用对抗编辑训练可解释的AI图像检测器,让模型越辨越准。
SPARED: Reasoning-Based AI-Generated Image Detection via Adversarially Edited Data

- 通过对抗强化学习让编辑模型生成难辨假图,推理模型据此给出真实理由。
- 检测性能在三个外部测试集上持续提升,且解释质量自动变好。
- 适合需要可信判别依据的AI内容审核场景。
AI生成图像检测仅完成一半任务:部署的检测器还需提供合理解释。现有方法因训练数据存在三大缺陷:真实与伪造图像来源不同导致溯源捷径、监督解释语料教出模板化理由、静态伪造数据集使决策边界停滞不前。本文提出 extit{SPARED},一种对抗强化学习框架,让两个异构模型相互博弈:扩散编辑模型将真实照片改造成能骗过当前检测器的假图,而推理型多模态大模型则基于自由文本推理揭露这些伪造。两者奖励均设计为防捷径:攻击者仅在编辑成功时得分,防御者仅在判断正确时获益。每轮迭代中,攻击者生成针对当前检测器盲点的新训练样本,迫使检测器持续泛化而非记忆固定特征。尽管解释本身未被直接奖励,其质量随准确率提升而自然增强。在三个外部基准上,该框架训练的检测器性能持续提升。
原文摘要 · Abstract (English)
Detecting AI-generated images is only half the task: a deployed detector must also justify its verdict, yet existing detectors inherit three failure modes from their training data: real and fake images collected from different sources invite provenance shortcuts, supervised explanation corpora teach templated rationales, and a static forgery corpus leaves the decision boundary standing still while generators keep moving. We introduce \methodname{}, an adversarial reinforcement learning framework that pits two heterogeneous models against each other. A diffusion image editor learns to edit real photographs into fake counterparts of those same photographs that fool the current detector, while a reasoning MLLM learns to expose them with a verdict grounded in free-form reasoning. Both rewards are shortcut-proof by design: the attacker is credited only when its edit is faithfully executed, and the defender only when its verdict is correct. As the two models alternate, each round's attacker regenerates a harder training pool aimed at the current detector's blind spots, so the detector must generalize rather than memorize any fixed artifact distribution. Although the explanation is never rewarded, its quality rises round over round as a side effect of accuracy-only training. A detector trained within this loop improves monotonically across rounds on each of three external benchmarks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。