Does anti still work when using Diffpure[1]?

[Tianyue818]

Hello, interesting work! Or use JPEG for noisy images and then use Denoising Diffusion to restore[2]?

[1] Nie W, Guo B, Huang Y, et al. Diffusion models for adversarial purification. ICML 2022. [2] Kawar B, Song J, Ermon S, et al. Jpeg artifact correction using denoising diffusion restoration models. NeurIPS Workshop 2022.

[Charles20021201]

https://arxiv.org/pdf/2312.00084.pdf A recent work on the robustness of data protection methods like Anti-Dreambooth. Based on their results, Diffupure works quiet well in removing the noise

[Tianyue818]

Thanks, it seems that in the era of large models, it is indeed very tough to achieve robust privacy preservation.