{"total":247,"rows":[{"id":"2209.00796","title":"Diffusion Models: A Comprehensive Survey of Methods and Applications","created":"2022-09-02","cited_by_count":1114,"area":"diffusion"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2311.17516","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","created":"2023-11-29","cited_by_count":194,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2302.04578","title":"Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples","created":"2023-02-09","cited_by_count":167,"area":"diffusion"},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163,"area":"diffusion"},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2311.17717","title":"Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers","created":"2023-11-29","cited_by_count":120,"area":"diffusion"},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2305.12683","title":"Mist: Towards Improved Adversarial Examples for Diffusion Models","created":"2023-05-22","cited_by_count":94,"area":"diffusion"},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2410.07369","title":"An Undetectable Watermark for Generative Image Models","created":"2024-10-09","cited_by_count":81,"area":"diffusion"},{"id":"2203.15636","title":"Diffusion Models for Counterfactual Explanations","created":"2022-03-29","cited_by_count":79,"area":"diffusion"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2404.02928","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","created":"2024-04-02","cited_by_count":72,"area":"diffusion"},{"id":"2311.12832","title":"Toward effective protection against diffusion based mimicry through score distillation","created":"2023-10-02","cited_by_count":65,"area":"diffusion"},{"id":"2208.07791","title":"Your ViT is Secretly a Hybrid Discriminative-Generative Diffusion Model","created":"2022-08-16","cited_by_count":58,"area":"diffusion"},{"id":"2405.16341","title":"R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model","created":"2024-05-25","cited_by_count":58,"area":"diffusion"},{"id":"2110.00473","title":"Score-Based Generative Classifiers","created":"2021-10-01","cited_by_count":53,"area":"diffusion"},{"id":"2410.15618","title":"Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation","created":"2024-10-21","cited_by_count":50,"area":"diffusion"},{"id":"2303.09962","title":"Adversarial Counterfactual Visual Explanations","created":"2023-03-17","cited_by_count":47,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2311.13127","title":"MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning","created":"2023-11-22","cited_by_count":44,"area":"diffusion"},{"id":"2306.04642","title":"DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models","created":"2023-05-25","cited_by_count":43,"area":"diffusion"},{"id":"2408.16807","title":"STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models","created":"2024-08-29","cited_by_count":42,"area":"diffusion"},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2312.07865","title":"SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Models","created":"2023-12-13","cited_by_count":36,"area":"diffusion"},{"id":"2206.10875","title":"Guided Diffusion Model for Adversarial Purification from Random Noise","created":"2022-06-22","cited_by_count":35,"area":"diffusion"},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2310.19248","title":"IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI","created":"2023-10-30","cited_by_count":35,"area":"diffusion"},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2208.08664","title":"Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance","created":"2022-08-18","cited_by_count":33,"area":"diffusion"},{"id":"2403.12404","title":"Understanding and Improving Training-free Loss-based Diffusion Guidance","created":"2024-03-19","cited_by_count":32,"area":"diffusion"},{"id":"2405.09882","title":"DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection","created":"2024-05-16","cited_by_count":32,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2401.15422","title":"A Survey on Data Augmentation in Large Model Era","created":"2024-01-27","cited_by_count":31,"area":"diffusion"},{"id":"2406.08337","title":"WMAdapter: Adding WaterMark Control to Latent Diffusion Models","created":"2024-06-12","cited_by_count":31,"area":"diffusion"},{"id":"2306.00974","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","created":"2023-06-01","cited_by_count":25,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2404.09401","title":"Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models","created":"2024-04-15","cited_by_count":23,"area":"diffusion"},{"id":"2311.11017","title":"Improving Adversarial Transferability by Stable Diffusion","created":"2023-11-18","cited_by_count":22,"area":"diffusion"},{"id":"2403.18775","title":"ImageNet-D: Benchmarking Neural Network Robustness on Diffusion Synthetic Object","created":"2024-03-27","cited_by_count":22,"area":"diffusion"},{"id":"2408.11071","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","created":"2024-08-18","cited_by_count":22,"area":"diffusion"},{"id":"2306.08257","title":"On the Robustness of Latent Diffusion Models","created":"2023-06-14","cited_by_count":21,"area":"diffusion"},{"id":"2312.11285","title":"Adv-Diffusion: Imperceptible Adversarial Face Identity Attack via Latent Diffusion Model","created":"2023-12-18","cited_by_count":21,"area":"diffusion"},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2310.02401","title":"FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models","created":"2023-10-03","cited_by_count":20,"area":"diffusion"},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2310.04687","title":"Targeted Attack Improves Protection against Unauthorized Diffusion Customization","created":"2023-10-07","cited_by_count":18,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2403.18035","title":"Bidirectional Consistency Models","created":"2024-03-26","cited_by_count":18,"area":"diffusion"},{"id":"2404.15081","title":"Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Models","created":"2024-04-23","cited_by_count":18,"area":"diffusion"},{"id":"2405.19424","title":"Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies","created":"2024-05-29","cited_by_count":18,"area":"diffusion"},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2404.19227","title":"Espresso: Robust Concept Filtering in Text-to-Image Models","created":"2024-04-30","cited_by_count":14,"area":"diffusion"},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14,"area":"diffusion"},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2408.10901","title":"A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse","created":"2024-08-20","cited_by_count":13,"area":"diffusion"},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12,"area":"diffusion"},{"id":"2407.20836","title":"Vulnerabilities in AI-generated Image Detection: The Challenge of Adversarial Attacks","created":"2024-07-30","cited_by_count":12,"area":"diffusion"},{"id":"2407.16193","title":"CloudFixer: Test-Time Adaptation for 3D Point Clouds via Diffusion-Guided Geometric Transformation","created":"2024-07-23","cited_by_count":11,"area":"diffusion"},{"id":"2503.10081","title":"AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption","created":"2025-03-13","cited_by_count":11,"area":"diffusion"},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2402.15429","title":"ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation","created":"2024-02-23","cited_by_count":10,"area":"diffusion"},{"id":"2404.13320","title":"Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think","created":"2024-04-20","cited_by_count":10,"area":"diffusion"},{"id":"2507.07139","title":"Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearning","created":"2025-07-09","cited_by_count":10,"area":"diffusion"},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9,"area":"diffusion"},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2403.19254","title":"Imperceptible Protection against Style Imitation from Diffusion Models","created":"2024-03-28","cited_by_count":9,"area":"diffusion"},{"id":"2406.00816","title":"Invisible Backdoor Attacks on Diffusion Models","created":"2024-06-02","cited_by_count":9,"area":"diffusion"},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9,"area":"diffusion"},{"id":"2411.16503","title":"Noise Diffusion for Enhancing Semantic Faithfulness in Text-to-Image Synthesis","created":"2024-11-25","cited_by_count":9,"area":"diffusion"},{"id":"2510.18328","title":"Scalable, Explainable and Provably Robust Anomaly Detection with One-Step Flow Matching","created":"2025-10-21","cited_by_count":9,"area":"diffusion"},{"id":"2210.09643","title":"Improving Adversarial Robustness by Contrastive Guided Diffusion Process","created":"2022-10-18","cited_by_count":8,"area":"diffusion"},{"id":"2312.05387","title":"Cross Domain Generative Augmentation: Domain Generalization with Latent Diffusion Models","created":"2023-12-08","cited_by_count":8,"area":"diffusion"},{"id":"2403.15309","title":"Controlled Training Data Generation with Diffusion Models","created":"2024-03-22","cited_by_count":8,"area":"diffusion"},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2407.10277","title":"Disrupting Diffusion-based Inpainters with Semantic Digression","created":"2024-07-14","cited_by_count":8,"area":"diffusion"},{"id":"2407.11424","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","created":"2024-07-16","cited_by_count":8,"area":"diffusion"},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2301.13862","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","created":"2023-01-31","cited_by_count":7,"area":"diffusion"},{"id":"2305.10388","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","created":"2023-05-17","cited_by_count":7,"area":"diffusion"},{"id":"2406.17399","title":"GradCheck: Analyzing classifier guidance gradients for conditional diffusion sampling","created":"2024-06-25","cited_by_count":7,"area":"diffusion"},{"id":"2409.08255","title":"LoRID: Low-Rank Iterative Diffusion for Adversarial Purification","created":"2024-09-12","cited_by_count":7,"area":"diffusion"},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7,"area":"diffusion"},{"id":"2501.00054","title":"AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchors","created":"2024-12-28","cited_by_count":7,"area":"diffusion"},{"id":"2503.10350","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","created":"2025-03-13","cited_by_count":7,"area":"diffusion"},{"id":"2504.17894","title":"DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editing","created":"2025-04-24","cited_by_count":7,"area":"diffusion"},{"id":"2512.16625","title":"DeContext as Defense: Safe Image Editing in Diffusion Transformers","created":"2025-12-18","cited_by_count":7,"area":"diffusion"},{"id":"2603.24570","title":"Anti-I2V: Safeguarding your photos from malicious image-to-video generation","created":"2026-03-25","cited_by_count":7,"area":"diffusion"},{"id":"2403.11162","title":"CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversion","created":"2024-03-17","cited_by_count":6,"area":"diffusion"}],"next_cursor":"100"}