{"id":"https://openalex.org/W4415540856","doi":"https://doi.org/10.1145/3746027.3761983","title":"Adversarial Attacks on Deepfake Detectors: A Challenge in the Era of AI-Generated Media (AADD-2025)","display_name":"Adversarial Attacks on Deepfake Detectors: A Challenge in the Era of AI-Generated Media (AADD-2025)","publication_year":2025,"publication_date":"2025-10-25","ids":{"openalex":"https://openalex.org/W4415540856","doi":"https://doi.org/10.1145/3746027.3761983"},"language":null,"primary_location":{"id":"doi:10.1145/3746027.3761983","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746027.3761983","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3746027.3761983","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042746008","display_name":"Sebastiano Battiato","orcid":"https://orcid.org/0000-0001-6127-2470"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Sebastiano Battiato","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6127-2470","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083466950","display_name":"Mirko Casu","orcid":"https://orcid.org/0000-0001-6975-2241"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mirko Casu","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6975-2241","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076442017","display_name":"Francesco Guarnera","orcid":"https://orcid.org/0000-0002-7703-3367"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Guarnera","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0000-0002-7703-3367","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060702304","display_name":"Luca Guarnera","orcid":"https://orcid.org/0000-0001-8315-351X"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luca Guarnera","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0000-0001-8315-351X","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045468852","display_name":"Giovanni Puglisi","orcid":"https://orcid.org/0000-0001-6222-9933"},"institutions":[{"id":"https://openalex.org/I172446870","display_name":"University of Cagliari","ror":"https://ror.org/003109y17","country_code":"IT","type":"education","lineage":["https://openalex.org/I172446870"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giovanni Puglisi","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Cagliari, Cagliari, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6222-9933","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Cagliari, Cagliari, Italy","institution_ids":["https://openalex.org/I172446870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093875947","display_name":"Orazio Pontorno","orcid":"https://orcid.org/0009-0009-0381-9971"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Orazio Pontorno","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0009-0009-0381-9971","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094246358","display_name":"Claudio Vittorio Ragaglia","orcid":"https://orcid.org/0009-0000-1598-5226"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Claudio Vittorio Ragaglia","raw_affiliation_strings":["Department of Mathematics and Computer Science, University of Catania, Catania, Italy"],"raw_orcid":"https://orcid.org/0009-0000-1598-5226","affiliations":[{"raw_affiliation_string":"Department of Mathematics and Computer Science, University of Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056705041","display_name":"Zahid Akhtar","orcid":"https://orcid.org/0000-0002-5026-5416"},"institutions":[{"id":"https://openalex.org/I90965887","display_name":"SUNY Polytechnic Institute","ror":"https://ror.org/000fxgx19","country_code":"US","type":"education","lineage":["https://openalex.org/I90965887"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zahid Akhtar","raw_affiliation_strings":["Department of Electrical and Computer Engineering, State University of New York Polytechnic Institute, Utica, New York, USA"],"raw_orcid":"https://orcid.org/0000-0002-5026-5416","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, State University of New York Polytechnic Institute, Utica, New York, USA","institution_ids":["https://openalex.org/I90965887"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8009,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.92326819,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"13714","last_page":"13719"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9157999753952026},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.5530999898910522},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.520799994468689},{"id":"https://openalex.org/keywords/weighting","display_name":"Weighting","score":0.4830999970436096},{"id":"https://openalex.org/keywords/misinformation","display_name":"Misinformation","score":0.4478999972343445},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.3549000024795532},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.3546000123023987}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9157999753952026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.704200029373169},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5547000169754028},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.5530999898910522},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.520799994468689},{"id":"https://openalex.org/C183115368","wikidata":"https://www.wikidata.org/wiki/Q856577","display_name":"Weighting","level":2,"score":0.4830999970436096},{"id":"https://openalex.org/C2776990098","wikidata":"https://www.wikidata.org/wiki/Q13579947","display_name":"Misinformation","level":2,"score":0.4478999972343445},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43880000710487366},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.3549000024795532},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.3546000123023987},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32829999923706055},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.31839999556541443},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.30399999022483826},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.28220000863075256},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.27619999647140503},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2517000138759613}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3746027.3761983","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746027.3761983","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3746027.3761983","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746027.3761983","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2394485828","https://openalex.org/W2962770929","https://openalex.org/W3096831136","https://openalex.org/W3173775919","https://openalex.org/W4285604433","https://openalex.org/W4391274667","https://openalex.org/W4392623241","https://openalex.org/W4399801829","https://openalex.org/W4400678935","https://openalex.org/W4403140275","https://openalex.org/W4405272853","https://openalex.org/W4406845293","https://openalex.org/W4409808980","https://openalex.org/W4409917641"],"related_works":[],"abstract_inverted_index":{"The":[0,71,204],"rapid":[1],"proliferation":[2],"of":[3,80,104,128,247,281],"AI-generated":[4,282],"media,":[5],"particularly":[6],"hyper-realistic":[7],"deepfakes,":[8],"has":[9],"underscored":[10],"the":[11,47,245,273,279],"critical":[12,207],"need":[13,274],"for":[14,223,264,275],"robust":[15],"detection":[16,69,253,270],"systems":[17,277],"to":[18,33,38,62,96],"mitigate":[19],"risks":[20],"such":[21,147],"as":[22,148],"misinformation":[23],"and":[24,64,88,106,113,133,156,169,189,219,226,240,251,258,271],"identity":[25],"theft.":[26],"However,":[27,231],"state-of-the-art":[28],"deepfake":[29,68,108,269],"detectors":[30],"remain":[31],"vulnerable":[32],"adversarial":[34,77,220,266],"attacks-subtle":[35],"perturbations":[36,221],"designed":[37],"evade":[39],"classification.":[40],"To":[41],"address":[42],"this":[43],"gap,":[44],"we":[45],"organized":[46],"Adversarial":[48],"Attacks":[49],"on":[50],"Deepfake":[51],"Detectors":[52],"(AADD-2025)":[53],"challenge,":[54],"a":[55,125,262],"competitive":[56],"evaluation":[57],"aimed":[58],"at":[59],"advancing":[60],"methodologies":[61],"expose":[63],"strengthen":[65],"weaknesses":[66],"in":[67,234,268,278],"models.":[70],"challenge":[72,205],"tasked":[73],"participants":[74],"with":[75],"generating":[76],"examples":[78],"capable":[79],"evading":[81],"four":[82],"diverse":[83],"classifiers":[84],"(including":[85],"ResNet,":[86],"DenseNet,":[87],"two":[89],"blind":[90],"models)":[91],"while":[92,178],"preserving":[93],"structural":[94],"similarity":[95],"original":[97],"deepfakes.":[98],"A":[99],"dataset":[100],"comprising":[101],"16":[102],"subsets":[103],"high-":[105],"low-quality":[107],"images":[109],"generated":[110],"by":[111],"GAN-based":[112],"diffusion":[114,185],"models":[115,239],"(e.g.,":[116],"StableDiffusion,":[117],"StyleGAN3)":[118],"was":[119],"provided.":[120],"Participants":[121],"were":[122],"evaluated":[123],"using":[124],"weighted":[126],"combination":[127],"Structural":[129],"Similarity":[130],"Index":[131],"(SSIM)":[132],"attack":[134],"success":[135],"rates":[136],"across":[137,199,237],"all":[138],"classifiers.":[139,181],"Thirteen":[140],"teams":[141],"proposed":[142],"innovative":[143],"solutions":[144],"leveraging":[145],"techniques":[146],"latent-space":[149,209],"manipulation,":[150],"ensemble":[151],"gradient":[152,193],"optimization,":[153],"surrogate":[154],"modeling,":[155],"frequency-domain":[157],"perturbation.":[158],"Top-performing":[159],"approaches,":[160],"including":[161,201],"MR-CAS":[162],"(1st":[163],"place),":[164,168,172],"Safe":[165,190],"AI":[166],"(2nd":[167],"RoMa":[170],"(3rd":[171],"achieved":[173],"high":[174],"SSIM":[175],"scores":[176],"(0.74-0.93)":[177],"successfully":[179],"misleading":[180],"Notably,":[182],"MR-CAS's":[183],"latent":[184],"model":[186],"inversion":[187],"strategy":[188],"AI's":[191],"consensus-orthogonal":[192],"weighting":[194],"framework":[195],"demonstrated":[196],"superior":[197],"transferability":[198],"architectures,":[200],"Vision":[202],"Transformers.":[203],"revealed":[206],"insights:":[208],"attacks":[210,236],"outperformed":[211],"pixel-level":[212],"methods,":[213],"ensemble-based":[214],"strategies":[215],"enhanced":[216],"cross-model":[217],"robustness,":[218],"optimized":[222],"both":[224],"CNNs":[225],"transformers":[227],"proved":[228],"most":[229],"effective.":[230],"gaps":[232],"persist":[233],"generalizing":[235],"heterogeneous":[238],"maintaining":[241],"perceptual":[242],"fidelity,":[243],"highlighting":[244],"urgency":[246],"developing":[248],"adaptive":[249],"defenses":[250],"hybrid":[252],"mechanisms.":[254],"By":[255],"fostering":[256],"collaboration":[257],"innovation,":[259],"AADD-2025":[260],"provides":[261],"benchmark":[263],"evaluating":[265],"robustness":[267],"underscores":[272],"resilient":[276],"era":[280],"media.":[283]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-25T00:00:00"}