mlsanityData to 7 Oct 2026

Diffusion models meet image counter-forensics

arXiv 2311.13629 ↗First posted 22 Nov 2023cs.CV eess.IVcited by 6

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

From its acquisition in the camera sensors to its storage, different operations are performed to generate the final image. This pipeline imprints specific traces into the image to form a natural watermark. Tampering with an image disturbs these traces; these disruptions are clues that are used by most methods to detect and locate forgeries. In this article, we assess the capabilities of diffusion models to erase the traces left by forgers and, therefore, deceive forensics methods. Such an approach has been recently introduced for adversarial purification, achieving significant performance. We show that diffusion purification methods are well suited for counter-forensics tasks. Such approaches outperform already existing counter-forensics techniques both in deceiving forensics methods and in preserving the natural look of the purified images. The source code is publicly available at https://github.com/mtailanian/diff-cf.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 24 of its 62 references that are in the map. First posted on arXiv 22 Nov 2023.

Builds on

24 of 62 references.

Closest ancestors · 6

Same direction, newest first

  1. 2023Defending against Adversarial Audio via Diffusion Model2 Mar
  2. 2023Denoising Diffusion Probabilistic Models as a Defense against Adversarial Attacks17 Jan
  3. 2022DensePure: Understanding Diffusion Models towards Adversarial Robustness1 Nov
  4. 2022Guided Diffusion Model for Adversarial Purification from Random Noise22 Jun
  5. 2022Guided Diffusion Model for Adversarial Purification30 May
  6. 2022Diffusion Models for Adversarial Purification16 May

Other references · 18

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  3. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  4. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  5. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
  6. 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,339
  7. 2021Diffusion Probabilistic Models for 3D Point Cloud Generationcited by 734
  8. 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
  9. 2022On the detection of synthetic images generated by diffusion modelscited by 282
  10. 2022TruFor: Leveraging all-round clues for trustworthy image forgery detection and localizationcited by 130
  11. 2018Noiseprint: a CNN-based camera model fingerprintcited by 114
  12. 2021Learning JPEG Compression Artifacts for Image Manipulation Detection and Localizationcited by 78
6 more
  1. 2023Robust Evaluation of Diffusion-Based Adversarial Purificationcited by 65
  2. 2022PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognitioncited by 16
  3. 2019SpoC: Spoofing Camera Fingerprintscited by 14
  4. 2022Comprint: Image Forgery Detection and Localization using Compression Fingerprintscited by 9
  5. 2020Camera Trace Erasingcited by 7
  6. 2018Analysis of adversarial attacks against CNN-based image forgery detectorscited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 3; 2025: 2; 2026: 1.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024StealthDiffusion: Towards Evading Diffusion Forensic Detection through Diffusion Model
  2. 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
  3. 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking
  4. 2023CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography
  5. 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking
  6. 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks
  7. 2024The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods
  8. 2025Diffusion-Based Image Editing for Breaking Robust Watermarks