{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T07:48:21Z","timestamp":1785829701722,"version":"3.56.0"},"reference-count":49,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Fusion"],"published-print":{"date-parts":[[2026,12]]},"DOI":"10.1016\/j.inffus.2026.104539","type":"journal-article","created":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:32:47Z","timestamp":1781105567000},"page":"104539","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["FEAP-DiT: Frequency-decoupled efficient adversarial purification with diffusion transformers"],"prefix":"10.1016","volume":"136","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0809-908X","authenticated-orcid":false,"given":"Zihao","family":"Lu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hao","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lin","family":"Lei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1828-0392","authenticated-orcid":false,"given":"Yuli","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gangyao","family":"Kuang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.inffus.2026.104539_bib0001","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2024.102303","article-title":"Adversarial attacks and defenses in explainable artificial intelligence: a survey","volume":"107","author":"Baniecki","year":"2024","journal-title":"Inf. Fusion"},{"issue":"3","key":"10.1016\/j.inffus.2026.104539_bib0002","doi-asserted-by":"crossref","first-page":"664","DOI":"10.1109\/TETC.2022.3231012","article-title":"Advparams: an active DNN intellectual property protection technique via adversarial perturbation based parameter encryption","volume":"11","author":"Xue","year":"2022","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"10.1016\/j.inffus.2026.104539_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2022.109048","article-title":"Unauthorized AI cannot recognize me: reversible adversarial example","volume":"134","author":"Liu","year":"2023","journal-title":"Pattern Recognit."},{"issue":"1","key":"10.1016\/j.inffus.2026.104539_bib0004","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3691625","article-title":"Adversarial attacks and countermeasures on image classification-based deep learning models in autonomous driving systems: a systematic review","volume":"57","author":"Badjie","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.inffus.2026.104539_bib0005","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2024.102728","article-title":"Adversarial robust image processing in medical digital twin","volume":"115","author":"Shamshiri","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104539_bib0006","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"24675","article-title":"Revisiting adversarial training at scale","author":"Wang","year":"2024"},{"key":"10.1016\/j.inffus.2026.104539_bib0007","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.102964","article-title":"Adversarial evasion attacks detection for tree-based ensembles: a representation learning approach","volume":"118","author":"Braun","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104539_bib0008","unstructured":"W. Nie, B. Guo, Y. Huang, C. Xiao, A. Vahdat, A. Anandkumar, Diffusion models for adversarial purification, arXiv: 2205.07460(2022)."},{"key":"10.1016\/j.inffus.2026.104539_bib0009","unstructured":"J. Wang, Z. Lyu, D. Lin, B. Dai, H. Fu, Guided diffusion model for adversarial purification, arXiv: 2205.14969(2022)."},{"key":"10.1016\/j.inffus.2026.104539_bib0010","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"134","article-title":"Robust evaluation of diffusion-based adversarial purification","author":"Lee","year":"2023"},{"key":"10.1016\/j.inffus.2026.104539_bib0011","unstructured":"X. Li, W. Sun, H. Chen, Q. Li, Y. Liu, Y. He, J. Shi, X. Hu, ADBM: adversarial diffusion bridge model for reliable adversarial purification, arXiv: 2408.00315(2024)."},{"key":"10.1016\/j.inffus.2026.104539_bib0012","unstructured":"J. Liu, P. Cai, Q. Zhou, Y. Lin, D. Kong, B. Huang, Y. Pan, H. Xu, C. Zou, J. Tang, et al., FreqCa: accelerating diffusion models via frequency-aware caching, arXiv: 2510.08669(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0013","unstructured":"J. Chen, J. Yu, C. Ge, L. Yao, E. Xie, Y. Wu, Z. Wang, J. Kwok, P. Luo, H. Lu, et al., Pixart-\u03b1: fast training of diffusion transformer for photorealistic text-to-image synthesis, arXiv: 2310.00426(2023)."},{"key":"10.1016\/j.inffus.2026.104539_bib0014","unstructured":"K. Cao, J. Wang, A. Ma, J. Feng, Z. Zhang, X. He, S. Liu, B. Cheng, D. Leng, Y. Yin, et al., RelaCtrl: relevance-guided efficient control for diffusion transformers, arXiv: 2502.14377(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0015","unstructured":"A. Krizhevsky and G. Hinton, Learning multiple layers of features from tiny images, (Master\u2019s thesis), Department of Computer Science, University of Toronto, (2009)."},{"key":"10.1016\/j.inffus.2026.104539_bib0016","series-title":"2009 IEEE Conference on Computer Vision and Pattern Recognition","first-page":"248","article-title":"ImageNet: a large-scale hierarchical image database","author":"Deng","year":"2009"},{"key":"10.1016\/j.inffus.2026.104539_bib0017","doi-asserted-by":"crossref","DOI":"10.1016\/j.neunet.2025.107705","article-title":"Adversarial guided diffusion models for adversarial purification","volume":"191","author":"Lin","year":"2025","journal-title":"Neural Netw."},{"key":"10.1016\/j.inffus.2026.104539_bib0018","series-title":"2024 International Joint Conference on Neural Networks (IJCNN)","first-page":"1","article-title":"Guided diffusion-based adversarial purification model with denoised prior constraint","author":"Liu","year":"2024"},{"key":"10.1016\/j.inffus.2026.104539_bib0019","doi-asserted-by":"crossref","first-page":"4121","DOI":"10.1109\/TIFS.2025.3555186","article-title":"1+1>2: a dual-function defense framework for adversarial example mitigation","volume":"20","author":"Yang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.inffus.2026.104539_bib0020","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103384","article-title":"Towards effective and efficient adversarial defense with diffusion models for robust visual tracking","volume":"124","author":"Xu","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104539_bib0021","unstructured":"G. Pei, K. Ma, Y. Sun, Q. Xu, Q. Huang, Diffusion-based adversarial purification from the perspective of the frequency domain, arXiv: 2505.01267(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0022","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2024.102639","article-title":"LFDT-fusion: a latent feature-guided diffusion transformer model for general image fusion","volume":"113","author":"Yang","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104539_bib0023","unstructured":"C. Huang, B. Alsinglawi, I. Al-Qudah, DBLP: noise bridge consistency distillation for efficient and reliable adversarial purification, arXiv: 2508.00552(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0024","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference","first-page":"24331","article-title":"Instant adversarial purification with adversarial consistency distillation","author":"Lei","year":"2025"},{"key":"10.1016\/j.inffus.2026.104539_bib0025","unstructured":"J. Chen, Y. Wu, S. Luo, E. Xie, S. Paul, P. Luo, H. Zhao, Z. Li, Pixart-\u03b4: fast and controllable image generation with latent consistency models, arXiv: 2401.05252(2024)."},{"key":"10.1016\/j.inffus.2026.104539_bib0026","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"14940","article-title":"OminiControl: minimal and universal control for diffusion transformer","author":"Tan","year":"2025"},{"key":"10.1016\/j.inffus.2026.104539_bib0027","unstructured":"J. Song, C. Meng, S. Ermon, Denoising diffusion implicit models, arXiv: 2010.02502(2020)."},{"key":"10.1016\/j.inffus.2026.104539_bib0028","doi-asserted-by":"crossref","first-page":"55502","DOI":"10.52202\/075280-2423","article-title":"DPM-Solver-v3: improved diffusion ode solver with empirical model statistics","volume":"36","author":"Zheng","year":"2023","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.inffus.2026.104539_bib0029","series-title":"International Conference on Machine Learning","first-page":"32211","article-title":"Consistency models","author":"Song","year":"2023"},{"key":"10.1016\/j.inffus.2026.104539_bib0030","article-title":"Shifting decision boundary against adversarial semantic attacks in latent diffusion models","volume":"125","author":"Yang","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104539_bib0031","unstructured":"P. Selvaraju, T. Ding, T. Chen, I. Zharkov, L. Liang, FORA: fast-forward caching in diffusion transformer acceleration, arXiv: 2407.01425(2024)."},{"key":"10.1016\/j.inffus.2026.104539_bib0032","doi-asserted-by":"crossref","unstructured":"J. Liu, C. Zou, Y. Lyu, J. Chen, L. Zhang, From reusing to forecasting: accelerating diffusion models with taylorseers, arXiv: 2503.06923(2025).","DOI":"10.1109\/ICCV51701.2025.01471"},{"key":"10.1016\/j.inffus.2026.104539_bib0033","series-title":"Proceedings of the 2025 International Conference on Multimedia Retrieval","first-page":"779","article-title":"Joint adversarial purification: mitigating the threat of multimodal adversarial examples","author":"Li","year":"2025"},{"key":"10.1016\/j.inffus.2026.104539_bib0034","first-page":"6629","article-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium","volume":"30","author":"Heusel","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"9","key":"10.1016\/j.inffus.2026.104539_bib0035","doi-asserted-by":"crossref","first-page":"850","DOI":"10.1109\/34.232073","article-title":"Comparing images using the Hausdorff distance","volume":"15","author":"Huttenlocher","year":"2002","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.inffus.2026.104539_bib0036","unstructured":"Z. Yang, Y. Ma, Y. Zhang, S. Mo, D. Liu, L. Zhang, EVCtrl: efficient control adapter for visual generation, arXiv: 2508.10963(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0037","unstructured":"M. Zhang, K. Bi, W. Chen, J. Guo, X. Cheng, CLIPure: purification in latent space via clip for adversarially robust zero-shot classification, arXiv: 2502.18176(2025)."},{"key":"10.1016\/j.inffus.2026.104539_bib0038","series-title":"International Conference on Artificial Intelligence and Statistics","first-page":"1214","article-title":"VAE with a VampPrior","author":"Tomczak","year":"2018"},{"key":"10.1016\/j.inffus.2026.104539_bib0039","series-title":"Proceedings of the 46th International ACM SIGIR Conference on Research and Development in Information Retrieval","first-page":"2308","article-title":"RankT5: fine-tuning T5 for text ranking with ranking losses","author":"Zhuang","year":"2023"},{"key":"10.1016\/j.inffus.2026.104539_bib0040","unstructured":"A. Liu, B. Feng, B. Xue, B. Wang, B. Wu, C. Lu, C. Zhao, C. Deng, C. Zhang, C. Ruan, et al., DeepSeek-V3 technical report, arXiv: 2412.19437(2024)."},{"key":"10.1016\/j.inffus.2026.104539_bib0041","unstructured":"A. Madry, A. Makelov, L. Schmidt, D. Tsipras, A. Vladu, Towards deep learning models resistant to adversarial attacks, arXiv: 1706.06083(2017)."},{"key":"10.1016\/j.inffus.2026.104539_bib0042","unstructured":"M. Hill, J. Mitchell, S.-C. Zhu, Stochastic security: adversarial defense using long-run dynamics of energy-based models, arXiv: 2005.13525(2020)."},{"key":"10.1016\/j.inffus.2026.104539_bib0043","series-title":"International Conference on Machine Learning","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","author":"Croce","year":"2020"},{"key":"10.1016\/j.inffus.2026.104539_bib0044","unstructured":"M. Kettunen, E. H\u00e4rk\u00f6nen, J. Lehtinen, E-LPIPS: robust perceptual image similarity via random transformation ensembles, arXiv: 1906.03973(2019)."},{"key":"10.1016\/j.inffus.2026.104539_bib0045","series-title":"2008 15th IEEE International Conference on Image Processing","first-page":"1188","article-title":"Understanding and simplifying the structural similarity metric","author":"Rouse","year":"2008"},{"issue":"6","key":"10.1016\/j.inffus.2026.104539_bib0046","doi-asserted-by":"crossref","first-page":"1303","DOI":"10.1109\/TCSVT.2017.2654543","article-title":"Residual networks of residual networks: multilevel residual networks","volume":"28","author":"Zhang","year":"2017","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"10.1016\/j.inffus.2026.104539_bib0047","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.inffus.2026.104539_bib0048","unstructured":"A. Dosovitskiy, An image is worth 16x16 words: transformers for image recognition at scale, arXiv: 2010.11929(2020)."},{"key":"10.1016\/j.inffus.2026.104539_bib0049","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"10012","article-title":"Swin transformer: hierarchical vision transformer using shifted windows","author":"Liu","year":"2021"}],"container-title":["Information Fusion"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526004185?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526004185?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T07:18:03Z","timestamp":1785827883000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1566253526004185"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,12]]},"references-count":49,"alternative-id":["S1566253526004185"],"URL":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104539","relation":{},"ISSN":["1566-2535"],"issn-type":[{"value":"1566-2535","type":"print"}],"subject":[],"published":{"date-parts":[[2026,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"FEAP-DiT: Frequency-decoupled efficient adversarial purification with diffusion transformers","name":"articletitle","label":"Article Title"},{"value":"Information Fusion","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104539","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104539"}}