REVIEW 2 cited by
XAI-Based Detection of Adversarial Attacks on Deepfake Detectors
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
XAI-Based Detection of Adversarial Attacks on Deepfake Detectors
read the original abstract
We introduce a novel methodology for identifying adversarial attacks on deepfake detectors using eXplainable Artificial Intelligence (XAI). In an era characterized by digital advancement, deepfakes have emerged as a potent tool, creating a demand for efficient detection systems. However, these systems are frequently targeted by adversarial attacks that inhibit their performance. We address this gap, developing a defensible deepfake detector by leveraging the power of XAI. The proposed methodology uses XAI to generate interpretability maps for a given method, providing explicit visualizations of decision-making factors within the AI models. We subsequently employ a pretrained feature extractor that processes both the input image and its corresponding XAI image. The feature embeddings extracted from this process are then used for training a simple yet effective classifier. Our approach contributes not only to the detection of deepfakes but also enhances the understanding of possible adversarial attacks, pinpointing potential vulnerabilities. Furthermore, this approach does not change the performance of the deepfake detector. The paper demonstrates promising results suggesting a potential pathway for future deepfake detection mechanisms. We believe this study will serve as a valuable contribution to the community, sparking much-needed discourse on safeguarding deepfake detectors.
Forward citations
Cited by 2 Pith papers
-
JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models
JECA^2 is a new white-box attack method using Grad-CAM-guided perturbations and prompt embedding optimization to achieve judgment-explanation consistent adversarial attacks on forensic VLMs.
-
SAGA: Source Attribution of Generative AI Videos
SAGA is a multi-granular source attribution system for generative AI videos that identifies the exact generator with state-of-the-art accuracy using only 0.5% labeled data per class.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.