{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T06:46:16Z","timestamp":1782629176056,"version":"3.54.5"},"reference-count":52,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T00:00:00Z","timestamp":1707782400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T00:00:00Z","timestamp":1707782400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62162067"],"award-info":[{"award-number":["62162067"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62162067"],"award-info":[{"award-number":["62162067"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62162067"],"award-info":[{"award-number":["62162067"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Vis Comput"],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1007\/s00371-023-03253-7","type":"journal-article","created":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T09:03:27Z","timestamp":1707815007000},"page":"8531-8543","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Transferable adversarial sample purification by expanding the purification space of diffusion models"],"prefix":"10.1007","volume":"40","author":[{"given":"Jun","family":"Ji","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Song","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,2,13]]},"reference":[{"issue":"1","key":"3253_CR1","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1109\/TII.2021.3085669","volume":"18","author":"J Li","year":"2022","unstructured":"Li, J., Chen, J., Sheng, B., Li, P., Yang, P., Feng, D.D., Qi, J.: Automatic detection and classification system of domestic waste via multimodel cascaded convolutional neural network. IEEE Trans. Ind. Inform. 18(1), 163\u2013173 (2022). https:\/\/doi.org\/10.1109\/TII.2021.3085669","journal-title":"IEEE Trans. Ind. Inform."},{"issue":"8","key":"3253_CR2","doi-asserted-by":"publisher","first-page":"4499","DOI":"10.1109\/TNNLS.2021.3116209","volume":"34","author":"Z Xie","year":"2023","unstructured":"Xie, Z., Zhang, W., Sheng, B., Li, P., Chen, C.L.P.: Bagfn: broad attentive graph fusion network for high-order feature interactions. IEEE Trans. Neural Netw. Learn. Syst. 34(8), 4499\u20134513 (2023). https:\/\/doi.org\/10.1109\/TNNLS.2021.3116209","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"issue":"7","key":"3253_CR3","doi-asserted-by":"publisher","first-page":"6662","DOI":"10.1109\/TCYB.2021.3079311","volume":"52","author":"B Sheng","year":"2022","unstructured":"Sheng, B., Li, P., Ali, R., Chen, C.L.P.: Improving video temporal consistency via broad learning system. IEEE Trans. Cybern. 52(7), 6662\u20136675 (2022). https:\/\/doi.org\/10.1109\/TCYB.2021.3079311","journal-title":"IEEE Trans. Cybern."},{"key":"3253_CR4","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: 3rd International Conference on Learning Representations (2015)"},{"key":"3253_CR5","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. In: 5th International Conference on Learning Representations (2017)","DOI":"10.1201\/9781351251389-8"},{"key":"3253_CR6","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: 6th International Conference on Learning Representations (2018)"},{"key":"3253_CR7","doi-asserted-by":"publisher","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., Li, J.: Boosting adversarial attacks with momentum. In: 2018 IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018). https:\/\/doi.org\/10.1109\/CVPR.2018.00957","DOI":"10.1109\/CVPR.2018.00957"},{"key":"3253_CR8","doi-asserted-by":"publisher","unstructured":"Moosavi-Dezfooli, S., Fawzi, A., Frossard, P.: Deepfool: A simple and accurate method to fool deep neural networks. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.282","DOI":"10.1109\/CVPR.2016.282"},{"key":"3253_CR9","doi-asserted-by":"publisher","unstructured":"Carlini, N., Wagner, D.A.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy, pp. 39\u201357 (2017). https:\/\/doi.org\/10.1109\/SP.2017.49","DOI":"10.1109\/SP.2017.49"},{"key":"3253_CR10","doi-asserted-by":"publisher","unstructured":"Xie, C., Wu, Y., Maaten, L., Yuille, A.L., He, K.: Feature denoising for improving adversarial robustness. In: IEEE Conference on Computer Vision and Pattern Recognition, pp. 501\u2013509 (2019). https:\/\/doi.org\/10.1109\/CVPR.2019.00059","DOI":"10.1109\/CVPR.2019.00059"},{"key":"3253_CR11","unstructured":"Song, C., He, K., Lin, J., Wang, L., Hopcroft, J.E.: Robust local features for improving the generalization of adversarial training. In: 8th International Conference on Learning Representations (2020)"},{"key":"3253_CR12","doi-asserted-by":"publisher","unstructured":"Papernot, N., McDaniel, P.D., Wu, X., Jha, S., Swami, A.: Distillation as a defense to adversarial perturbations against deep neural networks. In: IEEE Symposium on Security and Privacy, pp. 582\u2013597 (2016). https:\/\/doi.org\/10.1109\/SP.2016.41","DOI":"10.1109\/SP.2016.41"},{"key":"3253_CR13","doi-asserted-by":"publisher","unstructured":"Ross, A.S., Doshi-Velez, F.: Improving the adversarial robustness and interpretability of deep neural networks by regularizing their input gradients. In: Proceedings of the Thirty-Second AAAI Conference on Artificial Intelligence, pp. 1660\u20131669 (2018). https:\/\/doi.org\/10.1609\/AAAI.V32I1.11504","DOI":"10.1609\/AAAI.V32I1.11504"},{"key":"3253_CR14","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M.: A study of the effect of JPG compression on adversarial images (2016). arXiv preprint arXiv:1608.00853"},{"key":"3253_CR15","unstructured":"Guo, C., Rana, M., Ciss\u00e9, M., Maaten, L.: Countering adversarial images using input transformations. In: 6th International Conference on Learning Representations (2018)"},{"key":"3253_CR16","unstructured":"Gu, S., Rigazio, L.: Towards deep neural network architectures robust to adversarial examples. In: 3rd International Conference on Learning Representations (2015)"},{"key":"3253_CR17","doi-asserted-by":"publisher","unstructured":"Liao, F., Liang, M., Dong, Y., Pang, T., Hu, X., Zhu, J.: Defense against adversarial attacks using high-level representation guided denoiser. In: 2018 IEEE Conference on Computer Vision and Pattern Recognition, pp. 1778\u20131787 (2018). https:\/\/doi.org\/10.1109\/CVPR.2018.00191","DOI":"10.1109\/CVPR.2018.00191"},{"key":"3253_CR18","doi-asserted-by":"publisher","unstructured":"Gao, S., Yao, S., Li, R.: Transferable adversarial defense by fusing reconstruction learning and denoising learning. In: IEEE Conference on Computer Communications Workshops, pp. 1\u20136 (2021). https:\/\/doi.org\/10.1109\/INFOCOMWKSHPS51825.2021.9484542","DOI":"10.1109\/INFOCOMWKSHPS51825.2021.9484542"},{"key":"3253_CR19","first-page":"6840","volume":"33","author":"J Ho","year":"2020","unstructured":"Ho, J., Jain, A., Abbeel, P.: Denoising diffusion probabilistic models. Adv. Neural Inf. Process. Syst. 33, 6840\u20136851 (2020)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"3253_CR20","unstructured":"Nichol, A.Q., Dhariwal, P.: Improved denoising diffusion probabilistic models. In: Proceedings of the 38th International Conference on Machine Learning, vol. 139, pp. 8162\u20138171 (2021)"},{"key":"3253_CR21","unstructured":"Bansal, A., Borgnia, E., Chu, H., Li, J.S., Kazemi, H., Huang, F., Goldblum, M., Geiping, J., Goldstein, T.: Cold diffusion: inverting arbitrary image transforms without noise. arXiv preprint arXiv:2208.09392"},{"key":"3253_CR22","doi-asserted-by":"crossref","unstructured":"Peebles, W., Xie, S.: Scalable diffusion models with transformers. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 4195\u20134205 (2023)","DOI":"10.1109\/ICCV51070.2023.00387"},{"key":"3253_CR23","doi-asserted-by":"publisher","unstructured":"Cheng, S., Chen, Y., Chiu, W., Tseng, H., Lee, H.: Adaptively-realistic image generation from stroke and sketch with diffusion model. In: IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 4043\u20134051 (2023). https:\/\/doi.org\/10.1109\/WACV56688.2023.00404","DOI":"10.1109\/WACV56688.2023.00404"},{"key":"3253_CR24","unstructured":"Kawar, B., Song, J., Ermon, S., Elad, M.: JPEG artifact correction using denoising diffusion restoration models. In: NeurIPS 2022 Workshop on Score-Based Methods (2022)"},{"key":"3253_CR25","doi-asserted-by":"publisher","unstructured":"Saharia, C., Chan, W., Chang, H., Lee, C.A., Ho, J., Salimans, T., Fleet, D.J., Norouzi, M.: Palette: image-to-image diffusion models. In: ACM SIGGRAPH 2022 Conference Proceedings, pp. 1\u201310 (2022). https:\/\/doi.org\/10.1145\/3528233.3530757","DOI":"10.1145\/3528233.3530757"},{"issue":"4","key":"3253_CR26","doi-asserted-by":"publisher","first-page":"4713","DOI":"10.1109\/TPAMI.2022.3204461","volume":"45","author":"C Saharia","year":"2023","unstructured":"Saharia, C., Ho, J., Chan, W., Salimans, T., Fleet, D.J., Norouzi, M.: Image super-resolution via iterative refinement. IEEE Trans. Pattern Anal. Mach. Intell. 45(4), 4713\u20134726 (2023). https:\/\/doi.org\/10.1109\/TPAMI.2022.3204461","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"3253_CR27","doi-asserted-by":"publisher","first-page":"2226","DOI":"10.1109\/TMM.2022.3144890","volume":"25","author":"N Jiang","year":"2023","unstructured":"Jiang, N., Sheng, B., Li, P., Lee, T.: Photohelper: portrait photographing guidance via deep feature retrieval and fusion. IEEE Trans. Multimed. 25, 2226\u20132238 (2023). https:\/\/doi.org\/10.1109\/TMM.2022.3144890","journal-title":"IEEE Trans. Multimed."},{"key":"3253_CR28","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/TMM.2021.3120873","volume":"25","author":"X Lin","year":"2023","unstructured":"Lin, X., Sun, S., Huang, W., Sheng, B., Li, P., Feng, D.D.: EAPT: efficient attention pyramid transformer for image processing. IEEE Trans. Multimed. 25, 50\u201361 (2023). https:\/\/doi.org\/10.1109\/TMM.2021.3120873","journal-title":"IEEE Trans. Multimed."},{"issue":"11","key":"3253_CR29","doi-asserted-by":"publisher","first-page":"13489","DOI":"10.1109\/TPAMI.2023.3293885","volume":"45","author":"Z Chen","year":"2023","unstructured":"Chen, Z., Qiu, G., Li, P., Zhu, L., Yang, X., Sheng, B.: MNGNAS: distilling adaptive combination of multiple searched networks for one-shot neural architecture search. IEEE Trans. Pattern Anal. Mach. Intell. 45(11), 13489\u201313508 (2023). https:\/\/doi.org\/10.1109\/TPAMI.2023.3293885","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"3253_CR30","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proceedings of the 37th International Conference on Machine Learning, vol. 119, pp. 2206\u20132216 (2020)"},{"key":"3253_CR31","doi-asserted-by":"publisher","unstructured":"Papernot, N., McDaniel, P.D., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. In: IEEE European Symposium on Security and Privacy, pp. 372\u2013387 (2016). https:\/\/doi.org\/10.1109\/EUROSP.2016.36","DOI":"10.1109\/EUROSP.2016.36"},{"key":"3253_CR32","doi-asserted-by":"publisher","unstructured":"Moosavi-Dezfooli, S., Fawzi, A., Fawzi, O., Frossard, P.: Universal adversarial perturbations. In: 2017 IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2017, Honolulu, HI, USA, July 21\u201326, 2017, pp. 86\u201394 (2017). https:\/\/doi.org\/10.1109\/CVPR.2017.17","DOI":"10.1109\/CVPR.2017.17"},{"key":"3253_CR33","unstructured":"Bhattad, A., Chong, M.J., Liang, K., Li, B., Forsyth, D.A.: Unrestricted adversarial examples via semantic manipulation. In: 8th International Conference on Learning Representations (2020)"},{"key":"3253_CR34","doi-asserted-by":"publisher","unstructured":"Shamsabadi, A.S., S\u00e1nchez-Matilla, R., Cavallaro, A.: Colorfool: semantic adversarial colorization. In: 2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 1148\u20131157 (2020). https:\/\/doi.org\/10.1109\/CVPR42600.2020.00123","DOI":"10.1109\/CVPR42600.2020.00123"},{"key":"3253_CR35","unstructured":"Zhao, Z., Liu, Z., Larson, M.A.: Adversarial color enhancement: generating unrestricted adversarial images by optimizing a color filter. In: 31st British Machine Vision Conference 2020 (2020)"},{"key":"3253_CR36","first-page":"7546","volume":"35","author":"S Yuan","year":"2022","unstructured":"Yuan, S., Zhang, Q., Gao, L., Cheng, Y., Song, J.: Natural color fool: towards boosting black-box unrestricted attacks. Adv. Neural Inf. Process. Syst. 35, 7546\u20137560 (2022)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"3253_CR37","doi-asserted-by":"crossref","unstructured":"Chen, J., Chen, H., Chen, K., Zhang, Y., Zou, Z., Shi, Z.: Diffusion models for imperceptible and transferable adversarial attack (2023). arXiv preprint arXiv:2305.08192","DOI":"10.1109\/TPAMI.2024.3480519"},{"key":"3253_CR38","doi-asserted-by":"publisher","unstructured":"Zheng, S., Song, Y., Leung, T., Goodfellow, I.J.: Improving the robustness of deep neural networks via stability training. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, pp. 4480\u20134488 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.485","DOI":"10.1109\/CVPR.2016.485"},{"key":"3253_CR39","doi-asserted-by":"publisher","unstructured":"Ye, N., Li, Q., Zhou, X., Zhu, Z.: Amata: An annealing mechanism for adversarial training acceleration. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, pp. 10691\u201310699 (2021). https:\/\/doi.org\/10.1609\/AAAI.V35I12.17278","DOI":"10.1609\/AAAI.V35I12.17278"},{"key":"3253_CR40","doi-asserted-by":"publisher","unstructured":"Gokhale, T., Anirudh, R., Kailkhura, B., Thiagarajan, J.J., Baral, C., Yang, Y.: Attribute-guided adversarial training for robustness to natural perturbations. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, pp. 7574\u20137582 (2021). https:\/\/doi.org\/10.1609\/AAAI.V35I9.16927","DOI":"10.1609\/AAAI.V35I9.16927"},{"key":"3253_CR41","doi-asserted-by":"publisher","unstructured":"Terzi, M., Achille, A., Maggipinto, M., Susto, G.A.: Adversarial training reduces information and improves transferability. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, pp. 2674\u20132682. https:\/\/doi.org\/10.1609\/AAAI.V35I3.16371","DOI":"10.1609\/AAAI.V35I3.16371"},{"key":"3253_CR42","unstructured":"Metzen, J.H., Genewein, T., Fischer, V., Bischoff, B.: On detecting adversarial perturbations. In: 5th International Conference on Learning Representations (2017)"},{"key":"3253_CR43","doi-asserted-by":"crossref","unstructured":"Xu, W., Evans, D., Qi, Y.: Feature squeezing: Detecting adversarial examples in deep neural networks. In: 25th Annual Network and Distributed System Security Symposium (2018)","DOI":"10.14722\/ndss.2018.23198"},{"key":"3253_CR44","first-page":"25","volume":"31","author":"T Pang","year":"2018","unstructured":"Pang, T., Du, C., Dong, Y., Zhu, J.: Towards robust detection of adversarial examples. Adv. Neural Inf. Process. Syst. 31, 25 (2018)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"3253_CR45","first-page":"25","volume":"31","author":"Z Zheng","year":"2018","unstructured":"Zheng, Z., Hong, P.: Robust detection of adversarial attacks by modeling the intrinsic properties of deep neural networks. Adv. Neural Inf. Process. Syst. 31, 25 (2018)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"3253_CR46","unstructured":"Chen, N., Zhang, Y., Zen, H., Weiss, R.J., Norouzi, M., Chan, W.: Wavegrad: estimating gradients for waveform generation. In: 9th International Conference on Learning Representations (2021)"},{"key":"3253_CR47","doi-asserted-by":"publisher","unstructured":"Chattopadhyay, A., Sarkar, A., Howlader, P., Balasubramanian, V.N.: Grad-cam++: generalized gradient-based visual explanations for deep convolutional networks. In: 2018 IEEE Winter Conference on Applications of Computer Vision, pp. 839\u2013847 (2018). https:\/\/doi.org\/10.1109\/WACV.2018.00097","DOI":"10.1109\/WACV.2018.00097"},{"key":"3253_CR48","doi-asserted-by":"publisher","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.90","DOI":"10.1109\/CVPR.2016.90"},{"key":"3253_CR49","unstructured":"Simonyan, K., Zisserman, A.: Very deep convolutional networks for large-scale image recognition. In: 3rd International Conference on Learning Representations (2015)"},{"key":"3253_CR50","doi-asserted-by":"publisher","unstructured":"Huang, G., Liu, Z., Maaten, L., Weinberger, K.Q.: Densely connected convolutional networks. In: 2017 IEEE Conference on Computer Vision and Pattern Recognition, pp. 2261\u20132269 (2017). https:\/\/doi.org\/10.1109\/CVPR.2017.243","DOI":"10.1109\/CVPR.2017.243"},{"key":"3253_CR51","doi-asserted-by":"publisher","unstructured":"Tu, Z., Talebi, H., Zhang, H., Yang, F., Milanfar, P., Bovik, A.C., Li, Y.: Maxvit: multi-axis vision transformer. In: European Conference on Computer Vision, vol. 13684, pp. 459\u2013479 (2022). https:\/\/doi.org\/10.1007\/978-3-031-20053-3_27","DOI":"10.1007\/978-3-031-20053-3_27"},{"key":"3253_CR52","unstructured":"Hill, M., Mitchell, J.C., Zhu, S.: Stochastic security: adversarial defense using long-run dynamics of energy-based models. In: 9th International Conference on Learning Representations (2021)"}],"container-title":["The Visual Computer"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-023-03253-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00371-023-03253-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-023-03253-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,12]],"date-time":"2024-11-12T09:12:26Z","timestamp":1731402746000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00371-023-03253-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,13]]},"references-count":52,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["3253"],"URL":"https:\/\/doi.org\/10.1007\/s00371-023-03253-7","relation":{},"ISSN":["0178-2789","1432-2315"],"issn-type":[{"value":"0178-2789","type":"print"},{"value":"1432-2315","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,13]]},"assertion":[{"value":"26 December 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 February 2024","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"We declare that there is no conflict of interest related to the content of this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}}]}}