论文标题

检测扩散模型深击

Towards the Detection of Diffusion Model Deepfakes

论文作者

Ricker, Jonas, Damm, Simon, Holz, Thorsten, Fischer, Asja

论文摘要

在过去的几年中,扩散模型(DMS)达到了前所未有的视觉质量水平。但是,对DM生成的图像的检测几乎没有关注,这对于防止对我们社会的不利影响至关重要。相反,从法医角度对生成的对抗网络(GAN)进行了广泛的研究。因此,在这项工作中,我们采取自然的下一步来评估是否可以使用以前的方法来检测DMS生成的图像。我们的实验产生了两个关键的发现:(1)最新的GAN检测器无法可靠地将真实区分开与DM生成的图像区分开,但是(2)在DM生成的图像上重新训练它们几乎可以进行完美的检测,这甚至可以显着概括为GAN。加上特征空间分析,我们的结果导致了以下假设:DMS产生的可检测到的伪影较少,因此与gan相比,难以检测到更难检测。造成这种情况的一个可能原因是在DM生成的图像中没有网格样频率伪像,这是gan的已知弱点。但是,我们提出了一个有趣的观察结果,即扩散模型倾向于低估高频,这是我们归因于学习目标。

In the course of the past few years, diffusion models (DMs) have reached an unprecedented level of visual quality. However, relatively little attention has been paid to the detection of DM-generated images, which is critical to prevent adverse impacts on our society. In contrast, generative adversarial networks (GANs), have been extensively studied from a forensic perspective. In this work, we therefore take the natural next step to evaluate whether previous methods can be used to detect images generated by DMs. Our experiments yield two key findings: (1) state-of-the-art GAN detectors are unable to reliably distinguish real from DM-generated images, but (2) re-training them on DM-generated images allows for almost perfect detection, which remarkably even generalizes to GANs. Together with a feature space analysis, our results lead to the hypothesis that DMs produce fewer detectable artifacts and are thus more difficult to detect compared to GANs. One possible reason for this is the absence of grid-like frequency artifacts in DM-generated images, which are a known weakness of GANs. However, we make the interesting observation that diffusion models tend to underestimate high frequencies, which we attribute to the learning objective.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源