{"id":"https://openalex.org/W7164854941","doi":"https://doi.org/10.1145/3805622.3810653","title":"Thinking in High-Frequency: Practical Defense for Deepfake Detectors Against Black-box Adversarial Attacks","display_name":"Thinking in High-Frequency: Practical Defense for Deepfake Detectors Against Black-box Adversarial Attacks","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164854941","doi":"https://doi.org/10.1145/3805622.3810653"},"language":null,"primary_location":{"id":"doi:10.1145/3805622.3810653","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805622.3810653","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 International Conference on Multimedia Retrieval","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3805622.3810653","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053626379","display_name":"Fuqiang Du","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fuqiang Du","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-1176-0944","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081445180","display_name":"Min Yu","orcid":"https://orcid.org/0000-0003-4371-7864"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Min Yu","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4371-7864","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102722080","display_name":"Jianguo Jiang","orcid":"https://orcid.org/0000-0002-0947-9500"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianguo Jiang","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0947-9500","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120661415","display_name":"Yixin Zhang","orcid":"https://orcid.org/0009-0004-9977-2496"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixin Zhang","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-9977-2496","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101308275","display_name":"Yachao Liang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yachao Liang","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-0010-9625","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135352591","display_name":"Meng Zhang","orcid":"https://orcid.org/0009-0003-5509-3902"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Zhang","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-5509-3902","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101637573","display_name":"Weiqing Huang","orcid":"https://orcid.org/0000-0002-9155-4177"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiqing Huang","raw_affiliation_strings":["Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9155-4177","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210156404"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2133","last_page":"2141"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9642999768257141,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9642999768257141,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9624999761581421},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6791999936103821},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3571999967098236},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.3481000065803528},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.31859999895095825}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9624999761581421},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7548999786376953},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6791999936103821},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6122999787330627},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39430001378059387},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3571999967098236},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.31859999895095825},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2757999897003174},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2581000030040741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3805622.3810653","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805622.3810653","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 International Conference on Multimedia Retrieval","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3805622.3810653","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805622.3810653","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 International Conference on Multimedia Retrieval","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6014527678489685,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2531409750","https://openalex.org/W2891145043","https://openalex.org/W2914447220","https://openalex.org/W2982058372","https://openalex.org/W2997517962","https://openalex.org/W3015625436","https://openalex.org/W3034713808","https://openalex.org/W3034892461","https://openalex.org/W3036426855","https://openalex.org/W3091254548","https://openalex.org/W3091857398","https://openalex.org/W3094728142","https://openalex.org/W3118479706","https://openalex.org/W3174508664","https://openalex.org/W3174656926","https://openalex.org/W3176241004","https://openalex.org/W3183999072","https://openalex.org/W4312716239","https://openalex.org/W4313127140","https://openalex.org/W4324302739","https://openalex.org/W4362635268","https://openalex.org/W4386071537","https://openalex.org/W4386075957","https://openalex.org/W4390872011","https://openalex.org/W4402716253","https://openalex.org/W4403791862","https://openalex.org/W4413259064"],"related_works":[],"abstract_inverted_index":{"Deepfake":[0],"detectors":[1,20],"have":[2,34],"demonstrated":[3],"vulnerability":[4],"when":[5,43],"faced":[6],"with":[7],"adversarial":[8,16,32,62,86,102],"attacks.":[9],"In":[10,49],"real-world":[11],"scenarios,":[12],"attackers":[13],"can":[14],"generate":[15],"examples":[17],"that":[18,117],"mislead":[19],"through":[21],"query-based":[22,31],"black-box":[23,111],"attack":[24,112,123],"methods.":[25],"Recently,":[26],"several":[27],"defense":[28,56],"methods":[29],"against":[30,108],"attacks":[33,63],"achieved":[35],"promising":[36],"performance.":[37],"However,":[38],"their":[39],"effectiveness":[40],"significantly":[41,126],"declines":[42],"applied":[44],"to":[45,60,80,100],"deepfake":[46,65],"detection":[47,66,124],"tasks.":[48],"this":[50],"work,":[51],"we":[52,89],"propose":[53],"a":[54],"novel":[55],"method":[57,72,107],"specifically":[58],"designed":[59],"counter":[61],"in":[64],"scenarios.":[67],"Unlike":[68],"existing":[69],"approaches,":[70],"our":[71,106,118],"focuses":[73],"on":[74],"the":[75,91,98],"high-frequency":[76,92],"components":[77],"of":[78],"images":[79,96],"uncover":[81],"subtle":[82],"traces":[83],"left":[84],"by":[85],"perturbations.":[87],"Specifically,":[88],"analyze":[90],"residual":[93],"between":[94],"similar":[95],"within":[97],"queries":[99],"detect":[101],"examples.":[103],"We":[104],"evaluate":[105],"three":[109],"advanced":[110],"strategies.":[113],"Extensive":[114],"experiments":[115],"demonstrate":[116],"approach":[119],"achieves":[120],"highly":[121],"effective":[122],"while":[125],"reducing":[127],"FPR.":[128]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-16T00:00:00"}