用对齐数据集训练,让检测器专注识别扩散模型的生成痕迹。
Aligned Datasets Improve Detection of Latent Diffusion-Generated Images
- 用扩散模型自编码器重建真实图像,生成高度相似的假图
- 新方法避免复杂去噪,训练出更聚焦生成痕迹的检测器
- 适合想提升检测鲁棒性的安全与内容审核研究者
随着潜在扩散模型(LDMs)普及图像生成能力,虚假图像检测需求日益增长。理想的检测器应关注生成模型的特征指纹,而非图像语义、分辨率或文件格式等属性。现有检测方法多依赖数据驱动,通过训练模型区分真实与伪造图像,主要聚焦网络结构和训练策略。本文认为,除算法设计外,还需构建真实与伪造图像高度对齐的数据集以训练稳健检测器。针对LDM家族,提出一种简单方法:使用LDM自编码器重建真实图像,不进行去噪操作。由此生成的伪造图像在尺寸、长宽比、语义内容等方面与真实图像几乎完全一致,迫使检测器关注解码器产生的细微痕迹。实验证明,该对齐数据集可减少检测器对无关相关性的依赖,而现有主流方法易受此类干扰。此外,我们还基于非自然物体图像构建检测器,仍取得良好效果。本工作揭示了训练伪造图像检测器时的隐性问题,并提出一种低成本、高效的解决方案。
原文摘要 · Abstract (English)
As latent diffusion models (LDMs) democratize image generation capabilities, there is a growing need to detect fake images. A good detector should focus on the generative models fingerprints while ignoring image properties such as semantic content, resolution, file format, etc. Fake image detectors are usually built in a data driven way, where a model is trained to separate real from fake images. Existing works primarily investigate network architecture choices and training recipes. In this work, we argue that in addition to these algorithmic choices, we also require a well aligned dataset of real/fake images to train a robust detector. For the family of LDMs, we propose a very simple way to achieve this: we reconstruct all the real images using the LDMs autoencoder, without any denoising operation. We then train a model to separate these real images from their reconstructions. The fakes created this way are extremely similar to the real ones in almost every aspect (e.g., size, aspect ratio, semantic content), which forces the model to look for the LDM decoders artifacts. We empirically show that this way of creating aligned real/fake datasets, which also sidesteps the computationally expensive denoising process, helps in building a detector that focuses less on spurious correlations, something that a very popular existing method is susceptible to. Finally, to demonstrate just how effective the alignment in a dataset can be, we build a detector using images that are not natural objects, and present promising results. Overall, our work identifies the subtle but significant issues that arise when training a fake image detector and proposes a simple and inexpensive solution to address these problems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。