PAPT++: Risk-Aware Adversarial Tuning and Generation for Single Domain Generalization
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Single domain generalization (SDG) aims to learn a model from one labeled source domain that generalizes to unseen target domains. A common strategy is to enrich the source distribution with augmented or generated samples, and recent text-to-image (T2I) diffusion models provide a strong generative prior for this purpose. However, diversity alone is insufficient for robust generalization, because useful generated samples should also capture variations that the current classifier finds difficult. Motivated by distributionally robust optimization (DRO), we define a semantic ambiguity set in the class-conditional generative space of a pretrained T2I model and search it for samples with high classification loss under the current classifier. To this end, we introduce PAPT++, a risk-aware adversarial generation-training framework for SDG. PAPT++ first learns diverse semantic reference images for each class through image-text alignment and intra-class diversity regularization. These references then serve as denoising targets during classifier-guided diffusion synthesis, reducing semantic drift while guiding generation toward challenging variations. The generated samples are combined with the source data to update the classifier, and the updated classifier guides the next synthesis round in return. In this way, PAPT++ progressively exposes the classifier to challenging yet semantically consistent variations. Extensive experiments on standard SDG benchmarks demonstrate the superiority of the proposed PAPT++ method and the effectiveness of its main components.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 77 of its 97 references that are in the map. First posted on arXiv 4 Sep 2026.
Builds on
77 of 97 references.
References · 77
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2013Auto-Encoding Variational Bayescited by 3,980
- 2015Domain-Adversarial Training of Neural Networkscited by 3,023
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2021Learning to Prompt for Vision-Language Modelscited by 2,269
38 more
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2016Deep CORAL: Correlation Alignment for Deep Domain Adaptationcited by 1,194
- 2017Deep Hashing Network for Unsupervised Domain Adaptationcited by 1,181
- 2020In Search of Lost Domain Generalizationcited by 1,042
- 2023ImageReward: Learning and Evaluating Human Preferences for Text-to-Image Generationcited by 1,010
- 2017Deeper, Broader and Artier Domain Generalizationcited by 983
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2023Human Preference Score v2: A Solid Benchmark for Evaluating Human Preferences of Text-to-Image Synthesiscited by 847
- 2017Learning to Generalize: Meta-Learning for Domain Generalizationcited by 762
- 2020Out-of-Distribution Generalization via Risk Extrapolation (REx)cited by 737
- 2021Domain Generalization with MixStylecited by 563
- 2018Generalizing to Unseen Domains via Adversarial Data Augmentationcited by 451
- 2021Towards Out-Of-Distribution Generalization: A Surveycited by 431
- 2020Self-Challenging Improves Cross-Domain Generalizationcited by 426
- 2017Certifying Some Distributional Robustness with Principled Adversarial Trainingcited by 333
- 2021Fishr: Invariant Gradient Variances for Out-of-Distribution Generalizationcited by 186
- 2020Improve Unsupervised Domain Adaptation with Mixup Trainingcited by 185
- 2020Adaptive Risk Minimization: Learning to Adapt to Domain Shiftcited by 183
- 2022Surrogate Gap Minimization Improves Sharpness-Aware Trainingcited by 171
- 2021Learning to Diversify for Single Domain Generalizationcited by 170
- 2018Domain Generalization via Conditional Invariant Representationcited by 146
- 2024CFG++: Manifold-constrained Classifier Free Guidance for Diffusion Modelscited by 138
- 2022Domain Generalization by Mutual-Information Regularization with Pre-trained Modelscited by 133
- 2022Exact Feature Distribution Matching for Arbitrary Style Transfer and Domain Generalizationcited by 122
- 2020Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and Robustnesscited by 121
- 2023Sharpness-Aware Gradient Matching for Domain Generalizationcited by 102
- 2021Adversarially Adaptive Normalization for Single Domain Generalizationcited by 85
- 2019Distributionally Robust Optimization and Generalization in Kernel Methodscited by 73
- 2020Permuted AdaIN: Reducing the Bias Towards Global Statistics in Image Classificationcited by 63
- 2024Friendly Sharpness-Aware Minimizationcited by 52
- 2023Improved Test-Time Adaptation for Domain Generalizationcited by 45
- 2023Meta-causal Learning for Single Domain Generalizationcited by 43
- 2022Attention Consistency on Visual Corruptions for Single-Source Domain Generalizationcited by 37
- 2023Progressive Random Convolutions for Single Domain Generalizationcited by 33
- 2024Prompt-Driven Dynamic Object-Centric Learning for Single Domain Generalizationcited by 24
- 2024Sharpness-Aware Minimization Efficiently Selects Flatter Minima Late in Trainingcited by 24
- 2024Rethinking Multi-domain Generalization with A General Learning Objectivecited by 23
50 most cited of 77 All 77 (JSON)
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2022Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance
- 2024Adversarial Robustification via Text-to-Image Diffusion Models
- 2022Diffusion Guided Domain Adaptation of Image Generators
- 2023DomainStudio: Fine-Tuning Diffusion Models for Domain-Driven Image Generation using Limited Data
- 2025Let Synthetic Data Shine: Domain Reassembly and Soft-Fusion for Single Domain Generalization
- 2025Improved Diffusion-based Generative Model with Better Adversarial Robustness
- 2024ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation
- 2025Adversarial Concept Distillation for One-Step Diffusion Personalization