A maximally random variant of DDIM sampling, combined with guidance applied to the predicted clean image, yields a diffusion purification defense (DiffAP) that outperforms prior methods on CIFAR-10.
Synthesizing robust adversarial examples
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Random Sampling for Diffusion-based Adversarial Purification
A maximally random variant of DDIM sampling, combined with guidance applied to the predicted clean image, yields a diffusion purification defense (DiffAP) that outperforms prior methods on CIFAR-10.