用CLIP特征定位深度伪造图像局部篡改,提升泛化能力
DeCLIP: Decoding CLIP representations for deepfake localization
- 利用预训练自监督模型的特征+卷积解码器实现局部篡改定位
- 在扩散模型生成图像上实现定位,准确率优于现有方法
- 适合研究深度伪造检测、图像真实性验证的学者与工程师
生成模型可创建全新图像,也能以人眼无法察觉的方式局部修改真实图像。本文针对自动检测此类局部篡改的挑战提出DeCLIP,首次尝试利用大型自监督模型(如CLIP)的特征来检测局部篡改。实验表明,结合合理的卷积解码器,预训练自监督特征能有效实现定位并提升模型对不同生成器的泛化能力。与以往工作不同,本方法可成功处理潜空间扩散模型生成的图像——这类图像受生成器指纹影响,全局变化但局部语义仍保留。我们发现此类数据融合局部语义与全局指纹,比其他生成方式具有更稳定的泛化性能。
原文摘要 · Abstract (English)
Generative models can create entirely new images, but they can also partially modify real images in ways that are undetectable to the human eye. In this paper, we address the challenge of automatically detecting such local manipulations. One of the most pressing problems in deepfake detection remains the ability of models to generalize to different classes of generators. In the case of fully manipulated images, representations extracted from large self-supervised models (such as CLIP) provide a promising direction towards more robust detectors. Here, we introduce DeCLIP, a first attempt to leverage such large pretrained features for detecting local manipulations. We show that, when combined with a reasonably large convolutional decoder, pretrained self-supervised representations are able to perform localization and improve generalization capabilities over existing methods. Unlike previous work, our approach is able to perform localization on the challenging case of latent diffusion models, where the entire image is affected by the fingerprint of the generator. Moreover, we observe that this type of data, which combines local semantic information with a global fingerprint, provides more stable generalization than other categories of generative methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。