Abstract:In recent few years, DeepFakes are posing serve threats and concerns to both individuals and celebrities, as realistic DeepFakes facilitate the spread of disinformation. Model attribution techniques aim at attributing the adopted forgery models of DeepFakes for provenance purposes and providing explainable results to DeepFake forensics. However, the existing model attribution techniques rely on the trace left in the DeepFake creation, which can become futile if such traces were disrupted. Motivated by our observation that certain traces served for model attribution appeared in both the high-frequency and low-frequency domains and play a divergent role in model attribution. In this work, for the first time, we propose a novel training-free evasion attack, TraceEvader, in the most practical non-box setting. Specifically, TraceEvader injects a universal imitated traces learned from wild DeepFakes into the high-frequency component and introduces adversarial blur into the domain of the low-frequency component, where the added distortion confuses the extraction of certain traces for model attribution. The comprehensive evaluation on 4 state-of-the-art (SOTA) model attribution techniques and fake images generated by 8 generative models including generative adversarial networks (GANs) and diffusion models (DMs) demonstrates the effectiveness of our method. Overall, our TraceEvader achieves the highest average attack success rate of 79% and is robust against image transformations and dedicated denoising techniques as well where the average attack success rate is still around 75%. Our TraceEvader confirms the limitations of current model attribution techniques and calls the attention of DeepFake researchers and practitioners for more robust-purpose model attribution techniques.

Deepfake Network Architecture Attribution

Generalized Deepfake Attribution

Learning to Disentangle GAN Fingerprint for Fake Image Attribution

Attributing Fake Images to GANs: Learning and Analyzing GAN Fingerprints

An Efficient Active Learning based Method for Deepfake Vidoes Model Attribution

Model Attribution of Face-swap Deepfake Videos

FAKEPCD: Fake Point Cloud Detection via Source Attribution

Auguring Fake Face Images Using Dual Input Convolution Neural Network

TraceEvader: Making DeepFakes More Untraceable Via Evading the Forgery Model Attribution

Deeptag: Robust image tagging for deepfake provenance

Detection and Attribution of Models Trained on Generated Data

Exploring Adversarial Fake Images on Face Manifold

FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Tracking

Detecting fake images by identifying potential texture difference

SFIA: Toward a Generalized Semantic‐Agnostic Method for Fake Image Attribution

Towards Discovery and Attribution of Open-world GAN Generated Images

Searching for the Fakes: Efficient Neural Architecture Search for General Face Forgery Detection

Common Forgery Artifact Driven Deepfake Face Detection

Regeneration Based Training-free Attribution of Fake Images Generated by Text-to-Image Generative Models

Open Set Synthetic Image Source Attribution

Anti-Forensics for Face Swapping Videos via Adversarial Training