Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
DiffPAD: Denoising Diffusion-Based Adversarial Patch Decontamination
RISE Research Institutes of Sweden, Digitala system, Datavetenskap. Kth Royal Institute of Technology, Sweden.ORCID-id: 0009-0004-3798-8603
Cispa Helmholtz Center for Information Security, Germany.
RISE Research Institutes of Sweden, Digitala system, Datavetenskap. Halmstad University, Sweden.ORCID-id: 0000-0003-3272-4145
RISE Research Institutes of Sweden, Digitala system, Datavetenskap.
Vise andre og tillknytning
2025 (engelsk)Inngår i: 2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV), Institute of Electrical and Electronics Engineers Inc. , 2025, s. 6602-6611Konferansepaper, Publicerat paper (Fagfellevurdert)
Abstract [en]

In the ever-evolving adversarial machine learning landscape, developing effective defenses against patch attacks has become a critical challenge, necessitating reliable solutions to safeguard real-world AI systems. Although diffusion models have shown remarkable capacity in image synthesis and have been recently utilized to counter lp-norm bounded attacks, their potential in mitigating localized patch attacks remains largely underexplored. In this work, we propose DiffPAD, a novel framework that harnesses the power of diffusion models for adversarial patch decontamination. DiffPAD first performs super-resolution restoration on downsampled input images, then adopts binarization, dynamic thresholding scheme and sliding window for effective localization of adversarial patches. Such a design is inspired by the theoretically derived correlation between patch size and diffusion restoration error that is generalized across diverse patch attack scenarios. Finally, DiffPAD applies inpainting techniques to the original input images with the estimated patch region being masked. By integrating closed-form solutions for super-resolution restoration and image inpainting into the conditional reverse sampling process of a pre-trained diffusion model, DiffPAD obviates the need for text guidance or fine-tuning. Through comprehensive experiments, we demonstrate that DiffPAD not only achieves state-of-the-art adversarial robustness against patch attacks but also excels in recovering naturalistic images without patch remnants. The source code is available at https://github.com/JasonFu1998/DiffPAD. 

sted, utgiver, år, opplag, sider
Institute of Electrical and Electronics Engineers Inc. , 2025. s. 6602-6611
Emneord [en]
Adversarial machine learning; Image coding; Photointerpretation; Adversarial defense; AI systems; Critical challenges; De-noising; Diffusion model; Input image; Machine-learning; Patch attack; Real-world; Super-resolution restoration; Decontamination
HSV kategori
Identifikatorer
URN: urn:nbn:se:ri:diva-78562DOI: 10.1109/WACV61041.2025.00643Scopus ID: 2-s2.0-105003628690OAI: oai:DiVA.org:ri-78562DiVA, id: diva2:1998282
Konferanse
2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)
Tilgjengelig fra: 2025-09-16 Laget: 2025-09-16 Sist oppdatert: 2026-01-22bibliografisk kontrollert

Open Access i DiVA

Fulltekst mangler i DiVA

Andre lenker

Forlagets fulltekstScopus

Person

Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders

Søk i DiVA

Av forfatter/redaktør
Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders
Av organisasjonen

Søk utenfor DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric

doi
urn-nbn
Totalt: 34 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
v. 2.49.0