arXiv:2605.07074cs.CV2026-05

提出新方法分离图像伪造痕迹,让检测模型更通用。

Decoupling Semantics and Fingerprints: A Universal Representation for AI-Generated Image Detection

论文配图:Decoupling Semantics and Fingerprints: A Universal Representation for AI-Generated Image Detection
图 1 · 摘自论文原文
  • 通过频域正交性分解,将伪造痕迹、生成器特征和语义内容分开。
  • 在未见过的生成模型上(如Stable Diffusion 3)准确率领先。
  • 适合需要跨模型检测AI生成图像的研究者和安全团队。

在未见过的生成架构下检测AI生成图像仍具挑战性,因现有模型常过拟合于生成器特有指纹和语义内容,而非学习通用伪造痕迹。我们归因于特征纠缠:检测器将这些因素视为单一纠缠表示,使通用伪造痕迹与生成器指纹及语义内容难以区分。关键的是,谱分析显示这种纠缠可避免:不同生成器的指纹(如GAN条纹与扩散模型斑点)占据不重叠的频率子空间,以独立叠加共存。基于此物理正交性,我们提出正交分解与净化网络(ODP-Net),结构化解耦三类因素:(1) 实例感知正交分解,将特征投影至互斥子空间;(2) 基于扰动的净化,通过跨样本特征注入强制语义不变性;(3) 流形对齐以弥合领域差异。显式解耦通用伪造痕迹后,ODP-Net在未见架构(如Stable Diffusion 3)上实现当前最优性能,验证结构解耦是泛化的关键。

原文摘要 · Abstract (English)

Detecting AI-generated images across unseen architectures remains challenging, as existing models often overfit to generator-specific fingerprints and semantic content rather than learning universal forgery traces. We attribute this failure to feature entanglement: detectors learn these factors as a single entangled representation, where universal forgery traces are inextricably confounded with both generator-specific fingerprints and semantic content. Crucially, our spectral analysis reveals that this entanglement is avoidable: distinct generator-specific fingerprints (e.g., GAN stripes vs. Diffusion Model spots) occupy disjoint frequency subspaces and coexist as independent superpositions. Leveraging this physical orthogonality, we propose the Orthogonal Decomposition and Purification Network (ODP-Net) to structurally disentangle these factors. Specifically, ODP-Net employs (1) Instance-aware Orthogonal Decomposition to project features into mutually exclusive subspaces: universal forgery traces, generator-specific fingerprints, and semantic content; (2) Perturbation-based Purification to enforce semantic invariance via cross-sample feature injection; and (3) Manifold Alignment to bridge domain gaps. By explicitly decoupling universal forgery traces from generator-specific fingerprints and semantic content, ODP-Net achieves state-of-the-art performance on unseen architectures (e.g., Stable Diffusion 3), validating that structural disentanglement is key to generalization.

图像检测生成模型正交分解通用性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。