Towards the Detection of Diffusion Model Deepfakes

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Ricker, Jonas, Damm, Simon, Holz, Thorsten, Fischer, Asja
Formato: Preprint
Publicado: 2022
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866914646376579072
author Ricker, Jonas
Damm, Simon
Holz, Thorsten
Fischer, Asja
author_facet Ricker, Jonas
Damm, Simon
Holz, Thorsten
Fischer, Asja
contents In the course of the past few years, diffusion models (DMs) have reached an unprecedented level of visual quality. However, relatively little attention has been paid to the detection of DM-generated images, which is critical to prevent adverse impacts on our society. In contrast, generative adversarial networks (GANs), have been extensively studied from a forensic perspective. In this work, we therefore take the natural next step to evaluate whether previous methods can be used to detect images generated by DMs. Our experiments yield two key findings: (1) state-of-the-art GAN detectors are unable to reliably distinguish real from DM-generated images, but (2) re-training them on DM-generated images allows for almost perfect detection, which remarkably even generalizes to GANs. Together with a feature space analysis, our results lead to the hypothesis that DMs produce fewer detectable artifacts and are thus more difficult to detect compared to GANs. One possible reason for this is the absence of grid-like frequency artifacts in DM-generated images, which are a known weakness of GANs. However, we make the interesting observation that diffusion models tend to underestimate high frequencies, which we attribute to the learning objective.
format Preprint
id arxiv_https___arxiv_org_abs_2210_14571
institution arXiv
publishDate 2022
record_format arxiv
spellingShingle Towards the Detection of Diffusion Model Deepfakes
Ricker, Jonas
Damm, Simon
Holz, Thorsten
Fischer, Asja
Computer Vision and Pattern Recognition
In the course of the past few years, diffusion models (DMs) have reached an unprecedented level of visual quality. However, relatively little attention has been paid to the detection of DM-generated images, which is critical to prevent adverse impacts on our society. In contrast, generative adversarial networks (GANs), have been extensively studied from a forensic perspective. In this work, we therefore take the natural next step to evaluate whether previous methods can be used to detect images generated by DMs. Our experiments yield two key findings: (1) state-of-the-art GAN detectors are unable to reliably distinguish real from DM-generated images, but (2) re-training them on DM-generated images allows for almost perfect detection, which remarkably even generalizes to GANs. Together with a feature space analysis, our results lead to the hypothesis that DMs produce fewer detectable artifacts and are thus more difficult to detect compared to GANs. One possible reason for this is the absence of grid-like frequency artifacts in DM-generated images, which are a known weakness of GANs. However, we make the interesting observation that diffusion models tend to underestimate high frequencies, which we attribute to the learning objective.
title Towards the Detection of Diffusion Model Deepfakes
topic Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2210.14571