Chengxian Ge

Adversarial Attack via Latent Feature Attribution of Diffusion Models

Traditional adversarial attacks are constrained by \({l_p}\) norm limits, resulting in adversarial examples with high-frequency noise that compromise their imperceptibility. In contrast, attacks using diffusion models without \({l_p}\) norm constraints can generate visually more covert adversarial examples; however, ex...