用少量参数提升视觉模型对新型伪造图像的识别能力
AdaptPrompt: Parameter-Efficient Adaptation of VLMs for Generalizable Deepfake Detection
- 设计新数据集Diff-Gen,平衡真实与扩散生成图像
- 仅训练0.1%参数,实现98.6%平均精度,超越全微调
- 适用于新生成工具检测,适合资源有限的研究者
AI生成图像检测器常继承训练数据的偏差:针对GAN图像训练的模型将GAN特有痕迹视为‘假’的标志,因而无法识别扩散模型和商业工具生成的内容。本文从两方面解决泛化问题。首先提出Diff-Gen数据集,包含10万张扩散生成图像和等量真实图像,真实图像按合成数据类别分布选取;谱分析显示其具有宽频非周期性高频能量,基于此训练的检测器对未见生成器的迁移性能显著提升。其次提出AdaptPrompt,一种参数高效的CLIP适配方法,结合可学习视觉适配器与文本提示,仅训练约0.1%模型参数。还发现截断视觉编码器最后一层变压器块能持续提升检测效果,表明该层语义对齐机制抑制了取证依赖的低层痕迹。在覆盖GAN、扩散模型及Midjourney、DALL-E 3等25个测试集的基准上,AdaptPrompt在Diff-Gen上训练达到98.60%平均精度和92.72%准确率,性能媲美全微调模型,但训练成本仅为零头。框架还可支持22种生成器的数据高效训练与闭集源归属任务。
原文摘要 · Abstract (English)
Detectors of AI-generated images tend to inherit the biases of the data they are trained on: models fitted to GAN imagery learn to treat GAN-specific artifacts as the very definition of "fake" and consequently miss images produced by diffusion models and commercial generation tools. We study this generalization problem from two directions. First, we introduce Diff-Gen, a balanced corpus consisting of 100k diffusion-generated samples and an equally sized set of real images, with the real subset selected to mirror the class distribution of the synthetic data. A spectral analysis shows that, unlike GAN data, Diff-Gen exhibits broad, non-periodic high-frequency energy, and we find that detectors trained on it transfer substantially better to unseen generator families. Second, we propose AdaptPrompt, a parameter-efficient adaptation of CLIP that combines a visual adapter with learnable text prompts and trains roughly 0.1% of the model's parameters. We further observe that truncating the last transformer block of the vision encoder consistently improves detection, suggesting that the final semantic-alignment layers of CLIP suppress the low-level traces on which forensic decisions rely. Across a benchmark of 25 test sets covering GANs, diffusion models, and commercial tools such as Midjourney and DALL-E 3, AdaptPrompt trained on Diff-Gen attains the best mean average precision (98.60%) and accuracy (92.72%), while matching fully fine-tuned baselines at a fraction of their training cost. We also show that the same framework supports data-efficient training and closed-set source attribution across 22 generators.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。