Fetching the paper…

Reading the bibliography…

2022

Guided Diffusion Model for Adversarial Purification from Random Noise

Wu, Quanlin, Ye, Hang, Gu, Yuntian

Original
PDF
Post on X

Understand

In this paper, we propose a novel guided diffusion purification approach to provide a strong defense against adversarial attacks.

Our model achieves 89.62% robust accuracy under PGD-L_inf attack (eps = 8/255) on the CIFAR-10 dataset.
We first explore the essential correlations between unguided diffusion models and randomized smoothing, enabling us to apply the models to certified robustness.
The empirical results show that our models outperform randomized smoothing by 5% when the certified L2 radius r is larger than 0.5.

Guided Diffusion Model for Adversarial Purification from Random Noise · Around

Built on

Auto-encoding variational bayes
Original
D. P. Kingma and M. Welling · 2013
Earlier work this paper cites.
Intriguing properties of neural networks
Original
C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2013
Earlier work this paper cites.
Auto-encoding variational bayes
Original
D. P. Kingma and M. Welling · 2013
Earlier work this paper cites.
Intriguing properties of neural networks
Original
C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2013
Earlier work this paper cites.
Deep residual learning for image recognition
K. He, X. Zhang, S. Ren, and J. Sun · 2016
Earlier work this paper cites.
Deep residual learning for image recognition
K. He, X. Zhang, S. Ren, and J. Sun · 2016
Earlier work this paper cites.
Towards deep learning models resistant to adversarial attacks
Original
A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu · 2017
Earlier work this paper cites.
Pixeldefend: Leveraging generative models to understand and defend against adversarial examples
Original
Y. Song, T. Kim, S. Nowozin, S. Ermon, and N. Kushman · 2017
Earlier work this paper cites.
Towards deep learning models resistant to adversarial attacks
Original
A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu · 2017
Earlier work this paper cites.
Pixeldefend: Leveraging generative models to understand and defend against adversarial examples
Original
Y. Song, T. Kim, S. Nowozin, S. Ermon, and N. Kushman · 2017
Earlier work this paper cites.
Defense-gan: Protecting classifiers against adversarial attacks using generative models
Original
P. Samangouei, M. Kabkab, and R. Chellappa · 2018
Earlier work this paper cites.

Similar

Defense-gan: Protecting classifiers against adversarial attacks using generative models
Original
P. Samangouei, M. Kabkab, and R. Chellappa · 2018
Cited alongside, same era.
Certified adversarial robustness via randomized smoothing
J. Cohen, E. Rosenfeld, and Z. Kolter · 2019
Cited alongside, same era.
Certified adversarial robustness via randomized smoothing
J. Cohen, E. Rosenfeld, and Z. Kolter · 2019
Cited alongside, same era.
Stochastic security: Adversarial defense using long-run dynamics of energy-based models
Original
M. Hill, J. Mitchell, and S.-C. Zhu · 2020
Cited alongside, same era.
Denoising diffusion probabilistic models
J. Ho, A. Jain, and P. Abbeel · 2020
Cited alongside, same era.

Then

Improved Denoising Diffusion Probabilistic Models
Original
A. Nichol and P. Dhariwal · 2021
Later among the works it cites.
Adversarial purification with score-based generative models
J. Yoon, S. J. Hwang, and J. Lee · 2021
Later among the works it cites.
Diffusion models beat gans on image synthesis
P. Dhariwal and A. Nichol · 2021
Later among the works it cites.
More control for free! image synthesis with semantic diffusion guidance
Original
X. Liu, D. H. Park, S. Azadi, G. Zhang, A. Chopikyan, Y. Hu, H. Shi, A. Rohrbach, and T. Darrell · 2021
Later among the works it cites.
Improved Denoising Diffusion Probabilistic Models
Original
A. Nichol and P. Dhariwal · 2021
Later among the works it cites.

Beyond the bibliography

alphaXiv searches the wider corpus for related work and actual follow-ups.

Open on alphaXiv

alphaXiv is searching for related work…

Denoising diffusion implicit models

J. Song, C. Meng, and S. Ermon · 2020

Cited alongside, same era.

Stochastic security: Adversarial defense using long-run dynamics of energy-based models

M. Hill, J. Mitchell, and S.-C. Zhu · 2020

Cited alongside, same era.

Denoising diffusion probabilistic models

J. Ho, A. Jain, and P. Abbeel · 2020

Cited alongside, same era.

Denoising diffusion implicit models

J. Song, C. Meng, and S. Ermon · 2020

Cited alongside, same era.

Diffusion models beat gans on image synthesis

P. Dhariwal and A. Nichol · 2021

Cited alongside, same era.

More control for free! image synthesis with semantic diffusion guidance

X. Liu, D. H. Park, S. Azadi, G. Zhang, A. Chopikyan, Y. Hu, H. Shi, A. Rohrbach, and T. Darrell · 2021

Cited alongside, same era.

Generative adversarial nets

I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio

Cited in the paper.

Adversarial purification with score-based generative models

J. Yoon, S. J. Hwang, and J. Lee · 2021

Later among the works it cites.

Diffusion models for adversarial purification

W. Nie, B. Guo, Y. Huang, C. Xiao, A. Vahdat, and A. Anandkumar · 2022

Closest in time.

Guided diffusion model for adversarial purification

Original

J. Wang, Z. Lyu, D. Lin, B. Dai, and H. Fu · 2022

Closest in time.

Diffusion models for adversarial purification

W. Nie, B. Guo, Y. Huang, C. Xiao, A. Vahdat, and A. Anandkumar · 2022

Closest in time.

Guided diffusion model for adversarial purification

J. Wang, Z. Lyu, D. Lin, B. Dai, and H. Fu · 2022

Closest in time.