Pixel-Space Diffusion Models Exhibit Stronger Adversarial Robustness Than Latent Diffusion Models

Pixel-space diffusion models (PDMs) are much more robust against adversarial attacks compared to latent diffusion models (LDMs). Current adversarial attack methods targeting diffusion models primarily focus on LDMs and fail to effectively attack PDMs.