用多模态引导让伪造图像骗过主流检测器
Universal Anti-forensics Attack against Image Forgery Detection via Multi-modal Guidance
- 利用视觉-语言模型特征空间,误导检测器误判伪造图
- 在全局合成和局部编辑任务上使顶尖检测器性能大幅下降
- 无需知道检测器结构,适合研究安全漏洞与防御
AI生成内容(AIGC)技术的快速发展给真实性评估带来严峻挑战。然而现有评测体系普遍忽略反取证攻击,难以确保先进AIGC检测器在真实场景中的全面鲁棒性。为此,我们提出ForgeryEraser框架,可在不访问目标检测器的情况下实施通用反取证攻击。我们发现,由于下游检测器普遍依赖公开的视觉-语言模型(如CLIP)作为共享骨干网络,从而继承其特征空间,存在系统性漏洞。不同于传统的基于logit的优化,我们设计多模态引导损失函数,将伪造图像嵌入在VLM特征空间中,向文本引导的真图锚点靠拢,同时远离伪造锚点,以消除伪造痕迹。大量实验证明,ForgeryEraser在全局合成与局部编辑基准上均导致先进AIGC检测器性能显著下降。此外,该方法还诱导可解释的检测模型为伪造图像生成与真实图像一致的解释。代码将公开。
原文摘要 · Abstract (English)
The rapid advancement of AI-Generated Content (AIGC) technologies poses significant challenges for authenticity assessment. However, existing evaluation protocols largely overlook anti-forensics attack, failing to ensure the comprehensive robustness of state-of-the-art AIGC detectors in real-world applications. To bridge this gap, we propose ForgeryEraser, a framework designed to execute universal anti-forensics attack without access to the target AIGC detectors. We reveal an adversarial vulnerability stemming from the systemic reliance on Vision-Language Models (VLMs) as shared backbones (e.g., CLIP), where downstream AIGC detectors inherit the feature space of these publicly accessible models. Instead of traditional logit-based optimization, we design a multi-modal guidance loss to drive forged image embeddings within the VLM feature space toward text-derived authentic anchors to erase forgery traces, while repelling them from forgery anchors. Extensive experiments demonstrate that ForgeryEraser causes substantial performance degradation to advanced AIGC detectors on both global synthesis and local editing benchmarks. Moreover, ForgeryEraser induces explainable forensic models to generate explanations consistent with authentic images for forged images. Our code will be made publicly available.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。