让AI生成图像检测器在压缩模糊等干扰下更稳定,只需加个简单训练策略。
Degradation-Consistent Paired Training for Robust AI-Generated Image Detection
- 用清晰图和退化图成对训练,强制特征和预测结果保持一致。
- 在9种生成器8种退化条件下,准确率平均提升9.1个百分点,压缩下最高升17.9%。
- 不加参数不增计算量,适合追求实用鲁棒性的检测系统开发者。
AI生成图像检测器在真实场景的图像退化(如JPEG压缩、高斯模糊、分辨率下采样)下性能显著下降。我们发现,当前先进方法(如B-Free)将退化鲁棒性视为数据增强的副产品,而非显式训练目标。本文提出退化一致性成对训练(DCPT),一种简单有效的方法:为每张训练图像构建清晰视图与退化视图,施加两项约束——特征一致性损失(最小化清晰与退化表示间的余弦距离)和预测一致性损失(基于对称KL散度对齐输出分布)。该方法零新增参数,零推理开销。在Synthbuster基准(9种生成器,8种退化条件)上的实验表明,相比无成对训练的基线,DCPT使退化条件下的平均准确率提升9.1个百分点,仅牺牲0.9%的原始准确率。在JPEG压缩下提升最为显著(+15.7%至+17.9%)。消融实验进一步显示,增加网络组件会导致有限训练数据下的过拟合,证实改进训练目标比架构增强更有效于提升退化鲁棒性。
原文摘要 · Abstract (English)
AI-generated image detectors suffer significant performance degradation under real-world image corruptions such as JPEG compression, Gaussian blur, and resolution downsampling. We observe that state-of-the-art methods, including B-Free, treat degradation robustness as a byproduct of data augmentation rather than an explicit training objective. In this work, we propose Degradation-Consistent Paired Training (DCPT), a simple yet effective training strategy that explicitly enforces robustness through paired consistency constraints. For each training image, we construct a clean view and a degraded view, then impose two constraints: a feature consistency loss that minimizes the cosine distance between clean and degraded representations, and a prediction consistency loss based on symmetric KL divergence that aligns output distributions across views. DCPT adds zero additional parameters and zero inference overhead. Experiments on the Synthbuster benchmark (9 generators, 8 degradation conditions) demonstrate that DCPT improves the degraded-condition average accuracy by 9.1 percentage points compared to an identical baseline without paired training, while sacrificing only 0.9% clean accuracy. The improvement is most pronounced under JPEG compression (+15.7% to +17.9%). Ablation further reveals that adding architectural components leads to overfitting on limited training data, confirming that training objective improvement is more effective than architectural augmentation for degradation robustness.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。