{"id":"https://openalex.org/W4394862726","doi":"https://doi.org/10.1109/wacvw60836.2024.00115","title":"On the Vulnerability of Deepfake Detectors to Attacks Generated by Denoising Diffusion Models","display_name":"On the Vulnerability of Deepfake Detectors to Attacks Generated by Denoising Diffusion Models","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4394862726","doi":"https://doi.org/10.1109/wacvw60836.2024.00115"},"language":"en","primary_location":{"id":"doi:10.1109/wacvw60836.2024.00115","doi":"https://doi.org/10.1109/wacvw60836.2024.00115","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wacvw60836.2024.00115","pdf_url":null,"source":{"id":"https://openalex.org/S7407086155","display_name":"IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2307.05397","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077987074","display_name":"Marija Ivanovska","orcid":"https://orcid.org/0000-0002-9061-3884","observed_orcids":["https://orcid.org/0000-0002-9061-3884"]},"institutions":[{"id":"https://openalex.org/I153976015","display_name":"University of Ljubljana","ror":"https://ror.org/05njb9z20","country_code":"SI","type":"education","lineage":["https://openalex.org/I153976015"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Marija Ivanovska","raw_affiliation_strings":["University of Ljubljana,Faculty of electrical engineering,Ljubljana,Slovenia","Faculty of electrical engineering, University of Ljubljana, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Ljubljana,Faculty of electrical engineering,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I153976015"]},{"raw_affiliation_string":"Faculty of electrical engineering, University of Ljubljana, Ljubljana, Slovenia","institution_ids":["https://openalex.org/I153976015"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038322250","display_name":"Vitomir \u0160truc","orcid":"https://orcid.org/0000-0002-3385-5780","observed_orcids":["https://orcid.org/0000-0002-3385-5780"]},"institutions":[{"id":"https://openalex.org/I153976015","display_name":"University of Ljubljana","ror":"https://ror.org/05njb9z20","country_code":"SI","type":"education","lineage":["https://openalex.org/I153976015"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Vitomir \u0160truc","raw_affiliation_strings":["University of Ljubljana,Faculty of electrical engineering,Ljubljana,Slovenia","Faculty of electrical engineering, University of Ljubljana, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Ljubljana,Faculty of electrical engineering,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I153976015"]},{"raw_affiliation_string":"Faculty of electrical engineering, University of Ljubljana, Ljubljana, Slovenia","institution_ids":["https://openalex.org/I153976015"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I153976015"],"apc_list":null,"apc_paid":null,"fwci":2.7511,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.93419142,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1051","last_page":"1060"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deepfake-detection","display_name":"deepfake detection","score":0.9909999966621399},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.7250000238418579},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.953000009059906},{"id":"https://openalex.org/keywords/denoising-diffusion-probabilistic-models","display_name":"denoising diffusion probabilistic models","score":0.9950000047683716},{"id":"https://openalex.org/keywords/face-restoration","display_name":"face restoration","score":0.5600000023841858},{"id":"https://openalex.org/keywords/face-swapping","display_name":"face swapping","score":0.49000000953674316},{"id":"https://openalex.org/keywords/face-reenactment","display_name":"face reenactment","score":0.9300000071525574},{"id":"https://openalex.org/keywords/faceforensics","display_name":"FaceForensics++","score":0.8939999938011169},{"id":"https://openalex.org/keywords/detector-robustness","display_name":"detector robustness","score":0.5879999995231628},{"id":"https://openalex.org/keywords/generative-adversarial-training","display_name":"generative adversarial training","score":0.5950000286102295}],"concepts":[{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.8128001689910889},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7538085579872131},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.656839907169342},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6430375576019287},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6140274405479431},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5376630425453186},{"id":"https://openalex.org/C2983327147","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Image denoising","level":3,"score":0.5367499589920044},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5171722769737244},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5039746165275574},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.4946407973766327},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.46747490763664246},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3672153353691101},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3293755352497101},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1707344353199005},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11805510520935059},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.10686320066452026},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/wacvw60836.2024.00115","doi":"https://doi.org/10.1109/wacvw60836.2024.00115","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wacvw60836.2024.00115","pdf_url":null,"source":{"id":"https://openalex.org/S7407086155","display_name":"IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2307.05397","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2307.05397","pdf_url":"https://arxiv.org/pdf/2307.05397","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2307.05397","doi":"https://doi.org/10.48550/arxiv.2307.05397","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2307.05397","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2307.05397","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2307.05397","pdf_url":"https://arxiv.org/pdf/2307.05397","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1933122771","display_name":null,"funder_award_id":"P2-0250(B)","funder_id":"https://openalex.org/F4320308445","funder_display_name":"American Roentgen Ray Society"}],"funders":[{"id":"https://openalex.org/F4320308445","display_name":"American Roentgen Ray Society","ror":"https://ror.org/05w7kkt66"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394862726.pdf","grobid_xml":"https://content.openalex.org/works/W4394862726.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W569478347","https://openalex.org/W2531409750","https://openalex.org/W2766527293","https://openalex.org/W2769905613","https://openalex.org/W2891145043","https://openalex.org/W2898877033","https://openalex.org/W2912336782","https://openalex.org/W2963720850","https://openalex.org/W2978329087","https://openalex.org/W3008133425","https://openalex.org/W3013436979","https://openalex.org/W3015087080","https://openalex.org/W3034196597","https://openalex.org/W3083246145","https://openalex.org/W3094728142","https://openalex.org/W3096651815","https://openalex.org/W3101239181","https://openalex.org/W3162926177","https://openalex.org/W3174656926","https://openalex.org/W3174814557","https://openalex.org/W3176241004","https://openalex.org/W4312388562","https://openalex.org/W4312402191","https://openalex.org/W4313127140","https://openalex.org/W4318954125","https://openalex.org/W4360884927","https://openalex.org/W4381547719","https://openalex.org/W4382053123","https://openalex.org/W4382053190","https://openalex.org/W4386075501","https://openalex.org/W4392402304","https://openalex.org/W4393259614","https://openalex.org/W4394597549","https://openalex.org/W4400905857","https://openalex.org/W4407837644"],"related_works":["https://openalex.org/W4404943058","https://openalex.org/W4412055335","https://openalex.org/W7154696115","https://openalex.org/W4409917786","https://openalex.org/W4401164115","https://openalex.org/W4404096726","https://openalex.org/W7136152957","https://openalex.org/W4407597463","https://openalex.org/W4402917139","https://openalex.org/W7155401173"],"abstract_inverted_index":{"The":[0],"detection":[1],"of":[2,14,36,48,68,88,114,122],"malicious":[3],"deepfakes":[4,90,149],"is":[5],"a":[6,62,92,105,115],"constantly":[7],"evolving":[8],"problem":[9],"that":[10,102,143],"requires":[11],"continuous":[12],"monitoring":[13],"de-tectors":[15],"to":[16,40],"ensure":[17],"they":[18],"can":[19,117],"detect":[20],"image":[21,129],"manipulations":[22],"gen-erated":[23],"by":[24,44],"the":[25,34,45,111,120],"latest":[26],"emerging":[27],"models.":[28],"In":[29],"this":[30],"paper,":[31],"we":[32],"in-vestigate":[33],"vulnerability":[35],"single-image":[37],"deepfake":[38,65,116],"detec-tors":[39],"black-box":[41],"attacks":[42],"created":[43],"newest":[46],"generation":[47],"generative":[49],"methods,":[50],"namely":[51],"Denoising":[52],"Diffusion":[53],"Models":[54],"(DDMs).":[55],"Our":[56,99],"experiments":[57],"are":[58,83],"run":[59],"on":[60,146],"FaceForensics++,":[61],"widely":[63],"used":[64],"benchmark":[66],"consisting":[67],"manipulated":[69],"images":[70],"generated":[71],"with":[72,91,155],"various":[73],"techniques":[74],"for":[75,96],"face":[76,80,97],"iden-tity":[77],"swapping":[78],"and":[79],"reenactment.":[81],"Attacks":[82],"crafted":[84],"through":[85],"guided":[86],"reconstruction":[87,112],"existing":[89],"proposed":[93],"DDM":[94],"approach":[95],"restoration.":[98],"findings":[100],"indicate":[101],"employing":[103],"just":[104],"single":[106],"denoising":[107],"diffusion":[108],"step":[109],"in":[110],"process":[113],"signif-icantly":[118],"reduce":[119],"likelihood":[121],"detection,":[123],"all":[124],"without":[125],"intro-ducing":[126],"any":[127],"perceptible":[128],"modifications.":[130],"While":[131],"training":[132],"detectors":[133],"using":[134],"attack":[135],"examples":[136],"demonstrated":[137],"some":[138],"effectiveness,":[139],"it":[140],"was":[141],"observed":[142],"discriminators":[144],"trained":[145],"fully":[147],"diffusion-based":[148],"exhibited":[150],"limited":[151],"generalizability":[152],"when":[153],"presented":[154],"our":[156],"attacks.":[157]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-04-17T00:00:00"}