% Key papers for Diffusion-based adversarial purification (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2019_multi_14535,
  title = {{Multi-Adversarial Discriminative Deep Domain Generalization for Face Presentation Attack Detection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{iclr2017_towards_28268,
  title = {{Towards Principled Methods for Training Generative Adversarial Networks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2017},
  url = {https://openreview.net/forum?id=Hk4_qw5xe},
}

@inproceedings{cvpr2019_deep_14046,
  title = {{Deep Tree Learning for Zero-Shot Face Anti-Spoofing}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{cvpr2022_protecting_19632,
  title = {{Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-Robust Makeup Transfer}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{icml2022_diffusion_40452,
  title = {{Diffusion Models for Adversarial Purification}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2022},
  url = {https://icml.cc/virtual/2022/poster/16707},
}

@inproceedings{iclr2021_lowkey_30536,
  title = {{LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2021},
  url = {https://iclr.cc/virtual/2021/poster/3088},
}

@inproceedings{aaai2021_initiative_789,
  title = {{Initiative Defense against Facial Manipulation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/01619-initiative-defense-against-facial-manipulation/},
}

@inproceedings{cvpr2023_trojdiff_22421,
  title = {{TrojDiff: Trojan Attacks on Diffusion Models With Diverse Targets}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/22229},
}

@inproceedings{icml2017_end_36176,
  title = {{End-to-End Differentiable Adversarial Imitation Learning}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2017},
  url = {https://icml.cc/virtual/2017/poster/586},
}

@inproceedings{neurips2019_quantum_58865,
  title = {{Quantum Wasserstein Generative Adversarial Networks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2019},
  url = {https://nips.cc/virtual/2019/poster/13783},
}

@inproceedings{cvpr2021_exploring_16975,
  title = {{Exploring Adversarial Fake Images on Face Manifold}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{aaai2020_learning_102182,
  title = {{Learning Efficient Representations for Fake Speech Detection}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/6044},
}

@inproceedings{aaai2024_adv_5139,
  title = {{Adv-Diffusion: Imperceptible Adversarial Face Identity Attack via Latent Diffusion Model}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28147},
}

@inproceedings{icml2021_adversarial_39036,
  title = {{Adversarial Purification with Score-based Generative Models}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2021},
  url = {https://icml.cc/virtual/2021/poster/10745},
}

@inproceedings{aaai2024_beyond_5285,
  title = {{Beyond Mimicking Under-Represented Emotions: Deep Data Augmentation with Emotional Subspace Constraints for EEG-Based Emotion Recognition}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28891},
}

@inproceedings{cvpr2023_discrete_20810,
  title = {{Discrete Point-Wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/22313},
}

@inproceedings{iclr2019_don_28894,
  title = {{Don't let your Discriminator be fooled}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2019},
  url = {https://iclr.cc/virtual/2019/poster/1086},
}

@inproceedings{icml2023_adversarial_42434,
  title = {{Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2023},
  url = {https://icml.cc/virtual/2023/poster/23956},
}

@inproceedings{aaai2023_attack_3128,
  title = {{Attack Can Benefit: An Adversarial Approach to Recognizing Facial Expressions under Noisy Annotations}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25477},
}

@inproceedings{cvpr2025_instant_26634,
  title = {{Instant Adversarial Purification with Adversarial Consistency Distillation}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/33739},
}

@inproceedings{cvpr2025_adv_25448,
  title = {{Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/32834},
}

@inproceedings{aaai2024_adversarial_5149,
  title = {{Adversarial Robust Safeguard for Evading Deep Facial Manipulation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/27762},
}

@inproceedings{aaai2024_traceevader_7632,
  title = {{TraceEvader: Making DeepFakes More Untraceable via Evading the Forgery Model Attribution}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29973},
}

@inproceedings{aaai2024_step_7414,
  title = {{Step Vulnerability Guided Mean Fluctuation Adversarial Attack against Conditional Diffusion Models}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28503},
}

@inproceedings{neurips2024_diffupac_71614,
  title = {{DiffuPac: Contextual Mimicry in Adversarial Packets Generation via Diffusion Model}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95657},
}

@inproceedings{aaai2025_transferable_11102,
  title = {{Transferable Adversarial Face Attack with Text Controlled Attribute}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32527},
}

@inproceedings{cvpr2025_divide_25976,
  title = {{Divide and Conquer: Heterogeneous Noise Integration for Diffusion-based Adversarial Purification}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/33981},
}

@inproceedings{neurips2024_advad_74137,
  title = {{AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93401},
}

@inproceedings{neurips2024_prompt_73880,
  title = {{Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93631},
}

@inproceedings{iclr2025_targeted_82643,
  title = {{Targeted Attack Improves Protection against Unauthorized Diffusion Customization}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2025},
  url = {https://iclr.cc/virtual/2025/poster/29155},
}

@inproceedings{aaai2025_lorid_9806,
  title = {{LoRID: Low-Rank Iterative Diffusion for Adversarial Purification}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34472},
}

@inproceedings{cvpr2025_silence_27668,
  title = {{Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34134},
}

@inproceedings{neurips2024_diffusion_70215,
  title = {{Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policies}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/96871},
}

@inproceedings{aaai2025_recoverable_10487,
  title = {{Recoverable Facial Identity Protection via Adaptive Makeup Transfer Adversarial Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32031},
}

@inproceedings{aaai2025_efficient_8909,
  title = {{Efficient Image-to-Image Diffusion Classifier for Adversarial Robustness}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32650},
}

@inproceedings{cvpr2024_unsegment_25158,
  title = {{Unsegment Anything by Simulating Deformation}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29440},
}

@inproceedings{cvpr2025_harnessing_26494,
  title = {{Harnessing Global-Local Collaborative Adversarial Perturbation for Anti-Customization}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/33203},
}