Diffusion models meet image counter-forensics
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
From its acquisition in the camera sensors to its storage, different operations are performed to generate the final image. This pipeline imprints specific traces into the image to form a natural watermark. Tampering with an image disturbs these traces; these disruptions are clues that are used by most methods to detect and locate forgeries. In this article, we assess the capabilities of diffusion models to erase the traces left by forgers and, therefore, deceive forensics methods. Such an approach has been recently introduced for adversarial purification, achieving significant performance. We show that diffusion purification methods are well suited for counter-forensics tasks. Such approaches outperform already existing counter-forensics techniques both in deceiving forensics methods and in preserving the natural look of the purified images. The source code is publicly available at https://github.com/mtailanian/diff-cf.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 24 of its 62 references that are in the map. First posted on arXiv 22 Nov 2023.
Builds on
24 of 62 references.
Closest ancestors · 6
Same direction, newest first
- 2023Defending against Adversarial Audio via Diffusion Model2 Mar
- 2023Denoising Diffusion Probabilistic Models as a Defense against Adversarial Attacks17 Jan
- 2022DensePure: Understanding Diffusion Models towards Adversarial Robustness1 Nov
- 2022Guided Diffusion Model for Adversarial Purification from Random Noise22 Jun
- 2022Guided Diffusion Model for Adversarial Purification30 May
- 2022Diffusion Models for Adversarial Purification16 May
Other references · 18
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,339
- 2021Diffusion Probabilistic Models for 3D Point Cloud Generationcited by 734
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2022On the detection of synthetic images generated by diffusion modelscited by 282
- 2022TruFor: Leveraging all-round clues for trustworthy image forgery detection and localizationcited by 130
- 2018Noiseprint: a CNN-based camera model fingerprintcited by 114
- 2021Learning JPEG Compression Artifacts for Image Manipulation Detection and Localizationcited by 78
6 more
- 2023Robust Evaluation of Diffusion-Based Adversarial Purificationcited by 65
- 2022PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognitioncited by 16
- 2019SpoC: Spoofing Camera Fingerprintscited by 14
- 2022Comprint: Image Forgery Detection and Localization using Compression Fingerprintscited by 9
- 2020Camera Trace Erasingcited by 7
- 2018Analysis of adversarial attacks against CNN-based image forgery detectorscited by 3
Built on by
Citing papers per year: 2024: 3; 2025: 2; 2026: 1.
6 papers.
- 2024TGIF: Text-Guided Inpainting Forgery Datasetcited by 20
- 2026EvoGuard: An Extensible Agentic RL-based Framework for Practical and Evolving AI-Generated Image Detectioncited by 6
- 2024Hiding Local Manipulations on SAR Images: a Counter-Forensic Attackcited by 1
- 2024Deep Image Restoration For Image Anti-Forensicscited by 0
- 2025UGD-IML: A Unified Generative Diffusion-based Framework for Constrained and Unconstrained Image Manipulation Localizationcited by 0
- 2025Attack-Aware Deepfake Detection under Counter-Forensic Manipulationscited by 0
- 2026EvoGuard: An Extensible Agentic RL-based Framework for Practical and Evolving AI-Generated Image Detection18 Mar 2026
- 2025Attack-Aware Deepfake Detection under Counter-Forensic Manipulations26 Dec 2025
- 2025UGD-IML: A Unified Generative Diffusion-based Framework for Constrained and Unconstrained Image Manipulation Localization8 Aug 2025
- 2024TGIF: Text-Guided Inpainting Forgery Dataset16 Jul 2024
- 2024Hiding Local Manipulations on SAR Images: a Counter-Forensic Attack9 Jul 2024
- 2024Deep Image Restoration For Image Anti-Forensics4 May 2024
Similar, not cited
Close in wording, no citation either way
- 2024StealthDiffusion: Towards Evading Diffusion Forensic Detection through Diffusion Model
- 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking
- 2023CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks
- 2024The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarks