Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
DiffPAD: Denoising Diffusion-Based Adversarial Patch Decontamination
RISE Research Institutes of Sweden, Digital Systems, Data Science. Kth Royal Institute of Technology, Sweden.ORCID iD: 0009-0004-3798-8603
Cispa Helmholtz Center for Information Security, Germany.
RISE Research Institutes of Sweden, Digital Systems, Data Science. Halmstad University, Sweden.ORCID iD: 0000-0003-3272-4145
RISE Research Institutes of Sweden, Digital Systems, Data Science.
Show others and affiliations
2025 (English)In: 2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV), Institute of Electrical and Electronics Engineers Inc. , 2025, p. 6602-6611Conference paper, Published paper (Refereed)
Abstract [en]

In the ever-evolving adversarial machine learning landscape, developing effective defenses against patch attacks has become a critical challenge, necessitating reliable solutions to safeguard real-world AI systems. Although diffusion models have shown remarkable capacity in image synthesis and have been recently utilized to counter lp-norm bounded attacks, their potential in mitigating localized patch attacks remains largely underexplored. In this work, we propose DiffPAD, a novel framework that harnesses the power of diffusion models for adversarial patch decontamination. DiffPAD first performs super-resolution restoration on downsampled input images, then adopts binarization, dynamic thresholding scheme and sliding window for effective localization of adversarial patches. Such a design is inspired by the theoretically derived correlation between patch size and diffusion restoration error that is generalized across diverse patch attack scenarios. Finally, DiffPAD applies inpainting techniques to the original input images with the estimated patch region being masked. By integrating closed-form solutions for super-resolution restoration and image inpainting into the conditional reverse sampling process of a pre-trained diffusion model, DiffPAD obviates the need for text guidance or fine-tuning. Through comprehensive experiments, we demonstrate that DiffPAD not only achieves state-of-the-art adversarial robustness against patch attacks but also excels in recovering naturalistic images without patch remnants. The source code is available at https://github.com/JasonFu1998/DiffPAD. 

Place, publisher, year, edition, pages
Institute of Electrical and Electronics Engineers Inc. , 2025. p. 6602-6611
Keywords [en]
Adversarial machine learning; Image coding; Photointerpretation; Adversarial defense; AI systems; Critical challenges; De-noising; Diffusion model; Input image; Machine-learning; Patch attack; Real-world; Super-resolution restoration; Decontamination
National Category
Computer and Information Sciences
Identifiers
URN: urn:nbn:se:ri:diva-78562DOI: 10.1109/WACV61041.2025.00643Scopus ID: 2-s2.0-105003628690OAI: oai:DiVA.org:ri-78562DiVA, id: diva2:1998282
Conference
2025 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)
Available from: 2025-09-16 Created: 2025-09-16 Last updated: 2026-01-22Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders

Search in DiVA

By author/editor
Fu, JiaPashami, SepidehRahimian, FatemehHolst, Anders
By organisation
Data Science
Computer and Information Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 33 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf