What Makes Fake Images Detectable? Understanding Properties that Generalize

被引:199
作者
Chai, Lucy [1 ]
Bau, David [1 ]
Lim, Ser-Nam [1 ]
Isola, Phillip [1 ]
机构
[1] MIT CSAIL, Cambridge, MA 02139 USA
来源
COMPUTER VISION - ECCV 2020, PT XXVI | 2020年 / 12371卷
基金
美国国家科学基金会;
关键词
Image forensics; Generative models; Image manipulation; Visualization; Generalization; EXPOSING DIGITAL FORGERIES;
D O I
10.1007/978-3-030-58574-7_7
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
The quality of image generation and manipulation is reaching impressive levels, making it increasingly difficult for a human to distinguish between what is real and what is fake. However, deep networks can still pick up on the subtle artifacts in these doctored images. We seek to understand what properties of fake images make them detectable and identify what generalizes across different model architectures, datasets, and variations in training. We use a patch-based classifier with limited receptive fields to visualize which regions of fake images are more easily detectable. We further show a technique to exaggerate these detectable properties and demonstrate that, even when the image generator is adversarially finetuned against a fake image classifier, it is still imperfect and leaves detectable artifacts in certain image patches. Code is available at https://github.com/chail/patch-forensics.
引用
收藏
页码:103 / 120
页数:18
相关论文
共 38 条
[1]  
Afchar D, 2018, IEEE INT WORKS INFOR
[2]  
[Anonymous], 2016, P 4 ACM WORKSH 138IN
[3]   Seeing What a GAN Cannot Generate [J].
Bau, David ;
Zhu, Jun-Yan ;
Wulff, Jonas ;
Peebles, William ;
Strobelt, Hendrik ;
Zhou, Bolei ;
Torralba, Antonio .
2019 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION (ICCV 2019), 2019, :4501-4510
[4]   Evading Deepfake-Image Detectors with White- and Black-Box Attacks [J].
Carlini, Nicholas ;
Farid, Hany .
2020 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION WORKSHOPS (CVPRW 2020), 2020, :2804-2813
[5]   Xception: Deep Learning with Depthwise Separable Convolutions [J].
Chollet, Francois .
30TH IEEE CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR 2017), 2017, :1800-1807
[6]  
Cozzolino D, 2019, Arxiv, DOI [arXiv:1812.02510, 10.48550/arXiv.1812.02510]
[7]   Recasting Residual-based Local Descriptors as Convolutional Neural Networks: an Application to Image Forgery Detection [J].
Cozzolino, Davide ;
Poggi, Giovanni ;
Verdoliva, Luisa .
IH&MMSEC'17: PROCEEDINGS OF THE 2017 ACM WORKSHOP ON INFORMATION HIDING AND MULTIMEDIA SECURITY, 2017, :159-164
[8]  
Geirhos R, 2019, Arxiv, DOI arXiv:1811.12231
[9]  
github, DeepFakes,
[10]   GANalyze: Toward Visual Definitions of Cognitive Image Properties [J].
Goetschalckx, Lore ;
Andonian, Alex ;
Oliva, Aude ;
Isola, Phillip .
2019 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION (ICCV 2019), 2019, :5743-5752