arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2311.04584cs.CV

扩散生成图像中的弱监督深度伪造定位

Weakly-supervised deepfake localization in diffusion-generated images

Bitdefender(比特梵德);University Politehnica of Bucharest(布加勒斯特理工大学)

Dragos Tantaru, Elisabeta Oneata, Dan Oneata

AI总结:

针对扩散模型生成的伪造图像,本文提出弱监督定位框架,比较三类方法,发现基于局部分数的方法在宽松监督下表现最佳,且对数据集或生成器不匹配更敏感。

摘要:

去噪扩散模型显著的生成能力引发了人们对互联网上日常所见图像真实性的新担忧。然而,现有绝大多数深度伪造检测模型都是针对先前的生成方法(如GAN)进行测试,并且通常仅对每张图像提供一个“伪造”或“真实”的标签。我们认为,更具信息量的输出应当是在每张图像的标签基础上,附加一个定位图,以指示输入的哪些区域被操纵过。为此,我们将此任务构建为弱监督定位问题,并识别出三大类方法(基于解释、基于局部分数或基于注意力),通过使用Xception网络作为共同的主干架构,在同等条件下对这些方法进行比较。我们对构成设计空间的所有主要因素进行了仔细分析:方法的选择、监督类型、数据集以及用于生成操纵图像的生成器;我们的研究通过构建仅改变其中一个组件的数据集得以实现。结果表明,弱监督定位是可以实现的,其中表现最佳的检测方法(基于局部分数)对较宽松监督的敏感性低于对数据集或生成器不匹配的敏感性。

英文摘要:

The remarkable generative capabilities of denoising diffusion models have raised new concerns regarding the authenticity of the images we see every day on the Internet. However, the vast majority of existing deepfake detection models are tested against previous generative approaches (e.g. GAN) and usually provide only a "fake" or "real" label per image. We believe a more informative output would be to augment the per-image label with a localization map indicating which regions of the input have been manipulated. To this end, we frame this task as a weakly-supervised localization problem and identify three main categories of methods (based on either explanations, local scores or attention), which we compare on an equal footing by using the Xception network as the common backbone architecture. We provide a careful analysis of all the main factors that parameterize the design space: choice of method, type of supervision, dataset and generator used in the creation of manipulated images; our study is enabled by constructing datasets in which only one of the components is varied. Our results show that weakly-supervised localization is attainable, with the best performing detection method (based on local scores) being less sensitive to the looser supervision than to the mismatch in terms of dataset or generator.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑