{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T08:37:31Z","timestamp":1779266251615,"version":"3.51.4"},"reference-count":60,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00438","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"4605-4615","source":"Crossref","is-referenced-by-count":1,"title":["Adversarial Purification via Super-Resolution and Diffusion"],"prefix":"10.1109","author":[{"given":"Mincheol","family":"Park","sequence":"first","affiliation":[{"name":"Samsung Advanced Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cheonjun","family":"Park","sequence":"additional","affiliation":[{"name":"Hankuk University of Foreign Studies"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seungseop","family":"Lim","sequence":"additional","affiliation":[{"name":"AITRICS"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mijin","family":"Koo","sequence":"additional","affiliation":[{"name":"Seoul National University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hyunwuk","family":"Lee","sequence":"additional","affiliation":[{"name":"Samsung Electronics"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Won Woo","family":"Ro","sequence":"additional","affiliation":[{"name":"Yonsei University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Suhyun","family":"Kim","sequence":"additional","affiliation":[{"name":"Kyung Hee University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2020.3016744"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3021088"},{"key":"ref3","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"International Conference on Machine Learning","author":"Athalye"},{"key":"ref4","article-title":"Synthesizing robust adversarial examples","volume-title":"International Conference on Machine Learning","author":"Athalye"},{"key":"ref5","article-title":"Diffusion models demand contrastive guidance for adversarial purification to advance","volume-title":"International Conference on Machine Learning","author":"Bai"},{"key":"ref6","article-title":"Are transformers more robust than cnns?","author":"Bai","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.23919\/DATE54114.2022.9774624"},{"key":"ref8","article-title":"Collapsible linear blocks for super-efficient super resolution","volume-title":"Proceedings of Machine Learning and Systems","author":"Bhardwaj"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01481"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02361"},{"key":"ref11","volume-title":"(certified!!) adversarial robustness for free! In International Conference on Learning Representations","author":"Carlini"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1862"},{"key":"ref13","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"International Conference on Machine Learning","author":"Croce"},{"key":"ref14","article-title":"Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression","author":"Das","year":"2017","journal-title":"arXiv preprint arXiv"},{"key":"ref15","article-title":"Implicit generation and modeling with energy based models","author":"Du","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref16","article-title":"A study of the effect of jpg compression on adversarial images","author":"Dziugaite","year":"2016","journal-title":"arXiv preprint arXiv"},{"key":"ref17","volume-title":"Robustness (python library)","author":"Engstrom","year":"2019"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.265"},{"key":"ref19","article-title":"Uncovering the limits of adversarial training against norm-bounded adversarial examples","author":"Gowal","year":"2020","journal-title":"arXiv preprint arXiv"},{"key":"ref20","article-title":"Improving robustness using generated data","author":"Gowal","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref21","article-title":"Your classifier is secretly an energy based model and you should treat it like one","volume-title":"International Conference on Learning Representations","author":"Grathwohl"},{"key":"ref22","article-title":"Countering adversarial images using input transformations","volume-title":"International Conference on Learning Representations","author":"Guo"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref24","article-title":"Stochastic security: Adversarial defense using long-run dynamics of energy-based models","volume-title":"International Conference on Learning Representations","author":"Hill"},{"key":"ref25","article-title":"Stochastic security: Adversarial defense using long-run dynamics of energy-based models","volume-title":"International Conference on Learning Representations","author":"Hill"},{"key":"ref26","article-title":"Denoising diffusion probabilistic models","author":"Ho","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref27","article-title":"Robust pre-training by adversarial contrastive learning","author":"Jiang","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46475-6_43"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.52202\/075280-3234"},{"key":"ref30","article-title":"Adversarial self-supervised contrastive learning","author":"Kim","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref31","article-title":"Photorealistic single image super-resolution using a generative adversarial network","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","author":"Ledig"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00019"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.151"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref35","article-title":"Inceptionism: Going deeper into neural networks","author":"Mordvintsev","year":"2015","journal-title":"Google Research Blog"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2940533"},{"key":"ref37","article-title":"Improved denoising diffusion probabilistic models","volume-title":"International Conference on Machine Learning","author":"Nichol"},{"key":"ref38","article-title":"Diffusion models for adversarial purification","volume-title":"International Conference on Machine Learning","author":"Nie"},{"key":"ref39","article-title":"Robustness and accuracy could be reconcilable by (proper) definition","volume-title":"International Conference on Machine Learning","author":"Pang"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00894"},{"key":"ref41","article-title":"Fixing data augmentation to improve adversarial robustness","author":"Rebuffi","year":"2021","journal-title":"arXiv preprint arXiv"},{"key":"ref42","article-title":"Do adversarially robust imagenet models transfer better?","author":"Salman","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref43","article-title":"Defense-GAN: Protecting classifiers against adversarial attacks using generative models","volume-title":"International Conference on Learning Representations","author":"Samangouei"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00228"},{"key":"ref46","article-title":"Denoising diffusion implicit models","volume-title":"International Conference on Learning Representations","author":"Song"},{"key":"ref47","article-title":"Pixeldefend: Leveraging generative models to understand and defend against adversarial examples","volume-title":"International Conference on Learning Representations","author":"Song"},{"key":"ref48","article-title":"Score-based generative modeling through stochastic differential equations","volume-title":"International Conference on Learning Representations","author":"Song"},{"key":"ref49","article-title":"Score-based generative modeling through stochastic differential equations","volume-title":"International Conference on Learning Representations","author":"Song"},{"key":"ref50","article-title":"Don\u2019t play favorites: Minority guidance for diffusion models","volume-title":"International Conference on Learning Representations","author":"Um"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1162\/NECO_a_00142"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1809.00219"},{"key":"ref53","article-title":"Fast is better than free: Revisiting adversarial training","volume-title":"International Conference on Learning Representations","author":"Wong"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9101634"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00059"},{"key":"ref56","article-title":"Menet: Towards effective adversarial robustness with matrix estimation","volume-title":"International Conference on Machine Learning","author":"Yang"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00874"},{"key":"ref58","article-title":"Adversarial purification with score-based generative models","volume-title":"International Conference on Machine Learning","author":"Yoon"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2257"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11445127.pdf?arnumber=11445127","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:24:00Z","timestamp":1777613040000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11445127\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":60,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00438","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}