mlsanityData to 7 Oct 2026

A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities

arXiv 2609.05503 ↗First posted 28 Aug 2026cs.CV cs.CRcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Diffusion models have become the dominant family of generative models in the visual domain. However, their widespread public availability enables misuse at scale, motivating a rapidly growing body of research on adversarial attacks and defenses. This survey provides, to our knowledge, the first unified review of this literature across three visual modalities: image, video, and 3D. We introduce a comprehensive, task-centric taxonomy: we first divide the literature by modality; within each modality, we separate methods into attacks and defenses, and then group them by the generative task they target, presenting them chronologically within each task. Moreover, we provide an in-depth analysis of their evaluation settings, consolidating the datasets, metrics, and benchmarks used to assess them. We conclude by identifying several open challenges and outlining concrete future research directions. Project Webpage: https://github.com/ozgurkara99/awesome-adv-attack-defense-on-diffusion

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 175 of its 203 references that are in the map. First posted on arXiv 28 Aug 2026.

Builds on

175 of 203 references.

Closest ancestors · 52

Same direction, newest first

  1. 2026Diffusion-Guided Adversarial Perturbation Injection for Generalizable Defense Against Facial Manipulations2 Apr
  2. 2026IDDM: Identity-Decoupled Personalized Diffusion Models with a Tunable Privacy-Utility Trade-off1 Apr
  3. 2026Anti-I2V: Safeguarding your photos from malicious image-to-video generation25 Mar
  4. 2026Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection16 Feb
  5. 2025T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models30 Dec
  6. 2025DeContext as Defense: Safe Image Editing in Diffusion Transformers18 Dec
  7. 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations3 Oct
  8. 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep
  9. 2025Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification17 Sep
  10. 2025PromptFlare: Prompt-Generalized Defense via Cross-Attention Decoy in Diffusion-Based Inpainting22 Aug
  11. 2025VideoGuard: Protecting Video Content from Unauthorized Editing5 Aug
  12. 2025Structure Disruption: Subverting Malicious Diffusion-Based Inpainting via Self-Attention Query Perturbation26 May
38 more
  1. 2025My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping21 May
  2. 2025T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks10 May
  3. 2025DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editing24 Apr
  4. 2025Make the Most of Everything: Further Considerations on Disrupting Diffusion-based Customization18 Mar
  5. 2025AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption13 Mar
  6. 2025GuardDoor: Safeguarding Against Malicious Diffusion Editing via Protective Backdoors5 Mar
  7. 2025CAT: Contrastive Adversarial Training for Evaluating the Robustness of Protective Perturbations in Latent Diffusion Models11 Feb
  8. 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generation25 Dec
  9. 2024Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models16 Dec
  10. 2024Anti-Reference: Universal and Immediate Defense Against Reference-Based Generation8 Dec
  11. 2024Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing25 Nov
  12. 2024AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models28 Oct
  13. 2024Pixel Is Not a Barrier: An Effective Evasion Attack for Pixel-Domain Diffusion Models21 Aug
  14. 2024Latent Feature and Attention Dual Erasure Attack against Multi-View Diffusion Models for 3D Assets Protection21 Aug
  15. 2024A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse20 Aug
  16. 2024Visual-Friendly Concept Protection via Selective Adversarial Perturbations16 Aug
  17. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
  18. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul
  19. 2024Rethinking and Red-Teaming Protective Perturbation in Personalized Diffusion Models27 Jun
  20. 2024Disrupting Diffusion: Token-Level Attention Erasure Attack against Diffusion-based Customization31 May
  21. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  22. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning12 May
  23. 2024Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think20 Apr
  24. 2023SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Models13 Dec
  25. 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?30 Nov
  26. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  27. 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning22 Nov
  28. 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models19 Nov
  29. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  30. 2023Targeted Attack Improves Protection against Unauthorized Diffusion Customization7 Oct
  31. 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct
  32. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  33. 2023Mist: Towards Improved Adversarial Examples for Diffusion Models22 May
  34. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
  35. 2023JPEG Compressed Images Can Bypass Protections Against AI Editing5 Apr
  36. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
  37. 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
  38. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb

50 newest of 52 All 52 (JSON)

Other references · 123

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  6. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  7. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  8. 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
  9. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  10. 2022Scalable Diffusion Models with Transformerscited by 5,931
  11. 2022Generative Adversarial Networkscited by 5,603
  12. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
38 more
  1. 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,698
  2. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  3. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  4. 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
  5. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
  6. 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,536
  7. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
  8. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  9. 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,198
  10. 2014Conditional Generative Adversarial Netscited by 2,152
  11. 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,048
  12. 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,013
  13. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
  14. 2022Imagen Video: High Definition Video Generation with Diffusion Modelscited by 1,765
  15. 2022Make-A-Video: Text-to-Video Generation without Text-Video Datacited by 1,725
  16. 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
  17. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
  18. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
  19. 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
  20. 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
  21. 2025FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Spacecited by 960
  22. 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 958
  23. 2017The 2017 DAVIS Challenge on Video Object Segmentationcited by 942
  24. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
  25. 2023MasaCtrl: Tuning-Free Mutual Self-Attention Control for Consistent Image Synthesis and Editingcited by 722
  26. 2023Scaffold-GS: Structured 3D Gaussians for View-Adaptive Renderingcited by 684
  27. 2023Animate Anyone: Consistent and Controllable Image-to-Video Synthesis for Character Animationcited by 683
  28. 2023Wonder3D: Single Image to 3D using Cross-Domain Diffusioncited by 682
  29. 2023Text2Video-Zero: Text-to-Image Diffusion Models are Zero-Shot Video Generatorscited by 666
  30. 2018Pixel2Mesh: Generating 3D Mesh Models from Single RGB Imagescited by 649
  31. 2022DiffEdit: Diffusion-based semantic image editing with mask guidancecited by 643
  32. 2024Open-Sora: Democratizing Efficient Video Production for Allcited by 637
  33. 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 615
  34. 2022Google Scanned Objects: A High-Quality Dataset of 3D Scanned Household Itemscited by 601
  35. 2024LTX-Video: Realtime Video Latent Diffusioncited by 549
  36. 2023Zero123++: a Single Image to Consistent Multi-view Diffusion Base Modelcited by 516
  37. 2023InternVid: A Large-scale Video-Text Dataset for Multimodal Understanding and Generationcited by 488
  38. 2019BlendedMVS: A Large-scale Dataset for Generalized Multi-view Stereo Networkscited by 487

50 most cited of 123 All 123 (JSON)

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2024Adversarial Examples are Misaligned in Diffusion Model Manifolds
  2. 2025AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks
  3. 2025Embedding Hidden Adversarial Capabilities in Pre-Trained Diffusion Models
  4. 2025Diffusion or Non-Diffusion Adversarial Defenses: Rethinking the Relation between Classifier and Adversarial Purifier
  5. 2023Diffusion Models for Imperceptible and Transferable Adversarial Attack
  6. 2024Deceptive Diffusion: Generating Synthetic Adversarial Examples
  7. 2023Semantic Adversarial Attacks via Diffusion Models
  8. 2026A Low-Rank Defense Method for Adversarial Attack on Diffusion Models