Deepfake Sentry: Harnessing Ensemble Intelligence for Resilient Detection and Generalisation

Authors: Liviu-Daniel Ştefan, Dan-Cristian Stanciu, Mihai Dogariu, Mihai Gabriel Constantin, Andrei Cosmin Jitaru, Bogdan Ionescu

Published: 2024-03-29 19:09:08+00:00

AI Summary

This paper proposes a novel deepfake detection method that enhances robustness and generalisation by employing an ensemble of autoencoders to introduce artificial fingerprints into training data. This data augmentation approach improves the detector's resilience against various perturbations, including noise, compression, and adversarial attacks.

Abstract

Recent advancements in Generative Adversarial Networks (GANs) have enabled photorealistic image generation with high quality. However, the malicious use of such generated media has raised concerns regarding visual misinformation. Although deepfake detection research has demonstrated high accuracy, it is vulnerable to advances in generation techniques and adversarial iterations on detection countermeasures. To address this, we propose a proactive and sustainable deepfake training augmentation solution that introduces artificial fingerprints into models. We achieve this by employing an ensemble learning approach that incorporates a pool of autoencoders that mimic the effect of the artefacts introduced by the deepfake generator models. Experiments on three datasets reveal that our proposed ensemble autoencoder-based data augmentation learning approach offers improvements in terms of generalisation, resistance against basic data perturbations such as noise, blurring, sharpness enhancement, and affine transforms, resilience to commonly used lossy compression algorithms such as JPEG, and enhanced resistance against adversarial attacks.


Key findings
The proposed ensemble autoencoder-based data augmentation significantly improved the deepfake detector's generalisation across datasets. The method showed increased resistance against common perturbations, lossy compression (JPEG), and adversarial attacks, leading to higher AUC scores compared to baseline and classical augmentation methods.
Approach
The authors use an ensemble of autoencoders to generate artificial fingerprints mimicking deepfake artifacts. These fingerprints are added to training data, augmenting it and improving a deepfake detector's robustness against various real-world distortions and attacks.
Datasets
FaceForensics++ (FF++), DeepFake Detection Challenge preview dataset (DFDC Preview), Celeb-DF
Model(s)
Xception, ResNet-50 (for adversarial attacks), convolutional autoencoder, U-Net (for fingerprint generation)
Author countries
Romania