Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance
On the map: Diffusion models → Diffusion foundations and sampling
Abstract (arXiv)
Denoising diffusion probabilistic models (DDPMs) are a recent family of generative models that achieve state-of-the-art results. In order to obtain class-conditional generation, it was suggested to guide the diffusion process by gradients from a time-dependent classifier. While the idea is theoretically sound, deep learning-based classifiers are infamously susceptible to gradient-based adversarial attacks. Therefore, while traditional classifiers may achieve good accuracy scores, their gradients are possibly unreliable and might hinder the improvement of the generation results. Recent work discovered that adversarially robust classifiers exhibit gradients that are aligned with human perception, and these could better guide a generative process towards semantically meaningful images. We utilize this observation by defining and training a time-dependent adversarially robust classifier and use it as guidance for a generative diffusion model. In experiments on the highly challenging and diverse ImageNet dataset, our scheme introduces significantly more intelligible intermediate gradients, better alignment with theoretical findings, as well as improved generation results under several evaluation metrics. Furthermore, we conduct an opinion survey whose findings indicate that human raters prefer our method's results.
Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 70 of its 85 references that are in the map. First posted on arXiv 18 Aug 2022.
Builds on
70 of 85 references.
Closest ancestors · 9
Same direction, newest first
- 2022Classifier-Free Diffusion Guidance26 Jul
- 2022CARD: Classification and Regression Diffusion Models15 Jun
- 2021Score-based Generative Modeling in Latent Space10 Jun
- 2021Cascaded Diffusion Models for High Fidelity Image Generation30 May
- 2021Diffusion Models Beat GANs on Image Synthesis11 May
- 2021UNIT-DDPM: UNpaired Image Translation with Denoising Diffusion Probabilistic Models12 Apr
- 2021Improved Denoising Diffusion Probabilistic Models18 Feb
- 2020Score-Based Generative Modeling through Stochastic Differential Equations26 Nov
- 2020Denoising Diffusion Probabilistic Models19 Jun
Other references · 61
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2022Generative Adversarial Networkscited by 5,627
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
38 more
- 2013Intriguing properties of neural networkscited by 5,155
- 2017Neural Discrete Representation Learningcited by 4,712
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,101
- 2013Auto-Encoding Variational Bayescited by 4,053
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
- 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
- 2022Video Diffusion Modelscited by 2,305
- 2017Improved Training of Wasserstein GANscited by 2,235
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,054
- 2016Adversarial examples in the physical worldcited by 1,769
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2022Denoising Diffusion Restoration Modelscited by 963
- 2019Improved Precision and Recall Metric for Assessing Generative Modelscited by 944
- 2021Blended Diffusion for Text-driven Editing of Natural Imagescited by 927
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 776
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2020NVAE: A Deep Hierarchical Variational Autoencodercited by 637
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
- 20213D Shape Generation and Completion through Point-Voxel Diffusioncited by 516
- 2022StyleGAN-XL: Scaling StyleGAN to Large Diverse Datasetscited by 492
- 2022Diffusion Models for Adversarial Purificationcited by 476
- 2020Differentiable Augmentation for Data-Efficient GAN Trainingcited by 363
- 2018Feature Denoising for Improving Adversarial Robustnesscited by 314
- 2021SegDiff: Image Segmentation with Diffusion Probabilistic Modelscited by 280
- 2020Understanding and Improving Fast Adversarial Trainingcited by 214
- 2021More Control for Free! Image Synthesis with Semantic Diffusion Guidancecited by 212
- 2021SNIPS: Solving Noisy Inverse Problems Stochasticallycited by 191
- 2021Diff-TTS: A Denoising Diffusion Model for Text-to-Speechcited by 157
- 2019Adversarial Robustness through Local Linearizationcited by 146
- 2020Self-Adaptive Training: beyond Empirical Risk Minimizationcited by 126
- 2017A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortionscited by 108
- 2020Boosting Adversarial Training with Hypersphere Embeddingcited by 97
- 2022Lossy Compression with Gaussian Diffusioncited by 90
- 2022Denoising Likelihood Score Matching for Conditional Score-based Data Generationcited by 46
- 2021Stochastic Image Denoising by Sampling from the Posterior Distributioncited by 45
- 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 43
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2022: 4; 2023: 16; 2024: 8; 2025: 2; 2026: 3.
33 papers.
Sort:
By area:
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,178
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,114
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
- 2023Score-Based Diffusion Models as Principled Priors for Inverse Imagingcited by 127
- 2022Multiscale Structure Guided Diffusion for Image Deblurringcited by 77
- 2023Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --cited by 71
- 2023On the Design Fundamentals of Diffusion Models: A Surveycited by 60
- 2023Relightful Harmonization: Lighting-aware Portrait Background Replacementcited by 57
- 2023Reuse and Diffuse: Iterative Denoising for Text-to-Video Generationcited by 50
- 2022JPEG Artifact Correction using Denoising Diffusion Restoration Modelscited by 47
- 2023WaveDM: Wavelet-Based Diffusion Models for Image Restorationcited by 47
- 2024Training Free Guided Flow Matching with Optimal Controlcited by 25
21 more
- 2024Diffusion Time-step Curriculum for One Image to 3D Generationcited by 21
- 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustnesscited by 20
- 2024Detecting Out-Of-Distribution Earth Observation Images with Diffusion Modelscited by 14
- 2023Accelerating Guided Diffusion Sampling with Splitting Numerical Methodscited by 13
- 2023Censored Sampling of Diffusion Models Using 3 Minutes of Human Feedbackcited by 12
- 2024InstructGIE: Towards Generalizable Image Editingcited by 12
- 2024Pi-fusion: Physics-informed diffusion model for learning fluid dynamicscited by 9
- 2024Exploring Behavior-Relevant and Disentangled Neural Dynamics with Generative Diffusion Modelscited by 9
- 2024GeoGuide: Geometric guidance of diffusion modelscited by 7
- 2023Bridge Diffusion Model: Bridge Chinese Text-to-Image Diffusion Model with English Communitiescited by 6
- 2026Test-Time Gradient Guidance of Flow Policies in Reinforcement Learningcited by 6
- 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifierscited by 5
- 2023Bootstrap Diffusion Model Curve Estimation for High Resolution Low-Light Image Enhancementcited by 5
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Informationcited by 5
- 2026Reward Sharpness-Aware Fine-Tuning for Diffusion Modelscited by 2
- 2023Leveraging Graph Diffusion Models for Network Refinement Taskscited by 1
- 2025ExpertGen: Training-Free Expert Guidance for Controllable Text-to-Face Generationcited by 1
- 2025Enhancing Diffusion Model Guidance through Calibration and Regularizationcited by 1
- 2026Constrained Diffusion for Accelerated Structure Relaxation of Inorganic Solids with Point Defectscited by 1
- 2023Score-based Conditional Generation with Fewer Labeled Data by Self-calibrating Classifier Guidancecited by 0
- 2023Perceptual Similarity guidance and text guidance optimization for Editing Real Images using Guided Diffusion Modelscited by 0
- 2026Test-Time Gradient Guidance of Flow Policies in Reinforcement Learning9 Jun 2026
- 2026Reward Sharpness-Aware Fine-Tuning for Diffusion Models22 Mar 2026
- 2026Constrained Diffusion for Accelerated Structure Relaxation of Inorganic Solids with Point Defects22 Feb 2026
- 2025Enhancing Diffusion Model Guidance through Calibration and Regularization8 Nov 2025
- 2025ExpertGen: Training-Free Expert Guidance for Controllable Text-to-Face Generation22 May 2025
- 2024Training Free Guided Flow Matching with Optimal Control23 Oct 2024
- 2024Exploring Behavior-Relevant and Disentangled Neural Dynamics with Generative Diffusion Models12 Oct 2024
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information12 Aug 2024
- 2024GeoGuide: Geometric guidance of diffusion models17 Jul 2024
- 2024Pi-fusion: Physics-informed diffusion model for learning fluid dynamics6 Jun 2024
- 2024Detecting Out-Of-Distribution Earth Observation Images with Diffusion Models19 Apr 2024
- 2024Diffusion Time-step Curriculum for One Image to 3D Generation6 Apr 2024
21 more
- 2024InstructGIE: Towards Generalizable Image Editing8 Mar 2024
- 2023Relightful Harmonization: Lighting-aware Portrait Background Replacement11 Dec 2023
- 2023Perceptual Similarity guidance and text guidance optimization for Editing Real Images using Guided Diffusion Models9 Dec 2023
- 2023Leveraging Graph Diffusion Models for Network Refinement Tasks29 Nov 2023
- 2023Bootstrap Diffusion Model Curve Estimation for High Resolution Low-Light Image Enhancement26 Sep 2023
- 2023Reuse and Diffuse: Iterative Denoising for Text-to-Video Generation7 Sep 2023
- 2023Bridge Diffusion Model: Bridge Chinese Text-to-Image Diffusion Model with English Communities2 Sep 2023
- 2023Score-based Conditional Generation with Fewer Labeled Data by Self-calibrating Classifier Guidance9 Jul 2023
- 2023Censored Sampling of Diffusion Models Using 3 Minutes of Human Feedback6 Jul 2023
- 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers15 Jun 2023
- 2023On the Design Fundamentals of Diffusion Models: A Survey7 Jun 2023
- 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustness30 May 2023
- 2023WaveDM: Wavelet-Based Diffusion Models for Image Restoration23 May 2023
- 2023Score-Based Diffusion Models as Principled Priors for Inverse Imaging23 Apr 2023
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Models14 Mar 2023
- 2023Accelerating Guided Diffusion Sampling with Splitting Numerical Methods27 Jan 2023
- 2023Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --9 Jan 2023
- 2022Multiscale Structure Guided Diffusion for Image Deblurring4 Dec 2022
- 2022Imagic: Text-Based Real Image Editing with Diffusion Models17 Oct 2022
- 2022JPEG Artifact Correction using Denoising Diffusion Restoration Models23 Sep 2022
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applications2 Sep 2022
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,178
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,114
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
- 2023Score-Based Diffusion Models as Principled Priors for Inverse Imagingcited by 127
- 2022Multiscale Structure Guided Diffusion for Image Deblurringcited by 77
- 2023On the Design Fundamentals of Diffusion Models: A Surveycited by 60
- 2023Relightful Harmonization: Lighting-aware Portrait Background Replacementcited by 57
- 2023Reuse and Diffuse: Iterative Denoising for Text-to-Video Generationcited by 50
- 2022JPEG Artifact Correction using Denoising Diffusion Restoration Modelscited by 47
- 2023WaveDM: Wavelet-Based Diffusion Models for Image Restorationcited by 47
- 2024Training Free Guided Flow Matching with Optimal Controlcited by 25
- 2024Detecting Out-Of-Distribution Earth Observation Images with Diffusion Modelscited by 14
12 most cited of 27 All 27 (JSON)
- 2026Reward Sharpness-Aware Fine-Tuning for Diffusion Models22 Mar 2026
- 2025Enhancing Diffusion Model Guidance through Calibration and Regularization8 Nov 2025
- 2025ExpertGen: Training-Free Expert Guidance for Controllable Text-to-Face Generation22 May 2025
- 2024Training Free Guided Flow Matching with Optimal Control23 Oct 2024
- 2024Exploring Behavior-Relevant and Disentangled Neural Dynamics with Generative Diffusion Models12 Oct 2024
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information12 Aug 2024
- 2024GeoGuide: Geometric guidance of diffusion models17 Jul 2024
- 2024Pi-fusion: Physics-informed diffusion model for learning fluid dynamics6 Jun 2024
- 2024Detecting Out-Of-Distribution Earth Observation Images with Diffusion Models19 Apr 2024
- 2024InstructGIE: Towards Generalizable Image Editing8 Mar 2024
- 2023Relightful Harmonization: Lighting-aware Portrait Background Replacement11 Dec 2023
- 2023Perceptual Similarity guidance and text guidance optimization for Editing Real Images using Guided Diffusion Models9 Dec 2023
12 newest of 27 All 27 (JSON)
- 2023Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --cited by 71
- 2024Diffusion Time-step Curriculum for One Image to 3D Generationcited by 21
- 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustnesscited by 20
- 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifierscited by 5
- 2026Constrained Diffusion for Accelerated Structure Relaxation of Inorganic Solids with Point Defectscited by 1
- 2026Constrained Diffusion for Accelerated Structure Relaxation of Inorganic Solids with Point Defects22 Feb 2026
- 2024Diffusion Time-step Curriculum for One Image to 3D Generation6 Apr 2024
- 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers15 Jun 2023
- 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustness30 May 2023
- 2023Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --9 Jan 2023
Similar, not cited
Close in wording, no citation either way
- 2026Expanding the Role of Diffusion Models for Robust Classifier Training
- 2025Improved Diffusion-based Generative Model with Better Adversarial Robustness
- 2023Robust Classification via a Single Diffusion Model
- 2025Diffusion Models are Robust Pretrainers
- 2022Improving Adversarial Robustness by Contrastive Guided Diffusion Process
- 2024An overview of diffusion models for generative artificial intelligence
- 2024Adv-KD: Adversarial Knowledge Distillation for Faster Diffusion Sampling
- 2023Conditional Generation from Unconditional Diffusion Models using Denoiser Representations