{"total":134,"rows":[{"id":"2209.00796","title":"Diffusion Models: A Comprehensive Survey of Methods and Applications","created":"2022-09-02","cited_by_count":1114,"area":"diffusion"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2303.15361","title":"A Comprehensive Survey on Test-Time Adaptation under Distribution Shifts","created":"2023-03-27","cited_by_count":359,"area":null},{"id":"2303.15435","title":"The Stable Signature: Rooting Watermarks in Latent Diffusion Models","created":"2023-03-27","cited_by_count":304,"area":"diffusion"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2210.05475","title":"GENIE: Higher-Order Denoising Diffusion Solvers","created":"2022-10-11","cited_by_count":127,"area":"diffusion"},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2303.05762","title":"TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targets","created":"2023-03-10","cited_by_count":88,"area":"diffusion"},{"id":"2311.01797","title":"On the Generalization Properties of Diffusion Models","created":"2023-11-03","cited_by_count":68,"area":"diffusion"},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2110.00473","title":"Score-Based Generative Classifiers","created":"2021-10-01","cited_by_count":53,"area":"diffusion"},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2312.00084","title":"Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?","created":"2023-11-30","cited_by_count":38,"area":"diffusion"},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2206.10875","title":"Guided Diffusion Model for Adversarial Purification from Random Noise","created":"2022-06-22","cited_by_count":35,"area":"diffusion"},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2406.12839","title":"Evaluating the design space of diffusion-based generative models","created":"2024-06-18","cited_by_count":26,"area":"diffusion"},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2205.09619","title":"Improving Robustness against Real-World and Worst-Case Distribution Shifts through Decision Region Quantification","created":"2022-05-19","cited_by_count":16,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2510.24038","title":"Enhancing CLIP Robustness via Cross-Modality Alignment","created":"2025-10-28","cited_by_count":15,"area":"mllm"},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12,"area":null},{"id":"2312.11057","title":"DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models","created":"2023-12-18","cited_by_count":9,"area":"diffusion"},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2402.06655","title":"Adversarial Text Purification: A Large Language Model Approach for Defense","created":"2024-02-05","cited_by_count":8,"area":null},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2410.20824","title":"FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space","created":"2024-10-28","cited_by_count":8,"area":null},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2211.16092","title":"Unsupervised Visual Defect Detection with Score-Based Generative Model","created":"2022-11-29","cited_by_count":7,"area":"diffusion"},{"id":"2302.01056","title":"Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense","created":"2023-02-02","cited_by_count":7,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2406.00685","title":"Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training","created":"2024-06-02","cited_by_count":6,"area":null},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5,"area":"diffusion"},{"id":"2310.07084","title":"Investigating the Adversarial Robustness of Density Estimation Using the Probability Flow ODE","created":"2023-10-10","cited_by_count":4,"area":"diffusion"},{"id":"2312.07981","title":"Time Series Diffusion Method: A Denoising Diffusion Probabilistic Model for Vibration Signal Generation","created":"2023-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2410.23091","title":"CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defense","created":"2024-10-30","cited_by_count":4,"area":"diffusion"},{"id":"2305.17000","title":"DistriBlock: Identifying adversarial audio samples by leveraging characteristics of the output distribution","created":"2023-05-26","cited_by_count":3,"area":null},{"id":"2312.06423","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2403.19062","title":"GENESIS-RL: GEnerating Natural Edge-cases with Systematic Integration of Safety considerations and Reinforcement Learning","created":"2024-03-27","cited_by_count":3,"area":"deeprl"},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2412.21061","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","created":"2024-12-30","cited_by_count":3,"area":null},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2604.06662","title":"Towards Robust Content Watermarking Against Removal and Forgery Attacks","created":"2026-04-08","cited_by_count":3,"area":null},{"id":"2306.01435","title":"Improving Adversarial Robustness of DEQs with Explicit Regulations Along the Neural Dynamics","created":"2023-06-02","cited_by_count":2,"area":null},{"id":"2309.03702","title":"DiffDefense: Defending against Adversarial Attacks via Diffusion Models","created":"2023-09-07","cited_by_count":2,"area":"diffusion"},{"id":"2310.19439","title":"Asymmetric Diffusion Based Channel-Adaptive Secure Wireless Semantic Communications","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2505.13280","title":"FlowPure: Continuous Normalizing Flows for Adversarial Purification","created":"2025-05-19","cited_by_count":2,"area":"diffusion"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2601.21284","title":"PILD: Physics-Informed Learning via Diffusion","created":"2026-01-29","cited_by_count":2,"area":"diffusion"},{"id":"2303.07474","title":"Can Adversarial Examples Be Parsed to Reveal Victim Model Information?","created":"2023-03-13","cited_by_count":1,"area":null},{"id":"2308.15069","title":"MadSGM: Multivariate Anomaly Detection with Score-based Generative Models","created":"2023-08-29","cited_by_count":1,"area":null},{"id":"2309.10348","title":"Language Guided Adversarial Purification","created":"2023-09-19","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2407.00905","title":"Learning Robust 3D Representation from CLIP via Dual Denoising","created":"2024-07-01","cited_by_count":1,"area":"mllm"},{"id":"2408.00329","title":"OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack","created":"2024-08-01","cited_by_count":1,"area":null},{"id":"2410.16805","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2411.18956","title":"Random Sampling for Diffusion-based Adversarial Purification","created":"2024-11-28","cited_by_count":1,"area":"diffusion"},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2502.00834","title":"Boosting Adversarial Robustness and Generalization with Dictionary Structure","created":"2025-02-02","cited_by_count":1,"area":null},{"id":"2502.10452","title":"Quaternion-Hadamard Network: A Novel Defense Against Adversarial Attacks with a New Dataset","created":"2025-02-12","cited_by_count":1,"area":null},{"id":"2504.04747","title":"Two is Better than One: Efficient Ensemble Defense for Robust and Compact Models","created":"2025-04-07","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"}],"next_cursor":"100"}