论文标题
关于DeepFake模型识别的开发
On the Exploitation of Deepfake Model Recognition
论文作者
论文摘要
尽管最近在生成对抗网络(GAN)方面取得了进步,但对深层现象的特别重点,但在解释性和对所涉及模型的认可方面均没有明确的理解。特别是,与同一生成体系结构(例如stylegan)创建的许多其他可能的模型相比,对生成深击图像的特定GAN模型的识别是一项尚未在最先进的情况下完全解决的任务。在这项工作中,提出了一条可靠的处理管道,以评估对DeepFake模型识别的指向分析指纹的可能性。通过对生成的图像进行深入分析来利用50个略有不同模型的潜在空间后,对适当的编码器进行了培训以区分这些模型,从而获得了超过96%的分类精度。一旦证明了区分极其相似图像的可能性,就引入了专用的度量利用潜在空间中发现的见解。通过在训练阶段未使用的模型生成的图像上实现模型识别任务的最终精度超过94%,本研究在反对深层现象中迈出了重要的一步,在某种意义上引入了类似于多媒体法医领域的签名(例如,用于摄像机源标识任务,图像标识任务,图像ballistics taskics等)。
Despite recent advances in Generative Adversarial Networks (GANs), with special focus to the Deepfake phenomenon there is no a clear understanding neither in terms of explainability nor of recognition of the involved models. In particular, the recognition of a specific GAN model that generated the deepfake image compared to many other possible models created by the same generative architecture (e.g. StyleGAN) is a task not yet completely addressed in the state-of-the-art. In this work, a robust processing pipeline to evaluate the possibility to point-out analytic fingerprints for Deepfake model recognition is presented. After exploiting the latent space of 50 slightly different models through an in-depth analysis on the generated images, a proper encoder was trained to discriminate among these models obtaining a classification accuracy of over 96%. Once demonstrated the possibility to discriminate extremely similar images, a dedicated metric exploiting the insights discovered in the latent space was introduced. By achieving a final accuracy of more than 94% for the Model Recognition task on images generated by models not employed in the training phase, this study takes an important step in countering the Deepfake phenomenon introducing a sort of signature in some sense similar to those employed in the multimedia forensics field (e.g. for camera source identification task, image ballistics task, etc).