{"total":46,"rows":[{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2309.06135","title":"Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts","created":"2023-09-12","cited_by_count":171,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132,"area":"diffusion"},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2311.00500","title":"Intriguing Properties of Data Attribution on Diffusion Models","created":"2023-11-01","cited_by_count":47,"area":"diffusion"},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2407.20836","title":"Vulnerabilities in AI-generated Image Detection: The Challenge of Adversarial Attacks","created":"2024-07-30","cited_by_count":12,"area":"diffusion"},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9,"area":"diffusion"},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2310.03664","title":"Certification of Deep Learning Models for Medical Image Segmentation","created":"2023-10-05","cited_by_count":5,"area":"diffusion"},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2501.14999","title":"VideoPure: Diffusion-based Adversarial Purification for Video Recognition","created":"2025-01-25","cited_by_count":5,"area":"diffusion"},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5,"area":"diffusion"},{"id":"2308.15692","title":"Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models","created":"2023-08-30","cited_by_count":4,"area":"diffusion"},{"id":"2506.10502","title":"A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks","created":"2025-06-12","cited_by_count":4,"area":"diffusion"},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2408.04839","title":"Adversarially Robust Industrial Anomaly Detection Through Diffusion Model","created":"2024-08-09","cited_by_count":3,"area":"diffusion"},{"id":"2509.13922","title":"Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification","created":"2025-09-17","cited_by_count":3,"area":"diffusion"},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2505.13280","title":"FlowPure: Continuous Normalizing Flows for Adversarial Purification","created":"2025-05-19","cited_by_count":2,"area":"diffusion"},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2505.22839","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","created":"2025-05-28","cited_by_count":1,"area":"diffusion"},{"id":"2311.13841","title":"Adversarial defense based on distribution transfer","created":"2023-11-23","cited_by_count":0,"area":"diffusion"},{"id":"2404.08273","title":"Struggle with Adversarial Defense? Try Diffusion","created":"2024-04-12","cited_by_count":0,"area":"diffusion"},{"id":"2409.00340","title":"LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models","created":"2024-08-31","cited_by_count":0,"area":"diffusion"},{"id":"2501.16904","title":"Diffusion or Non-Diffusion Adversarial Defenses: Rethinking the Relation between Classifier and Adversarial Purifier","created":"2025-01-28","cited_by_count":0,"area":"diffusion"},{"id":"2601.01109","title":"NADD: Amplifying Noise for Effective Diffusion-based Adversarial Purification","created":"2026-01-03","cited_by_count":0,"area":"diffusion"},{"id":"2602.19931","title":"Expanding the Role of Diffusion Models for Robust Classifier Training","created":"2026-02-23","cited_by_count":0,"area":"diffusion"},{"id":"2605.08440","title":"TARO: Temporal Adversarial Rectification Optimization Using Diffusion Models as Purifiers","created":"2026-05-08","cited_by_count":0,"area":"diffusion"}],"next_cursor":null}