{"id":"https://openalex.org/W4408155387","doi":"https://doi.org/10.1145/3721479","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","display_name":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","publication_year":2025,"publication_date":"2025-03-04","ids":{"openalex":"https://openalex.org/W4408155387","doi":"https://doi.org/10.1145/3721479"},"language":"en","primary_location":{"id":"doi:10.1145/3721479","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721479","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721479","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3721479","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022180792","display_name":"Vu Tuan Truong","orcid":"https://orcid.org/0009-0003-3072-7905"},"institutions":[{"id":"https://openalex.org/I39481719","display_name":"Institut National de la Recherche Scientifique","ror":"https://ror.org/04td37d32","country_code":"CA","type":"education","lineage":["https://openalex.org/I39481719","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Vu Tuan Truong","raw_affiliation_strings":["Institut National De La Recherche Scientifique (INRS), Montreal, Canada","Institut National De La Recherche Scientifique (INRS),  Montreal, Canada"],"raw_orcid":"https://orcid.org/0009-0003-3072-7905","affiliations":[{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS), Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]},{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS),  Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109652410","display_name":"L. Dang","orcid":null},"institutions":[{"id":"https://openalex.org/I39481719","display_name":"Institut National de la Recherche Scientifique","ror":"https://ror.org/04td37d32","country_code":"CA","type":"education","lineage":["https://openalex.org/I39481719","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Luan Ba Dang","raw_affiliation_strings":["Institut National De La Recherche Scientifique (INRS), Montreal, Canada","Institut National De La Recherche Scientifique (INRS),  Montreal, Canada"],"raw_orcid":"https://orcid.org/0009-0000-9746-2241","affiliations":[{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS), Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]},{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS),  Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029986211","display_name":"Long Bao Le","orcid":"https://orcid.org/0000-0003-3577-6530"},"institutions":[{"id":"https://openalex.org/I39481719","display_name":"Institut National de la Recherche Scientifique","ror":"https://ror.org/04td37d32","country_code":"CA","type":"education","lineage":["https://openalex.org/I39481719","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Long Bao Le","raw_affiliation_strings":["Institut National De La Recherche Scientifique (INRS), Montreal, Canada","Institut National De La Recherche Scientifique (INRS),  Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3577-6530","affiliations":[{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS), Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]},{"raw_affiliation_string":"Institut National De La Recherche Scientifique (INRS),  Montreal, Canada","institution_ids":["https://openalex.org/I39481719"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I39481719"],"apc_list":null,"apc_paid":null,"fwci":33.8796,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":{"value":0.99684639,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"57","issue":"8","first_page":"1","last_page":"44"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9132000207901001,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9114000201225281,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8492318391799927},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.6576788425445557},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.4851682782173157},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4302261471748352},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4154696464538574},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33152902126312256}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8492318391799927},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.6576788425445557},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.4851682782173157},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4302261471748352},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4154696464538574},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33152902126312256},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3721479","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721479","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721479","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3721479","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721479","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721479","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4408155387.pdf"},"referenced_works_count":60,"referenced_works":["https://openalex.org/W1505878979","https://openalex.org/W1873763122","https://openalex.org/W1991111872","https://openalex.org/W2013035813","https://openalex.org/W2173520492","https://openalex.org/W2640329709","https://openalex.org/W2746314669","https://openalex.org/W2748789698","https://openalex.org/W2782217514","https://openalex.org/W2807096445","https://openalex.org/W2887995258","https://openalex.org/W2962700793","https://openalex.org/W2965527189","https://openalex.org/W3042368254","https://openalex.org/W3135378441","https://openalex.org/W3159069780","https://openalex.org/W3168867926","https://openalex.org/W3174488710","https://openalex.org/W4224035735","https://openalex.org/W4293327156","https://openalex.org/W4294754026","https://openalex.org/W4302012908","https://openalex.org/W4360884927","https://openalex.org/W4377695098","https://openalex.org/W4377864639","https://openalex.org/W4378942268","https://openalex.org/W4379473907","https://openalex.org/W4382140728","https://openalex.org/W4382998652","https://openalex.org/W4385848426","https://openalex.org/W4386721882","https://openalex.org/W4387195417","https://openalex.org/W4387839270","https://openalex.org/W4389217924","https://openalex.org/W4389600256","https://openalex.org/W4389768813","https://openalex.org/W4391012828","https://openalex.org/W4391468387","https://openalex.org/W4391591321","https://openalex.org/W4392487885","https://openalex.org/W4393740938","https://openalex.org/W4394586040","https://openalex.org/W4396523471","https://openalex.org/W4396817538","https://openalex.org/W4396913510","https://openalex.org/W4398880507","https://openalex.org/W4399062214","https://openalex.org/W4399378992","https://openalex.org/W6733049761","https://openalex.org/W6780292011","https://openalex.org/W6796761347","https://openalex.org/W6824583106","https://openalex.org/W6843813467","https://openalex.org/W6849050393","https://openalex.org/W6852143751","https://openalex.org/W6853690093","https://openalex.org/W6858206802","https://openalex.org/W6859607024","https://openalex.org/W6860704554","https://openalex.org/W6868880902"],"related_works":["https://openalex.org/W4365211920","https://openalex.org/W3014948380","https://openalex.org/W4391584540","https://openalex.org/W4380551139","https://openalex.org/W4317695495","https://openalex.org/W4395044357","https://openalex.org/W4287117424","https://openalex.org/W4387506531","https://openalex.org/W2087346071","https://openalex.org/W2967848559"],"abstract_inverted_index":{"Diffusion":[0],"models":[1],"(DMs)":[2],"have":[3,35],"achieved":[4],"state-of-the-art":[5],"performance":[6],"on":[7,66,96,103],"various":[8,56,104],"generative":[9],"tasks":[10],"such":[11],"as":[12],"image":[13],"synthesis,":[14],"text-to-image,":[15],"and":[16,55,106,140,184],"text-guided":[17],"image-to-image":[18],"generation.":[19],"However,":[20],"the":[21,24,26,67,97,159,173],"more":[22,27],"powerful":[23],"DMs,":[25,101,123],"harmful":[28],"they":[29],"can":[30],"potentially":[31],"be.":[32],"Recent":[33],"studies":[34],"shown":[36],"that":[37,157],"DMs":[38,62,117],"are":[39,63,74],"prone":[40],"to":[41,77,169],"a":[42,82,93,146],"wide":[43],"range":[44],"of":[45,85,100,116,122,149,155,161,172,181],"attacks,":[46,49,52],"including":[47,124],"adversarial":[48],"membership":[50],"inference":[51],"backdoor":[53],"injection,":[54],"multi-modal":[57,141],"threats.":[58,175],"Since":[59],"numerous":[60],"pre-trained":[61],"published":[64],"widely":[65],"Internet,":[68],"potential":[69,167,186],"threats":[70],"from":[71],"these":[72],"attacks":[73,156],"especially":[75],"detrimental":[76],"society,":[78],"making":[79],"DM-related":[80,182],"security":[81,98,183],"topic":[83],"worthy":[84],"investigation.":[86],"Therefore,":[87],"in":[88],"this":[89,190],"article,":[90],"we":[91,112,164,177],"conduct":[92],"comprehensive":[94,147],"survey":[95,148],"aspect":[99],"focusing":[102],"attack":[105],"defense":[107],"methods":[108],"for":[109,189],"DMs.":[110,143,162],"First,":[111],"present":[113],"crucial":[114],"knowledge":[115],"with":[118],"five":[119],"main":[120],"types":[121,154],"denoising":[125,129],"diffusion":[126,130],"probabilistic":[127],"models,":[128,132],"implicit":[131],"noise":[133],"conditioned":[134],"score":[135],"networks,":[136],"stochastic":[137],"differential":[138],"equations,":[139],"conditional":[142],"We":[144],"provide":[145],"recent":[150],"works":[151],"investigating":[152],"different":[153],"exploit":[158],"vulnerabilities":[160],"Then,":[163],"thoroughly":[165],"review":[166],"countermeasures":[168],"mitigate":[170],"each":[171],"presented":[174],"Finally,":[176],"discuss":[178],"open":[179],"challenges":[180],"describe":[185],"research":[187],"directions":[188],"topic.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":14}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2025-10-10T00:00:00"}