@inproceedings{diffattackevasionattacksagainstdiffusion,
  title = {DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification},
  author = {Mintong Kang and Dawn Song and Bo Li},
  year = {2023},
  booktitle = {NeurIPS 2023 11},
  eprint = {2311.16124},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2311.16124v2},
}