Guided Diffusion Model for Adversarial Purification from Random Noise
In this paper, we propose a novel guided diffusion purification approach to provide a strong defense against adversarial attacks. Our model achieves 89.62% robust accuracy under PGD-L_inf attack (eps = 8/255) on the CIFAR-10 dataset. We first explore the essential correlations between unguided diffusion models and randomized smoothing, enabling us to apply the models to certified robustness. The empirical results show that our models outperform randomized smoothing by 5% when the certified L2 radius r is larger than 0.5.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial PurificationMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Guided Diffusion Model for Adversarial Purification
With wider application of deep neural networks (DNNs) in various algorithms and frameworks, security threats have become one of the concerns. Adversarial attacks disturb DNN-based image classifiers, in which attackers ca…
Adversarial PurificationDenoisingmodelRandom Sampling for Diffusion-based Adversarial Purification
Denoising Diffusion Probabilistic Models (DDPMs) have gained great attention in adversarial purification. Current diffusion-based works focus on designing effective condition-guided mechanisms while ignoring a fundamenta…
Adversarial PurificationDenoisingClassifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information
Adversarial purification is one of the promising approaches to defend neural networks against adversarial attacks. Recently, methods utilizing diffusion probabilistic models have achieved great success for adversarial pu…
Adversarial PurificationAdversarial RobustnessDenoisingimage-classification+1Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness
Adversarial attacks can mislead neural network classifiers. The defense against adversarial attacks is important for AI safety. Adversarial purification is a family of approaches that defend adversarial attacks with suit…
Adversarial PurificationUniversal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models
Deep neural networks (DNNs) have risen to prominence as key solutions in numerous AI applications for earth observation (AI4EO). However, their susceptibility to adversarial examples poses a critical challenge, compromis…
Adversarial DefenseAdversarial PurificationDenoisingEarth Observation+2