Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
DiffPAD: Denoising Diffusion-Based Adversarial Patch Decontamination
RISE Research Institutes of Sweden, Digitala system, Datavetenskap. Kth Royal Institute of Technology, Sweden.ORCID-id: 0009-0004-3798-8603
Cispa Helmholtz Center for Information Security, Germany.
RISE Research Institutes of Sweden, Digitala system, Datavetenskap. Halmstad University, Sweden.ORCID-id: 0000-0003-3272-4145
RISE Research Institutes of Sweden, Digitala system, Datavetenskap.
Visa övriga samt affilieringar
2025 (Engelska)Ingår i: 2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV), Institute of Electrical and Electronics Engineers Inc. , 2025, s. 6602-6611Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

In the ever-evolving adversarial machine learning landscape, developing effective defenses against patch attacks has become a critical challenge, necessitating reliable solutions to safeguard real-world AI systems. Although diffusion models have shown remarkable capacity in image synthesis and have been recently utilized to counter lp-norm bounded attacks, their potential in mitigating localized patch attacks remains largely underexplored. In this work, we propose DiffPAD, a novel framework that harnesses the power of diffusion models for adversarial patch decontamination. DiffPAD first performs super-resolution restoration on downsampled input images, then adopts binarization, dynamic thresholding scheme and sliding window for effective localization of adversarial patches. Such a design is inspired by the theoretically derived correlation between patch size and diffusion restoration error that is generalized across diverse patch attack scenarios. Finally, DiffPAD applies inpainting techniques to the original input images with the estimated patch region being masked. By integrating closed-form solutions for super-resolution restoration and image inpainting into the conditional reverse sampling process of a pre-trained diffusion model, DiffPAD obviates the need for text guidance or fine-tuning. Through comprehensive experiments, we demonstrate that DiffPAD not only achieves state-of-the-art adversarial robustness against patch attacks but also excels in recovering naturalistic images without patch remnants. The source code is available at https://github.com/JasonFu1998/DiffPAD. 

Ort, förlag, år, upplaga, sidor
Institute of Electrical and Electronics Engineers Inc. , 2025. s. 6602-6611
Nyckelord [en]
Adversarial machine learning; Image coding; Photointerpretation; Adversarial defense; AI systems; Critical challenges; De-noising; Diffusion model; Input image; Machine-learning; Patch attack; Real-world; Super-resolution restoration; Decontamination
Nationell ämneskategori
Data- och informationsvetenskap
Identifikatorer
URN: urn:nbn:se:ri:diva-78562DOI: 10.1109/WACV61041.2025.00643Scopus ID: 2-s2.0-105003628690OAI: oai:DiVA.org:ri-78562DiVA, id: diva2:1998282
Konferens
2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)
Tillgänglig från: 2025-09-16 Skapad: 2025-09-16 Senast uppdaterad: 2026-01-22Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltextScopus

Person

Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders

Sök vidare i DiVA

Av författaren/redaktören
Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders
Av organisationen
Datavetenskap
Data- och informationsvetenskap

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetricpoäng

doi
urn-nbn
Totalt: 34 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf