Weili Nie
* Equal Contribution
Diffusion models have been recently employed to improve certified robustness through the process of denoising. However, the theoretical understanding of why diffusion models are able to improve the certified robustness is still lacking, preventing from further improvement. In this study, we close this gap by analyzing the fundamental properties of diffusion models and establishing the conditions under which they can enhance certified robustness. This deeper understanding allows us to propose a new method De
In this paper, we provide theroetical analysis about the ability of diffusion models to improve certified robustness. Our main contributions are as the following: (i) explain why and how the diffusion model purifies adversarial attacks to improve the adversarial robustness; (ii) derive the robust region and robust radius of diffusion models, which has the potential to provide a large robust region.
Weili Nie