Impact of Benign Modifications on Discriminative Performance of Deepfake Detectors

Authors: Yuhang Lu, Evgeniy Upenik, Touradj Ebrahimi

Published: 2021-11-14 22:50:39+00:00

AI Summary

This paper proposes a rigorous framework to assess the impact of benign processing operations on the performance of deepfake detectors in realistic scenarios. It systematically quantifies how operations like compression, denoising, resizing, and enhancement affect a state-of-the-art deepfake detection method. The work highlights the sensitivity of detectors to such common modifications, providing insights for developing more robust detection systems.

Abstract

Deepfakes are becoming increasingly popular in both good faith applications such as in entertainment and maliciously intended manipulations such as in image and video forgery. Primarily motivated by the latter, a large number of deepfake detectors have been proposed recently in order to identify such content. While the performance of such detectors still need further improvements, they are often assessed in simple if not trivial scenarios. In particular, the impact of benign processing operations such as transcoding, denoising, resizing and enhancement are not sufficiently studied. This paper proposes a more rigorous and systematic framework to assess the performance of deepfake detectors in more realistic situations. It quantitatively measures how and to which extent each benign processing approach impacts a state-of-the-art deepfake detection method. By illustrating it in a popular deepfake detector, our benchmark proposes a framework to assess robustness of detectors and provides valuable insights to design more efficient deepfake detectors.


Key findings
Benign modifications significantly degrade deepfake detection performance, with additive Gaussian noise having the most severe negative impact, reducing accuracy to near random guessing. Most operations, including compression, blurring, and enhancement, lead to a noticeable decline in detector robustness. However, linear interpolation resizing unexpectedly improved detection accuracy, suggesting complex interactions between preprocessing and detection.
Approach
The authors apply a comprehensive set of benign post-processing operations (e.g., video compression, image transcoding, blurring, noise addition, gamma correction, resizing) to deepfake videos from a widely used dataset. They then evaluate the performance of a chosen state-of-the-art deepfake detector on these modified videos to quantify the impact of each operation.
Datasets
FaceForensics++
Model(s)
Capsule-Forensics (which uses VGG19 as a feature extractor)
Author countries
Switzerland