Active Fake: DeepFake Camouflage

Pu Sun,Honggang Qi,Yuezun Li

2024-09-05

Abstract:DeepFake technology has gained significant attention due to its ability to manipulate facial attributes with high realism, raising serious societal concerns. Face-Swap DeepFake is the most harmful among these techniques, which fabricates behaviors by swapping original faces with synthesized ones. Existing forensic methods, primarily based on Deep Neural Networks (DNNs), effectively expose these manipulations and have become important authenticity indicators. However, these methods mainly concentrate on capturing the blending inconsistency in DeepFake faces, raising a new security issue, termed Active Fake, emerges when individuals intentionally create blending inconsistency in their authentic videos to evade responsibility. This tactic is called DeepFake Camouflage. To achieve this, we introduce a new framework for creating DeepFake camouflage that generates blending inconsistencies while ensuring imperceptibility, effectiveness, and transferability. This framework, optimized via an adversarial learning strategy, crafts imperceptible yet effective inconsistencies to mislead forensic detectors. Extensive experiments demonstrate the effectiveness and robustness of our method, highlighting the need for further research in active fake detection.

Computer Vision and Pattern Recognition

What problem does this paper attempt to address?

The problem that this paper attempts to solve is that the existing DeepFake detection methods may be maliciously exploited, especially through a new security threat - Active Fake, namely **DeepFake Camouflage**. Specifically, since the current DeepFake detection methods mainly rely on identifying the fusion inconsistency between the facial composite area and the surrounding real background to determine whether an image has been tampered with, attackers can deliberately create this fusion inconsistency in their own real videos to evade responsibility. For example, when legislative bodies investigate these videos and pursue liability, attackers can claim that these videos are forged by DeepFake technology to avoid legal liability.

The paper proposes a new framework - **Camouflage GAN (CamGAN)** for generating such camouflaged DeepFake videos. This framework can introduce fusion inconsistency on real - face images through simple image operations (such as Gaussian noise and Gaussian filtering), while meeting three key criteria: 1) imperceptible to human observers; 2) able to effectively deceive DeepFake detectors; 3) having good transferability among various mainstream DeepFake detectors.

In this way, the paper aims to explore how to effectively interfere with the decision - making process of DeepFake detectors without compromising image quality, thereby revealing a new challenge in the field of DeepFake detection and providing directions for future Active Fake detection research.