340","title":"LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models","created":"2024-08-31","cited_by_count":0,"area":"diffusion"},{"id":"2410.13122","title":"Boosting Imperceptibility of Stable Diffusion-based Adversarial Examples Generation with Momentum","created":"2024-10-17","cited_by_count":0,"area":"diffusion"},{"id":"2412.08394","title":"Adversarial Purification by Consistency-aware Latent Space Optimization on Data Manifolds","created":"2024-12-11","cited_by_count":0,"area":"diffusion"},{"id":"2506.09538","title":"AngleRoCL: Angle-Robust Concept Learning for Physically View-Invariant T2I Adversarial Patches","created":"2025-06-11","cited_by_count":0,"area":"diffusion"},{"id":"2506.09955","title":"Canonical Latent Representations in Conditional Diffusion Models","created":"2025-06-11","cited_by_count":0,"area":"diffusion"},{"id":"2506.23676","title":"A Unified Framework for Stealthy Adversarial Generation via Latent Optimization and Transferability Enhancement","created":"2025-06-30","cited_by_count":0,"area":"diffusion"},{"id":"2507.05146","title":"VERITAS: Verification and Explanation of Realness in Images for Transparency in AI Systems","created":"2025-07-07","cited_by_count":0,"area":"diffusion"},{"id":"2509.12824","title":"DiffHash: Text-Guided Targeted Attack via Diffusion Models against Deep Hashing Image Retrieval","created":"2025-09-16","cited_by_count":0,"area":"diffusion"},{"id":"2509.24891","title":"VAGUEGAN: Stealthy Poisoning and Backdoor Attacks on Image Generative Pipelines","created":"2025-09-29","cited_by_count":0,"area":"diffusion"},{"id":"2601.02228","title":"FMVP: Masked Flow Matching for Adversarial Video Purification","created":"2026-01-05","cited_by_count":0,"area":"diffusion"},{"id":"2607.25894","title":"TIGA: Trajectory-Injected Generative Attack against Black-box AIGC Detectors","created":"2026-07-28","cited_by_count":0,"area":"diffusion"}],"next_cursor":null}