arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2404.17867cs.CVeess.IV

水印是 Deepfake 检测器的 Bug 吗?重新思考主动取证

Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics

College of Computer Science and Electronic Engineering, Hunan University(湖南大学计算机与电子工程学院)

Xiaoshuai Wu, Xin Liao, Bo Ou, Yuling Liu, Zheng Qin

AI总结:

针对水印可能干扰 Deepfake 检测器的问题,提出 AdvMark 框架,将鲁棒水印微调为对抗性水印,在不调整检测器的前提下提升下游 Deepfake 检测准确率并支持来源追踪。

摘要:

AI生成内容加速了媒体合成这一议题,尤其是 Deepfake,它能为善意或恶意目的操纵我们的肖像。在发布这些具有威胁性的人脸图像之前,一种有前景的取证解决方案是注入鲁棒水印以追踪其自身来源。然而,我们认为当前最初为真实图像设计的水印模型,在直接应用于伪造图像时可能会损害已部署的 Deepfake 检测器,因为水印容易与用于检测的伪造信号重叠。为弥补这一差距,我们代表主动取证提出 AdvMark,利用被动检测器的对抗性脆弱性以实现善用。具体而言,AdvMark 作为一种即插即用的流程,将任何鲁棒水印微调为对抗性水印,以增强水印图像的取证可检测性;同时,水印仍可被提取用于来源追踪。大量实验证明了所提 AdvMark 的有效性,它利用鲁棒水印愚弄 Deepfake 检测器,从而在不调整野外检测器的情况下帮助提高下游 Deepfake 检测的准确率。我们相信这项工作将为针对 Deepfake 的无害主动取证提供启示。

英文摘要:

AI-generated content has accelerated the topic of media synthesis, particularly Deepfake, which can manipulate our portraits for positive or malicious purposes. Before releasing these threatening face images, one promising forensics solution is the injection of robust watermarks to track their own provenance. However, we argue that current watermarking models, originally devised for genuine images, may harm the deployed Deepfake detectors when directly applied to forged images, since the watermarks are prone to overlap with the forgery signals used for detection. To bridge this gap, we thus propose AdvMark, on behalf of proactive forensics, to exploit the adversarial vulnerability of passive detectors for good. Specifically, AdvMark serves as a plug-and-play procedure for fine-tuning any robust watermarking into adversarial watermarking, to enhance the forensic detectability of watermarked images; meanwhile, the watermarks can still be extracted for provenance tracking. Extensive experiments demonstrate the effectiveness of the proposed AdvMark, leveraging robust watermarking to fool Deepfake detectors, which can help improve the accuracy of downstream Deepfake detection without tuning the in-the-wild detectors. We believe this work will shed some light on the harmless proactive forensics against Deepfake.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑