Adversarial Magnification to Deceive Deepfake Detection through Super Resolution

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Coccomini, Davide Alessandro, Caldelli, Roberto, Amato, Giuseppe, Falchi, Fabrizio, Gennaro, Claudio
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866929407926468608
author Coccomini, Davide Alessandro
Caldelli, Roberto
Amato, Giuseppe
Falchi, Fabrizio
Gennaro, Claudio
author_facet Coccomini, Davide Alessandro
Caldelli, Roberto
Amato, Giuseppe
Falchi, Fabrizio
Gennaro, Claudio
contents Deepfake technology is rapidly advancing, posing significant challenges to the detection of manipulated media content. Parallel to that, some adversarial attack techniques have been developed to fool the deepfake detectors and make deepfakes even more difficult to be detected. This paper explores the application of super resolution techniques as a possible adversarial attack in deepfake detection. Through our experiments, we demonstrate that minimal changes made by these methods in the visual appearance of images can have a profound impact on the performance of deepfake detection systems. We propose a novel attack using super resolution as a quick, black-box and effective method to camouflage fake images and/or generate false alarms on pristine images. Our results indicate that the usage of super resolution can significantly impair the accuracy of deepfake detectors, thereby highlighting the vulnerability of such systems to adversarial attacks. The code to reproduce our experiments is available at: https://github.com/davide-coccomini/Adversarial-Magnification-to-Deceive-Deepfake-Detection-through-Super-Resolution
format Preprint
id arxiv_https___arxiv_org_abs_2407_02670
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Adversarial Magnification to Deceive Deepfake Detection through Super Resolution
Coccomini, Davide Alessandro
Caldelli, Roberto
Amato, Giuseppe
Falchi, Fabrizio
Gennaro, Claudio
Computer Vision and Pattern Recognition
Artificial Intelligence
Deepfake technology is rapidly advancing, posing significant challenges to the detection of manipulated media content. Parallel to that, some adversarial attack techniques have been developed to fool the deepfake detectors and make deepfakes even more difficult to be detected. This paper explores the application of super resolution techniques as a possible adversarial attack in deepfake detection. Through our experiments, we demonstrate that minimal changes made by these methods in the visual appearance of images can have a profound impact on the performance of deepfake detection systems. We propose a novel attack using super resolution as a quick, black-box and effective method to camouflage fake images and/or generate false alarms on pristine images. Our results indicate that the usage of super resolution can significantly impair the accuracy of deepfake detectors, thereby highlighting the vulnerability of such systems to adversarial attacks. The code to reproduce our experiments is available at: https://github.com/davide-coccomini/Adversarial-Magnification-to-Deceive-Deepfake-Detection-through-Super-Resolution
title Adversarial Magnification to Deceive Deepfake Detection through Super Resolution
topic Computer Vision and Pattern Recognition
Artificial Intelligence
url https://arxiv.org/abs/2407.02670