{"total":59,"rows":[{"id":"2305.04175","title":"Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning","created":"2023-05-07","cited_by_count":92,"area":"diffusion"},{"id":"2306.06874","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","created":"2023-06-12","cited_by_count":68,"area":"diffusion"},{"id":"2401.04136","title":"The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline","created":"2024-01-07","cited_by_count":33,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2407.15811","title":"Stretching Each Dollar: Diffusion Training from Scratch on a Micro-Budget","created":"2024-07-22","cited_by_count":30,"area":"diffusion"},{"id":"2409.05294","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","created":"2024-09-09","cited_by_count":25,"area":"diffusion"},{"id":"2306.03436","title":"Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process","created":"2023-06-06","cited_by_count":19,"area":"diffusion"},{"id":"2402.02739","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","created":"2024-02-05","cited_by_count":17,"area":"diffusion"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2308.10718","title":"Backdooring Textual Inversion for Concept Censorship","created":"2023-08-21","cited_by_count":14,"area":"diffusion"},{"id":"2503.09669","title":"Silent Branding Attack: Trigger-free Data Poisoning Attack on Text-to-Image Diffusion Models","created":"2025-03-12","cited_by_count":11,"area":"diffusion"},{"id":"2311.02373","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","created":"2023-11-04","cited_by_count":9,"area":"diffusion"},{"id":"2406.00816","title":"Invisible Backdoor Attacks on Diffusion Models","created":"2024-06-02","cited_by_count":9,"area":"diffusion"},{"id":"2412.11441","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","created":"2024-12-16","cited_by_count":9,"area":"diffusion"},{"id":"2504.21072","title":"Erased but Not Forgotten: How Backdoors Compromise Concept Erasure","created":"2025-04-29","cited_by_count":9,"area":"diffusion"},{"id":"2502.11798","title":"BackdoorDM: A Comprehensive Benchmark for Backdoor Learning on Diffusion Model","created":"2025-02-17","cited_by_count":8,"area":"diffusion"},{"id":"2301.13862","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","created":"2023-01-31","cited_by_count":7,"area":"diffusion"},{"id":"2309.13166","title":"Invisible Watermarking for Audio Generation Diffusion Models","created":"2023-09-22","cited_by_count":7,"area":"diffusion"},{"id":"2310.06372","title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data","created":"2023-10-10","cited_by_count":6,"area":"diffusion"},{"id":"2409.13945","title":"PureDiffusion: Using Backdoor to Counter Backdoor in Generative Diffusion Models","created":"2024-09-20","cited_by_count":6,"area":"diffusion"},{"id":"2505.08809","title":"MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr\\\"odinger Bridges","created":"2025-05-12","cited_by_count":6,"area":"diffusion"},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2406.14429","title":"CollaFuse: Collaborative Diffusion Models","created":"2024-06-20","cited_by_count":4,"area":"diffusion"},{"id":"2410.18866","title":"The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods","created":"2024-10-24","cited_by_count":4,"area":"diffusion"},{"id":"2504.14815","title":"What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale","created":"2025-04-21","cited_by_count":4,"area":"diffusion"},{"id":"2602.21977","title":"When LoRA Betrays: Backdooring Text-to-Image Models by Masquerading as Benign Adapters","created":"2026-02-25","cited_by_count":4,"area":"diffusion"},{"id":"2402.05967","title":"The last Dance : Robust backdoor attack via diffusion models and bayesian approach","created":"2024-02-05","cited_by_count":3,"area":"diffusion"},{"id":"2502.19047","title":"A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models","created":"2025-02-26","cited_by_count":3,"area":"diffusion"},{"id":"2503.06340","title":"Backdoor Attacks on Discrete Graph Diffusion Models","created":"2025-03-08","cited_by_count":3,"area":"diffusion"},{"id":"2405.00466","title":"Lazy Layers to Make Fine-Tuned Diffusion Models More Traceable","created":"2024-05-01","cited_by_count":2,"area":"diffusion"},{"id":"2409.18897","title":"Detecting Dataset Abuse in Fine-Tuning Stable Diffusion Models for Text-to-Image Synthesis","created":"2024-09-27","cited_by_count":2,"area":"diffusion"},{"id":"2411.12389","title":"Combinational Backdoor Attack against Customized Text-to-Image Models","created":"2024-11-19","cited_by_count":2,"area":"diffusion"},{"id":"2503.18459","title":"Hiding Images in Diffusion Models by Editing Learned Score Functions","created":"2025-03-24","cited_by_count":2,"area":"diffusion"},{"id":"2504.18563","title":"Backdoor Defense in Diffusion Models via Spatial Attention Unlearning","created":"2025-04-21","cited_by_count":2,"area":"diffusion"},{"id":"2508.18235","title":"Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2602.22246","title":"Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models","created":"2026-02-24","cited_by_count":2,"area":"diffusion"},{"id":"2406.15863","title":"EmoAttack: Emotion-to-Image Diffusion Models for Emotional Backdoor Generation","created":"2024-06-22","cited_by_count":1,"area":"diffusion"},{"id":"2410.22445","title":"Embedding Watermarks in Diffusion Process for Model Intellectual Property Protection","created":"2024-10-29","cited_by_count":1,"area":"diffusion"},{"id":"2411.14681","title":"TrojanEdit: Multimodal Backdoor Attack Against Image Editing Model","created":"2024-11-22","cited_by_count":1,"area":"diffusion"},{"id":"2502.20650","title":"Gungnir: Exploiting Stylistic Features in Images for Backdoor Attacks on Diffusion Models","created":"2025-02-28","cited_by_count":1,"area":"diffusion"},{"id":"2506.04879","title":"Invisible Backdoor Triggers in Image Editing Model via Deep Watermarking","created":"2025-06-05","cited_by_count":1,"area":"diffusion"},{"id":"2508.01605","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","created":"2025-08-03","cited_by_count":1,"area":"diffusion"},{"id":"2512.15769","title":"Data-Chain Backdoor: Do You Trust Diffusion Models as Generative Data Supplier?","created":"2025-12-12","cited_by_count":1,"area":"diffusion"},{"id":"2603.01019","title":"BadRSSD: Backdoor Attacks on Regularized Self-Supervised Diffusion Models","created":"2026-03-01","cited_by_count":1,"area":"diffusion"},{"id":"2311.12858","title":"RAEDiff: Denoising Diffusion Probabilistic Models Based Reversible Adversarial Examples Self-Generation and Self-Recovery","created":"2023-10-25","cited_by_count":0,"area":"diffusion"},{"id":"2504.00952","title":"Personalized Federated Training of Diffusion Models with Privacy Guarantees","created":"2025-04-01","cited_by_count":0,"area":"diffusion"},{"id":"2508.03221","title":"BadBlocks: Low-Cost and Stealthy Backdoor Attacks Tailored for Text-to-Image Diffusion Models","created":"2025-08-05","cited_by_count":0,"area":"diffusion"},{"id":"2510.20792","title":"BadGraph: A Backdoor Attack Against Latent Diffusion Model for Text-Guided Graph Generation","created":"2025-10-23","cited_by_count":0,"area":"diffusion"},{"id":"2602.01765","title":"Backdoor Sentinel: Detecting and Detoxifying Backdoors in Diffusion Models via Temporal Noise Consistency","created":"2026-02-02","cited_by_count":0,"area":"diffusion"},{"id":"2602.04898","title":"Semantic-level Backdoor Attack against Text-to-Image Diffusion Models","created":"2026-02-03","cited_by_count":0,"area":"diffusion"},{"id":"2603.04064","title":"Tuning Just Enough: Lightweight Backdoor Attacks on Multi-Encoder Diffusion Models","created":"2026-03-04","cited_by_count":0,"area":"diffusion"},{"id":"2603.06508","title":"When One Modality Rules Them All: Backdoor Modality Collapse in Multimodal Diffusion Models","created":"2026-03-06","cited_by_count":0,"area":"diffusion"},{"id":"2605.00935","title":"Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embedding","created":"2026-05-01","cited_by_count":0,"area":"diffusion"},{"id":"2605.09397","title":"BadDLM: Backdooring Diffusion Language Models with Diverse Targets","created":"2026-05-10","cited_by_count":0,"area":"diffusion"},{"id":"2605.19262","title":"Backdooring Masked Diffusion Language Models","created":"2026-05-19","cited_by_count":0,"area":"diffusion"},{"id":"2605.19698","title":"Awakening the Hydra: Stabilizing Multi-Concept Backdoor Injection in Text-to-Image Diffusion Models","created":"2026-05-19","cited_by_count":0,"area":"diffusion"},{"id":"2606.23362","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","created":"2026-06-22","cited_by_count":0,"area":"diffusion"},{"id":"2608.22824","title":"DIME: Query-Efficient Framework for Membership Inference on Diffusion Models","created":"2026-08-24","cited_by_count":0,"area":"diffusion"},{"id":"2609.25884","title":"LoRango: It Takes Two LoRAs to Unlock Hidden Behaviors in Diffusion Models","created":"2026-09-22","cited_by_count":0,"area":"diffusion"}],"next_cursor":null}