{"total":476,"rows":[{"id":"2210.09276","title":"Imagic: Text-Based Real Image Editing with Diffusion Models","created":"2022-10-17","cited_by_count":1178,"area":"diffusion"},{"id":"2209.00796","title":"Diffusion Models: A Comprehensive Survey of Methods and Applications","created":"2022-09-02","cited_by_count":1114,"area":"diffusion"},{"id":"2209.04747","title":"Diffusion Models in Vision: A Survey","created":"2022-09-10","cited_by_count":1015,"area":"diffusion"},{"id":"2211.01324","title":"eDiff-I: Text-to-Image Diffusion Models with an Ensemble of Expert Denoisers","created":"2022-11-02","cited_by_count":931,"area":"diffusion"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2212.02500","title":"PhysDiff: Physics-Guided Human Motion Diffusion Model","created":"2022-12-05","cited_by_count":368,"area":"diffusion"},{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2206.09012","title":"Diffusion models as plug-and-play priors","created":"2022-06-17","cited_by_count":231,"area":"diffusion"},{"id":"2302.05872","title":"I$^2$SB: Image-to-Image Schr\\\"odinger Bridge","created":"2023-02-12","cited_by_count":218,"area":"diffusion"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2306.09305","title":"Fast Training of Diffusion Models with Masked Transformers","created":"2023-06-15","cited_by_count":176,"area":"diffusion"},{"id":"2211.13449","title":"Fast Sampling of Diffusion Models via Operator Learning","created":"2022-11-24","cited_by_count":175,"area":"diffusion"},{"id":"2302.04578","title":"Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples","created":"2023-02-09","cited_by_count":167,"area":"diffusion"},{"id":"2401.17263","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","created":"2024-01-30","cited_by_count":156,"area":"safety"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2303.15233","title":"Text-to-Image Diffusion Models are Zero-Shot Classifiers","created":"2023-03-27","cited_by_count":143,"area":"diffusion"},{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134,"area":"safety"},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132,"area":"diffusion"},{"id":"2303.08084","title":"Editing Implicit Assumptions in Text-to-Image Diffusion Models","created":"2023-03-14","cited_by_count":130,"area":"diffusion"},{"id":"2210.05475","title":"GENIE: Higher-Order Denoising Diffusion Solvers","created":"2022-10-11","cited_by_count":127,"area":"diffusion"},{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2312.02139","title":"DiffiT: Diffusion Vision Transformers for Image Generation","created":"2023-12-04","cited_by_count":106,"area":"diffusion"},{"id":"2303.17076","title":"DiffCollage: Parallel Generation of Large Content with Diffusion Models","created":"2023-03-30","cited_by_count":103,"area":"diffusion"},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2302.07400","title":"Score-based Diffusion Models in Function Space","created":"2023-02-14","cited_by_count":82,"area":"diffusion"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2404.07771","title":"An Overview of Diffusion Models: Applications, Guided Generation, Statistical Rates and Optimization","created":"2024-04-11","cited_by_count":73,"area":"diffusion"},{"id":"2207.03442","title":"Back to the Source: Diffusion-Driven Test-Time Adaptation","created":"2022-07-07","cited_by_count":71,"area":null},{"id":"2301.03362","title":"Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --","created":"2023-01-09","cited_by_count":71,"area":null},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2212.02773","title":"DiffusionInst: Diffusion Model for Instance Segmentation","created":"2022-12-06","cited_by_count":49,"area":"diffusion"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2209.11888","title":"JPEG Artifact Correction using Denoising Diffusion Restoration Models","created":"2022-09-23","cited_by_count":47,"area":"diffusion"},{"id":"2303.09962","title":"Adversarial Counterfactual Visual Explanations","created":"2023-03-17","cited_by_count":47,"area":"diffusion"},{"id":"2310.18840","title":"Customizing 360-Degree Panoramas through Text-to-Image Diffusion Models","created":"2023-10-28","cited_by_count":47,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2311.13127","title":"MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning","created":"2023-11-22","cited_by_count":44,"area":"diffusion"},{"id":"2210.12867","title":"Deep Equilibrium Approaches to Diffusion Models","created":"2022-10-23","cited_by_count":42,"area":"diffusion"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2312.00084","title":"Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?","created":"2023-11-30","cited_by_count":38,"area":"diffusion"},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2406.09416","title":"Alleviating Distortion in Image Generation via Multi-Resolution Diffusion Models and Time-Dependent Layer Normalization","created":"2024-06-13","cited_by_count":36,"area":"diffusion"},{"id":"2206.10875","title":"Guided Diffusion Model for Adversarial Purification from Random Noise","created":"2022-06-22","cited_by_count":35,"area":"diffusion"},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2403.10893","title":"A Watermark-Conditioned Diffusion Model for IP Protection","created":"2024-03-16","cited_by_count":35,"area":"diffusion"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2208.08664","title":"Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance","created":"2022-08-18","cited_by_count":33,"area":"diffusion"},{"id":"2211.00322","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","created":"2022-11-01","cited_by_count":33,"area":"diffusion"},{"id":"2504.11195","title":"R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning","created":"2025-04-15","cited_by_count":33,"area":"mllm"},{"id":"2407.01606","title":"On Discrete Prompt Optimization for Diffusion Models","created":"2024-06-27","cited_by_count":29,"area":"diffusion"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2409.05294","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","created":"2024-09-09","cited_by_count":25,"area":"diffusion"},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2405.08363","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","created":"2024-05-14","cited_by_count":24,"area":null},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2410.04479","title":"SITCOM: Step-wise Triple-Consistent Diffusion Sampling for Inverse Problems","created":"2024-10-06","cited_by_count":24,"area":"diffusion"},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2306.08328","title":"Distribution Shift Inversion for Out-of-Distribution Prediction","created":"2023-06-14","cited_by_count":23,"area":null},{"id":"2410.21802","title":"Text-Guided Attention is All You Need for Zero-Shot Robustness in Vision-Language Models","created":"2024-10-29","cited_by_count":23,"area":"mllm"},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2411.16832","title":"Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing","created":"2024-11-25","cited_by_count":21,"area":"diffusion"},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2411.01703","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","created":"2024-11-03","cited_by_count":19,"area":"mllm"},{"id":"2310.04687","title":"Targeted Attack Improves Protection against Unauthorized Diffusion Customization","created":"2023-10-07","cited_by_count":18,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2305.09241","title":"Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examples","created":"2023-05-16","cited_by_count":17,"area":null},{"id":"2312.10993","title":"Realistic Human Motion Generation with Cross-Diffusion Models","created":"2023-12-18","cited_by_count":17,"area":"diffusion"},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null}],"next_cursor":"100"}