ConsistencyPure: Consistency Models for Realtime Adversarial Purification

Diffusion-Based Purification (DBP) is a stochasticity-based defense method that effectively mitigates adversarial attacks but suffers from high computational costs due to its iterative reverse process. To address this, we propose ConsistencyPure, a novel purification framework leveraging a pre-trained consistency model distilled from diffusion models. ConsistencyPure requires only one forward and one reverse sampling step, achieving real-time purification while maintaining comparable defense performance and improving efficiency by one to two orders of magnitude. Our finding further confirms that the robustness of DBP stems primarily from randomness, independent of the diffusion framework’s iterative operations or noise prediction. Importantly, we highlight for the first time the crucial role of model representation learning in stochasticity- based defense methods. Extensive experiments validate the effectiveness and practicality of ConsistencyPure.

Authors

Institutions

Publication Details

Published
2024-12-27
DOI
https://doi.org/10.1109/icairc64177.2024.10900270
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

ConsistencyPure: Consistency Models for Realtime Adversarial Purification

Y. Liu, Yuchen Liu, Kezhao Liu
Adversarial Robustness in Machine Learning
article

ConsistencyPure: Consistency Models for Realtime Adversarial Purification

Y. Liu, Yuchen Liu, Kezhao Liu
article en

Abstract

Diffusion-Based Purification (DBP) is a stochasticity-based defense method that effectively mitigates adversarial attacks but suffers from high computational costs due to its iterative reverse process. To address this, we propose ConsistencyPure, a novel purification framework leveraging a pre-trained consistency model distilled from diffusion models. ConsistencyPure requires only one forward and one reverse sampling step, achieving real-time purification while maintaining comparable defense performance and improving efficiency by one to two orders of magnitude. Our finding further confirms that the robustness of DBP stems primarily from randomness, independent of the diffusion framework’s iterative operations or noise prediction. Importantly, we highlight for the first time the crucial role of model representation learning in stochasticity- based defense methods. Extensive experiments validate the effectiveness and practicality of ConsistencyPure.

Sun Yat-sen University (CN)
Openalex Percentile: Top 74%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

ConsistencyPure: Consistency Models for Realtime Adversarial Purification — Y. Liu, Yuchen Liu, et al. · (2024) | TGRS Research Map | TGRS