{"id":"https://openalex.org/W4318954125","doi":"https://doi.org/10.1109/tdsc.2023.3241604","title":"Making DeepFakes More Spurious: Evading Deep Face Forgery Detection via Trace Removal Attack","display_name":"Making DeepFakes More Spurious: Evading Deep Face Forgery Detection via Trace Removal Attack","publication_year":2023,"publication_date":"2023-02-02","ids":{"openalex":"https://openalex.org/W4318954125","doi":"https://doi.org/10.1109/tdsc.2023.3241604"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3241604","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3241604","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100705183","display_name":"Chi Liu","orcid":"https://orcid.org/0000-0002-6428-5514"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chi Liu","raw_affiliation_strings":["Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6428-5514","affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115076542","display_name":"Huajie Chen","orcid":"https://orcid.org/0009-0009-8489-9386"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Huajie Chen","raw_affiliation_strings":["Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036801346","display_name":"Tianqing Zhu","orcid":"https://orcid.org/0000-0003-3411-7947"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tianqing Zhu","raw_affiliation_strings":["Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3411-7947","affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy and the School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044019139","display_name":"Jun Zhang","orcid":"https://orcid.org/0000-0002-2189-7801"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jun Zhang","raw_affiliation_strings":["Cybersecurity Lab, Swinburne University of Technology, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2189-7801","affiliations":[{"raw_affiliation_string":"Cybersecurity Lab, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051406984","display_name":"Wanlei Zhou","orcid":"https://orcid.org/0000-0002-1680-2521"},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Wanlei Zhou","raw_affiliation_strings":["Institute of Data Science, City University of Macau, Macao SAR, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Data Science, City University of Macau, Macao SAR, China","institution_ids":["https://openalex.org/I6469544"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.3615,"has_fulltext":false,"cited_by_count":56,"citation_normalized_percentile":{"value":0.97143926,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"20","issue":"6","first_page":"5182","last_page":"5196"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9873999953269958,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9873999953269958,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9229999780654907,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.8613566756248474},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8497010469436646},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.7271807789802551},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.6401377320289612},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5683467984199524},{"id":"https://openalex.org/keywords/discriminator","display_name":"Discriminator","score":0.5625670552253723},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5441747903823853},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.542772650718689},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47685372829437256},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.44651806354522705},{"id":"https://openalex.org/keywords/spurious-relationship","display_name":"Spurious relationship","score":0.4321778416633606},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.41972625255584717},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4179919362068176},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38637855648994446},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36446183919906616},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3246729373931885},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.09125813841819763},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.0842912495136261}],"concepts":[{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.8613566756248474},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8497010469436646},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.7271807789802551},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.6401377320289612},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5683467984199524},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.5625670552253723},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5441747903823853},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.542772650718689},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47685372829437256},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.44651806354522705},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.4321778416633606},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.41972625255584717},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4179919362068176},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38637855648994446},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36446183919906616},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3246729373931885},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.09125813841819763},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0842912495136261},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3241604","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3241604","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.550000011920929},{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":65,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1901129140","https://openalex.org/W1945616565","https://openalex.org/W2009130368","https://openalex.org/W2187089797","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2523246573","https://openalex.org/W2531409750","https://openalex.org/W2888519208","https://openalex.org/W2904573504","https://openalex.org/W2907295878","https://openalex.org/W2913399670","https://openalex.org/W2939645724","https://openalex.org/W2950689937","https://openalex.org/W2962738629","https://openalex.org/W2962770929","https://openalex.org/W2962858109","https://openalex.org/W2963542245","https://openalex.org/W2963767194","https://openalex.org/W2963857521","https://openalex.org/W2982058372","https://openalex.org/W2989851933","https://openalex.org/W2991318208","https://openalex.org/W3012472557","https://openalex.org/W3034196597","https://openalex.org/W3034577585","https://openalex.org/W3034795015","https://openalex.org/W3034864980","https://openalex.org/W3036426855","https://openalex.org/W3038930935","https://openalex.org/W3040168631","https://openalex.org/W3087125464","https://openalex.org/W3088982179","https://openalex.org/W3091254548","https://openalex.org/W3094728142","https://openalex.org/W3096651815","https://openalex.org/W3108281670","https://openalex.org/W3118479706","https://openalex.org/W3136555065","https://openalex.org/W3143336910","https://openalex.org/W3158353280","https://openalex.org/W3166466426","https://openalex.org/W3169220064","https://openalex.org/W3173581984","https://openalex.org/W3173775919","https://openalex.org/W3174656926","https://openalex.org/W3176241004","https://openalex.org/W3185067909","https://openalex.org/W3195059668","https://openalex.org/W3195548358","https://openalex.org/W3204217431","https://openalex.org/W3213519740","https://openalex.org/W4293846201","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6727249380","https://openalex.org/W6739868092","https://openalex.org/W6745560452","https://openalex.org/W6756046522","https://openalex.org/W6757599822","https://openalex.org/W6769571810","https://openalex.org/W6775642233","https://openalex.org/W6783555181","https://openalex.org/W6796486215"],"related_works":["https://openalex.org/W4293202849","https://openalex.org/W1980965563","https://openalex.org/W1489300767","https://openalex.org/W4380714744","https://openalex.org/W2387995142","https://openalex.org/W3113091479","https://openalex.org/W4319453655","https://openalex.org/W941090075","https://openalex.org/W2162899405","https://openalex.org/W2995777218"],"abstract_inverted_index":{"DeepFakes":[0,104],"are":[1,168,190],"raising":[2],"significant":[3],"social":[4],"concerns.":[5],"Although":[6],"various":[7,9,178],"Despite":[8],"DeepFake":[10,34,99,123,224],"detectors":[11,72,189,225],"having":[12],"been":[13],"developed":[14],"as":[15,28],"countermeasures,":[16],"their":[17],"vulnerability":[18],"under":[19],"attacks":[20,38],"remains":[21],"further":[22],"explorations.":[23],"Recently,":[24],"several":[25],"attacks,":[26,30],"such":[27],"adversarial":[29,139],"have":[31],"successfully":[32],"fooled":[33],"detectors.":[35,116],"However,":[36],"existing":[37],"suffer":[39],"from":[40,96],"detector-specific":[41],"designs,":[42],"requiring":[43],"detector-side":[44],"knowledge,":[45],"leading":[46],"to":[47,102,111,162,172,176],"poor":[48],"transferability.":[49],"Moreover,":[50],"they":[51],"only":[52,228],"consider":[53],"simplified":[54],"security":[55,185],"scenarios;":[56],"but":[57],"less":[58],"is":[59,151,155],"known":[60],"about":[61],"the":[62,69,78,97,174,188,198,210,218],"attacking":[63],"performance":[64],"in":[65,170,232],"complex":[66],"scenarios":[67,186],"where":[68,187],"capability":[70],"of":[71,195,221],"or":[73,114],"attackers":[74,199],"varies.":[75],"To":[76],"fill":[77],"gap,":[79],"we":[80,118],"propose":[81],"a":[82,229],"novel,":[83],"detector-agnostic":[84],"trace":[85,124,141,160,212],"removal":[86,142,213],"attack.":[87],"The":[88,205],"attack":[89,214],"removes":[90],"all":[91],"possible":[92],"counterfeiting":[93],"traces":[94,179],"arising":[95],"original":[98],"manufacture":[100],"procedure":[101],"make":[103],"essentially":[105],"more":[106],"\"realistic\"":[107],"and":[108,134,148,197],"thus":[109],"able":[110],"defeat":[112],"arbitrary":[113],"unknown":[115],"Concretely,":[117],"first":[119],"perform":[120],"an":[121,138],"in-depth":[122],"discovery,":[125],"identifying":[126],"three":[127],"intrinsic":[128],"traces:":[129],"spatial":[130],"anomalies,":[131],"spectral":[132],"disparities,":[133],"noise":[135],"fingerprints.":[136],"Then":[137],"learning-based":[140],"network":[143],"(TR-Net)":[144],"involving":[145],"one":[146,158],"generator":[147,175],"multiple":[149],"discriminators":[150,167],"proposed.":[152],"Each":[153],"discriminator":[154],"responsible":[156],"for":[157],"individual":[159],"representation":[161],"avoid":[163],"inner-trace":[164],"interference.":[165],"All":[166],"optimized":[169],"parallel":[171],"enforce":[173],"remove":[177],"simultaneously.":[180],"We":[181],"additionally":[182],"craft":[183],"heterogeneous":[184],"embedded":[191],"with":[192],"different":[193],"levels":[194],"defense":[196],"own":[200],"varying":[201],"background":[202],"data":[203],"knowledge.":[204],"experimental":[206],"results":[207],"show":[208],"that":[209],"proposed":[211],"can":[215],"significantly":[216],"compromise":[217],"detection":[219],"accuracy":[220],"six":[222],"state-of-the-art":[223],"while":[226],"causing":[227],"negligible":[230],"degradation":[231],"visual":[233],"quality.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":22},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}