Greedy Coordinate Diffusion: Advancing Semantic Adversarial Attacks
Researchers from the Trustworthy AI Group have introduced Greedy Coordinate Diffusion (GCD), an adversarial attack framework that leverages diffusion models to generate semantically coherent perturbations. Traditional gradient-based methods, such as PGD and FGSM, typically introduce high-frequency noise that is detectable by human observers or automated denoising filters. GCD utilizes diffusion guidance to ensure adversarial noise remains within the natural data manifold, while a greedy coordinate optimization strategy is employed to navigate model decision boundaries. This approach enables the generation of perturbations that maintain visual and semantic integrity, allowing the attack to circumvent standard defense mechanisms based on denoising or manifold projection.