mlsanityData to 14 Oct 2026

Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance

arXiv 2208.08664 ↗First posted 18 Aug 2022cs.CV cs.LGcited by 33

On the map: Diffusion models → Diffusion foundations and sampling

Abstract (arXiv)

Denoising diffusion probabilistic models (DDPMs) are a recent family of generative models that achieve state-of-the-art results. In order to obtain class-conditional generation, it was suggested to guide the diffusion process by gradients from a time-dependent classifier. While the idea is theoretically sound, deep learning-based classifiers are infamously susceptible to gradient-based adversarial attacks. Therefore, while traditional classifiers may achieve good accuracy scores, their gradients are possibly unreliable and might hinder the improvement of the generation results. Recent work discovered that adversarially robust classifiers exhibit gradients that are aligned with human perception, and these could better guide a generative process towards semantically meaningful images. We utilize this observation by defining and training a time-dependent adversarially robust classifier and use it as guidance for a generative diffusion model. In experiments on the highly challenging and diverse ImageNet dataset, our scheme introduces significantly more intelligible intermediate gradients, better alignment with theoretical findings, as well as improved generation results under several evaluation metrics. Furthermore, we conduct an opinion survey whose findings indicate that human raters prefer our method's results.

Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 70 of its 85 references that are in the map. First posted on arXiv 18 Aug 2022.

Builds on

70 of 85 references.

Closest ancestors · 9

Same direction, newest first

  1. 2022Classifier-Free Diffusion Guidance26 Jul
  2. 2022CARD: Classification and Regression Diffusion Models15 Jun
  3. 2021Score-based Generative Modeling in Latent Space10 Jun
  4. 2021Cascaded Diffusion Models for High Fidelity Image Generation30 May
  5. 2021Diffusion Models Beat GANs on Image Synthesis11 May
  6. 2021UNIT-DDPM: UNpaired Image Translation with Denoising Diffusion Probabilistic Models12 Apr
  7. 2021Improved Denoising Diffusion Probabilistic Models18 Feb
  8. 2020Score-Based Generative Modeling through Stochastic Differential Equations26 Nov
  9. 2020Denoising Diffusion Probabilistic Models19 Jun

Other references · 61

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  4. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  6. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  10. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  11. 2022Generative Adversarial Networkscited by 5,627
  12. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
38 more
  1. 2013Intriguing properties of neural networkscited by 5,155
  2. 2017Neural Discrete Representation Learningcited by 4,712
  3. 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,101
  4. 2013Auto-Encoding Variational Bayescited by 4,053
  5. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
  6. 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
  7. 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
  8. 2022Video Diffusion Modelscited by 2,305
  9. 2017Improved Training of Wasserstein GANscited by 2,235
  10. 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,054
  11. 2016Adversarial examples in the physical worldcited by 1,769
  12. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
  13. 2022Denoising Diffusion Restoration Modelscited by 963
  14. 2019Improved Precision and Recall Metric for Assessing Generative Modelscited by 944
  15. 2021Blended Diffusion for Text-driven Editing of Natural Imagescited by 927
  16. 2018Robustness May Be at Odds with Accuracycited by 880
  17. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 776
  18. 2017Evasion Attacks against Machine Learning at Test Timecited by 689
  19. 2020NVAE: A Deep Hierarchical Variational Autoencodercited by 637
  20. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
  21. 20213D Shape Generation and Completion through Point-Voxel Diffusioncited by 516
  22. 2022StyleGAN-XL: Scaling StyleGAN to Large Diverse Datasetscited by 492
  23. 2022Diffusion Models for Adversarial Purificationcited by 476
  24. 2020Differentiable Augmentation for Data-Efficient GAN Trainingcited by 363
  25. 2018Feature Denoising for Improving Adversarial Robustnesscited by 314
  26. 2021SegDiff: Image Segmentation with Diffusion Probabilistic Modelscited by 280
  27. 2020Understanding and Improving Fast Adversarial Trainingcited by 214
  28. 2021More Control for Free! Image Synthesis with Semantic Diffusion Guidancecited by 212
  29. 2021SNIPS: Solving Noisy Inverse Problems Stochasticallycited by 191
  30. 2021Diff-TTS: A Denoising Diffusion Model for Text-to-Speechcited by 157
  31. 2019Adversarial Robustness through Local Linearizationcited by 146
  32. 2020Self-Adaptive Training: beyond Empirical Risk Minimizationcited by 126
  33. 2017A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortionscited by 108
  34. 2020Boosting Adversarial Training with Hypersphere Embeddingcited by 97
  35. 2022Lossy Compression with Gaussian Diffusioncited by 90
  36. 2022Denoising Likelihood Score Matching for Conditional Score-based Data Generationcited by 46
  37. 2021Stochastic Image Denoising by Sampling from the Posterior Distributioncited by 45
  38. 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 43

50 most cited of 61 All 61 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2022: 4; 2023: 16; 2024: 8; 2025: 2; 2026: 3.

33 papers.

Sort:

By area:

  1. 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,178
  2. 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,114
  3. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
  4. 2023Score-Based Diffusion Models as Principled Priors for Inverse Imagingcited by 127
  5. 2022Multiscale Structure Guided Diffusion for Image Deblurringcited by 77
  6. 2023Image Denoising: The Deep Learning Revolution and Beyond -- A Survey Paper --cited by 71
  7. 2023On the Design Fundamentals of Diffusion Models: A Surveycited by 60
  8. 2023Relightful Harmonization: Lighting-aware Portrait Background Replacementcited by 57
  9. 2023Reuse and Diffuse: Iterative Denoising for Text-to-Video Generationcited by 50
  10. 2022JPEG Artifact Correction using Denoising Diffusion Restoration Modelscited by 47
  11. 2023WaveDM: Wavelet-Based Diffusion Models for Image Restorationcited by 47
  12. 2024Training Free Guided Flow Matching with Optimal Controlcited by 25
21 more
  1. 2024Diffusion Time-step Curriculum for One Image to 3D Generationcited by 21
  2. 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustnesscited by 20
  3. 2024Detecting Out-Of-Distribution Earth Observation Images with Diffusion Modelscited by 14
  4. 2023Accelerating Guided Diffusion Sampling with Splitting Numerical Methodscited by 13
  5. 2023Censored Sampling of Diffusion Models Using 3 Minutes of Human Feedbackcited by 12
  6. 2024InstructGIE: Towards Generalizable Image Editingcited by 12
  7. 2024Pi-fusion: Physics-informed diffusion model for learning fluid dynamicscited by 9
  8. 2024Exploring Behavior-Relevant and Disentangled Neural Dynamics with Generative Diffusion Modelscited by 9
  9. 2024GeoGuide: Geometric guidance of diffusion modelscited by 7
  10. 2023Bridge Diffusion Model: Bridge Chinese Text-to-Image Diffusion Model with English Communitiescited by 6
  11. 2026Test-Time Gradient Guidance of Flow Policies in Reinforcement Learningcited by 6
  12. 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifierscited by 5
  13. 2023Bootstrap Diffusion Model Curve Estimation for High Resolution Low-Light Image Enhancementcited by 5
  14. 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Informationcited by 5
  15. 2026Reward Sharpness-Aware Fine-Tuning for Diffusion Modelscited by 2
  16. 2023Leveraging Graph Diffusion Models for Network Refinement Taskscited by 1
  17. 2025ExpertGen: Training-Free Expert Guidance for Controllable Text-to-Face Generationcited by 1
  18. 2025Enhancing Diffusion Model Guidance through Calibration and Regularizationcited by 1
  19. 2026Constrained Diffusion for Accelerated Structure Relaxation of Inorganic Solids with Point Defectscited by 1
  20. 2023Score-based Conditional Generation with Fewer Labeled Data by Self-calibrating Classifier Guidancecited by 0
  21. 2023Perceptual Similarity guidance and text guidance optimization for Editing Real Images using Guided Diffusion Modelscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026Expanding the Role of Diffusion Models for Robust Classifier Training
  2. 2025Improved Diffusion-based Generative Model with Better Adversarial Robustness
  3. 2023Robust Classification via a Single Diffusion Model
  4. 2025Diffusion Models are Robust Pretrainers
  5. 2022Improving Adversarial Robustness by Contrastive Guided Diffusion Process
  6. 2024An overview of diffusion models for generative artificial intelligence
  7. 2024Adv-KD: Adversarial Knowledge Distillation for Faster Diffusion Sampling
  8. 2023Conditional Generation from Unconditional Diffusion Models using Denoiser Representations