{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T10:23:57Z","timestamp":1777890237558,"version":"3.51.4"},"reference-count":53,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62376024"],"award-info":[{"award-number":["62376024"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.01617","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"17411-17421","source":"Crossref","is-referenced-by-count":0,"title":["DADet: Safeguarding Image Conditional Diffusion Models Against Adversarial and Backdoor Attacks via Diffusion Anomaly Detection"],"prefix":"10.1109","author":[{"given":"Hongwei","family":"Yu","sequence":"first","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinlong","family":"Ding","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiawei","family":"Li","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jinlong","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yudong","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rongquan","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huimin","family":"Ma","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiansheng","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i10.28958"},{"key":"ref2","author":"Batzolis","year":"2021","journal-title":"Conditional image generation with score-based diffusion models"},{"key":"ref3","article-title":"Prompting4debugging: Redteaming text-to-image diffusion models by finding problematic prompts","volume-title":"Forty-first International Conference on Machine Learning","author":"Chin","year":"2023"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00391"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1471"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i2.27920"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00230"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i26.34941"},{"key":"ref9","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73661-2_20"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30110"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00582"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73010-8_27"},{"key":"ref14","author":"Krizhevsky","year":"2009","journal-title":"Learning multiple layers of features from tiny images"},{"key":"ref15","article-title":"Diffusion models already have a semantic latent space","volume-title":"The Eleventh International Conference on Learning Representations","author":"Kwon","year":"2023"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612135"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3293274"},{"key":"ref18","first-page":"47704778","article-title":"A 2 rnet: Adversarial attack resilient network for robust infrared and visible image fusion","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence","author":"Li","year":"2025"},{"key":"ref19","author":"Li","year":"2024","journal-title":"Invisible backdoor attacks on diffusion models"},{"key":"ref20","first-page":"20763","article-title":"Adversarial example does good: Preventing painting imitation from diffusion models via adversarial examples","volume-title":"International Conference on Machine Learning","author":"Liang","year":"2023"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01972"},{"key":"ref23","article-title":"Discovering failure modes of text-guided diffusion models via adversarial search","volume-title":"The Twelfth International Conference on Learning Representations","author":"Liu","year":"2023"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02309"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01117"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00722"},{"key":"ref27","author":"Rando","year":"2022","journal-title":"Red-teaming the stable diffusion safety filter"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3528233.3530757"},{"issue":"4","key":"ref30","first-page":"4713","article-title":"Image superresolution via iterative refinement","volume":"45","author":"Saharia","year":"2022","journal-title":"IEEE transactions on pattern analysis and machine intelligence"},{"key":"ref31","first-page":"2989429918","article-title":"Raising the cost of malicious ai-powered image editing","volume-title":"Proceedings of the 40th International Conference on Machine Learning","author":"Salman","year":"2023"},{"key":"ref32","first-page":"2187","article-title":"Glaze: Protecting artists from style mimicry by \\{Text-to-Image\\} models","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Shan","year":"2023"},{"key":"ref33","article-title":"Denoising diffusion implicit models","volume-title":"International Conference on Learning Representations","author":"Song","year":"2020"},{"key":"ref34","first-page":"1415","article-title":"Maximum likelihood training of score-based diffusion models","volume":"34","author":"Song","year":"2021","journal-title":"Advances in neural information processing systems"},{"key":"ref35","article-title":"Score-based generative modeling through stochastic differential equations","volume-title":"International Conference on Learning Representations","author":"Song","year":"2021"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00423"},{"key":"ref37","author":"Sui","year":"2024","journal-title":"Disdet: Exploring detectability of backdoor attack on diffusion models"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00323"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3721479"},{"key":"ref40","author":"Wang","year":"2022","journal-title":"Semantic image synthesis via diffusion models"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73013-9_7"},{"key":"ref42","author":"Wu","year":"2023","journal-title":"Backdooring textual inversion for concept censorship"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72952-2_23"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.3390\/e25101469"},{"key":"ref45","author":"Yang","year":"2024","journal-title":"Guardt2i: Defending text-to-image models from adversarial prompts"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00123"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3326871"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10096862"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i7.28503"},{"key":"ref50","author":"Zhang","year":"2024","journal-title":"Revealing vulnerabilities in stable diffusion via targeted attacks"},{"key":"ref51","author":"Zhang","year":"2023","journal-title":"On the robustness of latent diffusion models"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72998-0_22"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2723009"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11445800.pdf?arnumber=11445800","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:32:35Z","timestamp":1777613555000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11445800\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":53,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.01617","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}