A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Diffusion models have become the dominant family of generative models in the visual domain. However, their widespread public availability enables misuse at scale, motivating a rapidly growing body of research on adversarial attacks and defenses. This survey provides, to our knowledge, the first unified review of this literature across three visual modalities: image, video, and 3D. We introduce a comprehensive, task-centric taxonomy: we first divide the literature by modality; within each modality, we separate methods into attacks and defenses, and then group them by the generative task they target, presenting them chronologically within each task. Moreover, we provide an in-depth analysis of their evaluation settings, consolidating the datasets, metrics, and benchmarks used to assess them. We conclude by identifying several open challenges and outlining concrete future research directions. Project Webpage: https://github.com/ozgurkara99/awesome-adv-attack-defense-on-diffusion
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 175 of its 203 references that are in the map. First posted on arXiv 28 Aug 2026.
Builds on
175 of 203 references.
Closest ancestors · 52
Same direction, newest first
- 2026Diffusion-Guided Adversarial Perturbation Injection for Generalizable Defense Against Facial Manipulations2 Apr
- 2026IDDM: Identity-Decoupled Personalized Diffusion Models with a Tunable Privacy-Utility Trade-off1 Apr
- 2026Anti-I2V: Safeguarding your photos from malicious image-to-video generation25 Mar
- 2026Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection16 Feb
- 2025T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models30 Dec
- 2025DeContext as Defense: Safe Image Editing in Diffusion Transformers18 Dec
- 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations3 Oct
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep
- 2025Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification17 Sep
- 2025PromptFlare: Prompt-Generalized Defense via Cross-Attention Decoy in Diffusion-Based Inpainting22 Aug
- 2025VideoGuard: Protecting Video Content from Unauthorized Editing5 Aug
- 2025Structure Disruption: Subverting Malicious Diffusion-Based Inpainting via Self-Attention Query Perturbation26 May
38 more
- 2025My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping21 May
- 2025T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks10 May
- 2025DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editing24 Apr
- 2025Make the Most of Everything: Further Considerations on Disrupting Diffusion-based Customization18 Mar
- 2025AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption13 Mar
- 2025GuardDoor: Safeguarding Against Malicious Diffusion Editing via Protective Backdoors5 Mar
- 2025CAT: Contrastive Adversarial Training for Evaluating the Robustness of Protective Perturbations in Latent Diffusion Models11 Feb
- 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generation25 Dec
- 2024Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models16 Dec
- 2024Anti-Reference: Universal and Immediate Defense Against Reference-Based Generation8 Dec
- 2024Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing25 Nov
- 2024AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models28 Oct
- 2024Pixel Is Not a Barrier: An Effective Evasion Attack for Pixel-Domain Diffusion Models21 Aug
- 2024Latent Feature and Attention Dual Erasure Attack against Multi-View Diffusion Models for 3D Assets Protection21 Aug
- 2024A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse20 Aug
- 2024Visual-Friendly Concept Protection via Selective Adversarial Perturbations16 Aug
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul
- 2024Rethinking and Red-Teaming Protective Perturbation in Personalized Diffusion Models27 Jun
- 2024Disrupting Diffusion: Token-Level Attention Erasure Attack against Diffusion-based Customization31 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning12 May
- 2024Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think20 Apr
- 2023SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Models13 Dec
- 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?30 Nov
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning22 Nov
- 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models19 Nov
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Targeted Attack Improves Protection against Unauthorized Diffusion Customization7 Oct
- 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Models22 May
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
- 2023JPEG Compressed Images Can Bypass Protections Against AI Editing5 Apr
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
- 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb
50 newest of 52 All 52 (JSON)
Other references · 123
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2022Generative Adversarial Networkscited by 5,603
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
38 more
- 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,698
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
- 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,536
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,198
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,048
- 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,013
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2022Imagen Video: High Definition Video Generation with Diffusion Modelscited by 1,765
- 2022Make-A-Video: Text-to-Video Generation without Text-Video Datacited by 1,725
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
- 2025FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Spacecited by 960
- 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 958
- 2017The 2017 DAVIS Challenge on Video Object Segmentationcited by 942
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2023MasaCtrl: Tuning-Free Mutual Self-Attention Control for Consistent Image Synthesis and Editingcited by 722
- 2023Scaffold-GS: Structured 3D Gaussians for View-Adaptive Renderingcited by 684
- 2023Animate Anyone: Consistent and Controllable Image-to-Video Synthesis for Character Animationcited by 683
- 2023Wonder3D: Single Image to 3D using Cross-Domain Diffusioncited by 682
- 2023Text2Video-Zero: Text-to-Image Diffusion Models are Zero-Shot Video Generatorscited by 666
- 2018Pixel2Mesh: Generating 3D Mesh Models from Single RGB Imagescited by 649
- 2022DiffEdit: Diffusion-based semantic image editing with mask guidancecited by 643
- 2024Open-Sora: Democratizing Efficient Video Production for Allcited by 637
- 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 615
- 2022Google Scanned Objects: A High-Quality Dataset of 3D Scanned Household Itemscited by 601
- 2024LTX-Video: Realtime Video Latent Diffusioncited by 549
- 2023Zero123++: a Single Image to Consistent Multi-view Diffusion Base Modelcited by 516
- 2023InternVid: A Large-scale Video-Text Dataset for Multimodal Understanding and Generationcited by 488
- 2019BlendedMVS: A Large-scale Dataset for Generalized Multi-view Stereo Networkscited by 487
50 most cited of 123 All 123 (JSON)
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2024Adversarial Examples are Misaligned in Diffusion Model Manifolds
- 2025AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks
- 2025Embedding Hidden Adversarial Capabilities in Pre-Trained Diffusion Models
- 2025Diffusion or Non-Diffusion Adversarial Defenses: Rethinking the Relation between Classifier and Adversarial Purifier
- 2023Diffusion Models for Imperceptible and Transferable Adversarial Attack
- 2024Deceptive Diffusion: Generating Synthetic Adversarial Examples
- 2023Semantic Adversarial Attacks via Diffusion Models
- 2026A Low-Rank Defense Method for Adversarial Attack on Diffusion Models