RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Eddoubi, Hicham, Ricker, Jonas, Cocchi, Federico, Baraldi, Lorenzo, Sotgiu, Angelo, Pintor, Maura, Cornia, Marcella, Fischer, Asja, Cucchiara, Rita, Biggio, Battista
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866918049667350528
author Eddoubi, Hicham
Ricker, Jonas
Cocchi, Federico
Baraldi, Lorenzo
Sotgiu, Angelo
Pintor, Maura
Cornia, Marcella
Baraldi, Lorenzo
Fischer, Asja
Cucchiara, Rita
Biggio, Battista
author_facet Eddoubi, Hicham
Ricker, Jonas
Cocchi, Federico
Baraldi, Lorenzo
Sotgiu, Angelo
Pintor, Maura
Cornia, Marcella
Baraldi, Lorenzo
Fischer, Asja
Cucchiara, Rita
Biggio, Battista
contents AI-generated images have reached a quality level at which humans are incapable of reliably distinguishing them from real images. To counteract the inherent risk of fraud and disinformation, the detection of AI-generated images is a pressing challenge and an active research topic. While many of the presented methods claim to achieve high detection accuracy, they are usually evaluated under idealized conditions. In particular, the adversarial robustness is often neglected, potentially due to a lack of awareness or the substantial effort required to conduct a comprehensive robustness analysis. In this work, we tackle this problem by providing a simpler means to assess the robustness of AI-generated image detectors. We present RAID (Robust evaluation of AI-generated image Detectors), a dataset of 72k diverse and highly transferable adversarial examples. The dataset is created by running attacks against an ensemble of seven state-of-the-art detectors and images generated by four different text-to-image models. Extensive experiments show that our methodology generates adversarial images that transfer with a high success rate to unseen detectors, which can be used to quickly provide an approximate yet still reliable estimate of a detector's adversarial robustness. Our findings indicate that current state-of-the-art AI-generated image detectors can be easily deceived by adversarial examples, highlighting the critical need for the development of more robust methods. We release our dataset at https://huggingface.co/datasets/aimagelab/RAID and evaluation code at https://github.com/pralab/RAID.
format Preprint
id arxiv_https___arxiv_org_abs_2506_03988
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors
Eddoubi, Hicham
Ricker, Jonas
Cocchi, Federico
Baraldi, Lorenzo
Sotgiu, Angelo
Pintor, Maura
Cornia, Marcella
Baraldi, Lorenzo
Fischer, Asja
Cucchiara, Rita
Biggio, Battista
Computer Vision and Pattern Recognition
Machine Learning
AI-generated images have reached a quality level at which humans are incapable of reliably distinguishing them from real images. To counteract the inherent risk of fraud and disinformation, the detection of AI-generated images is a pressing challenge and an active research topic. While many of the presented methods claim to achieve high detection accuracy, they are usually evaluated under idealized conditions. In particular, the adversarial robustness is often neglected, potentially due to a lack of awareness or the substantial effort required to conduct a comprehensive robustness analysis. In this work, we tackle this problem by providing a simpler means to assess the robustness of AI-generated image detectors. We present RAID (Robust evaluation of AI-generated image Detectors), a dataset of 72k diverse and highly transferable adversarial examples. The dataset is created by running attacks against an ensemble of seven state-of-the-art detectors and images generated by four different text-to-image models. Extensive experiments show that our methodology generates adversarial images that transfer with a high success rate to unseen detectors, which can be used to quickly provide an approximate yet still reliable estimate of a detector's adversarial robustness. Our findings indicate that current state-of-the-art AI-generated image detectors can be easily deceived by adversarial examples, highlighting the critical need for the development of more robust methods. We release our dataset at https://huggingface.co/datasets/aimagelab/RAID and evaluation code at https://github.com/pralab/RAID.
title RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors
topic Computer Vision and Pattern Recognition
Machine Learning
url https://arxiv.org/abs/2506.03988