{"total":58,"rows":[{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2102.04509","title":"Oops I Took A Gradient: Scalable Sampling for Discrete Distributions","created":"2021-02-08","cited_by_count":92,"area":null},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2203.14952","title":"Energy-based Latent Aligner for Incremental Learning","created":"2022-03-28","cited_by_count":37,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2206.10875","title":"Guided Diffusion Model for Adversarial Purification from Random Noise","created":"2022-06-22","cited_by_count":35,"area":"diffusion"},{"id":"2211.00322","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","created":"2022-11-01","cited_by_count":33,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2209.07959","title":"Towards Bridging the Performance Gaps of Joint Energy-based Models","created":"2022-09-16","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2210.16486","title":"Learning Probabilistic Models from Generator Latent Spaces with Hat EBM","created":"2022-10-29","cited_by_count":11,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2302.01056","title":"Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense","created":"2023-02-02","cited_by_count":7,"area":null},{"id":"2409.08255","title":"LoRID: Low-Rank Iterative Diffusion for Adversarial Purification","created":"2024-09-12","cited_by_count":7,"area":"diffusion"},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2410.23091","title":"CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defense","created":"2024-10-30","cited_by_count":4,"area":"diffusion"},{"id":"2405.18627","title":"PureGen: Universal Data Purification for Train-Time Poison Defense via Generative Model Dynamics","created":"2024-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2309.10348","title":"Language Guided Adversarial Purification","created":"2023-09-19","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2410.16805","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2411.18956","title":"Random Sampling for Diffusion-based Adversarial Purification","created":"2024-11-28","cited_by_count":1,"area":"diffusion"},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2509.25082","title":"MANI-Pure: Magnitude-Adaptive Noise Injection for Adversarial Purification","created":"2025-09-29","cited_by_count":1,"area":"diffusion"},{"id":"2512.21019","title":"Efficient and Robust Video Defense Framework against 3D-field Personalized Talking Face","created":"2025-12-24","cited_by_count":1,"area":null},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2205.12243","title":"EBM Life Cycle: MCMC Strategies for Synthesis, Defense, and Density Modeling","created":"2022-05-24","cited_by_count":0,"area":null},{"id":"2306.06081","title":"Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2308.15072","title":"Advancing Adversarial Robustness Through Adversarial Logit Update","created":"2023-08-29","cited_by_count":0,"area":null},{"id":"2311.13841","title":"Adversarial defense based on distribution transfer","created":"2023-11-23","cited_by_count":0,"area":"diffusion"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2412.08394","title":"Adversarial Purification by Consistency-aware Latent Space Optimization on Data Manifolds","created":"2024-12-11","cited_by_count":0,"area":"diffusion"},{"id":"2501.16904","title":"Diffusion or Non-Diffusion Adversarial Defenses: Rethinking the Relation between Classifier and Adversarial Purifier","created":"2025-01-28","cited_by_count":0,"area":"diffusion"},{"id":"2601.01109","title":"NADD: Amplifying Noise for Effective Diffusion-based Adversarial Purification","created":"2026-01-03","cited_by_count":0,"area":"diffusion"},{"id":"2605.06357","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.08440","title":"TARO: Temporal Adversarial Rectification Optimization Using Diffusion Models as Purifiers","created":"2026-05-08","cited_by_count":0,"area":"diffusion"}],"next_cursor":null}