{"id":"https://openalex.org/W6962751822","doi":"https://doi.org/10.18420/biosig2025_12","title":"2D-Malafide: Adversarial Attacks Against Face Deepfake Detection Systems","display_name":"2D-Malafide: Adversarial Attacks Against Face Deepfake Detection Systems","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W6962751822","doi":"https://doi.org/10.18420/biosig2025_12"},"language":"en","primary_location":{"id":"doi:10.18420/biosig2025_12","is_oa":true,"landing_page_url":"https://doi.org/10.18420/biosig2025_12","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.18420/biosig2025_12","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Galdi, Chiara","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Galdi, Chiara","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Panariello, Michele","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Panariello, Michele","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Todisco, Massimiliano","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Todisco, Massimiliano","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Evans, Nicholas","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Evans, Nicholas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.35881559,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.4259999990463257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.4259999990463257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.271699994802475,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.13779999315738678,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8353000283241272},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7261999845504761},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.6175000071525574},{"id":"https://openalex.org/keywords/high-fidelity","display_name":"High fidelity","score":0.4498000144958496},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.4146000146865845},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.4092000126838684},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4052000045776367}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8353000283241272},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7635999917984009},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7261999845504761},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6175000071525574},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4927000105381012},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45910000801086426},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.4146000146865845},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.4092000126838684},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4052000045776367},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.3935999870300293},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.3449000120162964},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3197999894618988},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30140000581741333},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2948000133037567},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.2874000072479248},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.26249998807907104}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18420/biosig2025_12","is_oa":true,"landing_page_url":"https://doi.org/10.18420/biosig2025_12","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.18420/biosig2025_12","is_oa":true,"landing_page_url":"https://doi.org/10.18420/biosig2025_12","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5239554643630981,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0],"introduce":[1],"2D-Malafide,":[2],"a":[3,55],"novel":[4],"and":[5,89],"lightweight":[6],"adversarial":[7,64,136],"attack":[8],"designed":[9],"to":[10,35,61,134,146],"deceive":[11],"face":[12,45,71],"deepfake":[13,46,131],"detection":[14,84,113,132,148],"systems.":[15],"Building":[16],"upon":[17],"the":[18,26,41,76,97,117,127,141],"concept":[19],"of":[20,43,58,129],"1D":[21],"convolutional":[22,33,135],"perturbations":[23,37,65],"explored":[24],"in":[25,86],"speech":[27],"domain,":[28],"our":[29],"method":[30],"leverages":[31],"2D":[32],"filters":[34],"craft":[36],"which":[38,66,108],"significantly":[39],"degrade":[40],"performance":[42,85],"state-of-the-art":[44],"detectors.":[47],"Unlike":[48],"traditional":[49],"additive":[50],"noise":[51],"approaches,":[52],"2D-Malafide":[53,81,111],"optimises":[54],"small":[56],"number":[57],"filter":[59,94],"coefficients":[60],"generate":[62],"robust":[63],"are":[67],"transferable":[68],"across":[69],"different":[70],"images.":[72],"Experiments,":[73],"conducted":[74],"using":[75,106],"FaceForensics++":[77],"dataset,":[78],"demonstrate":[79],"that":[80],"substantially":[82],"degrades":[83],"both":[87],"white-box":[88],"black-box":[90],"settings,":[91],"with":[92],"larger":[93],"sizes":[95],"having":[96],"greatest":[98],"impact.":[99],"Additionally,":[100],"we":[101],"report":[102],"an":[103],"explainability":[104],"analysis":[105],"GradCAM":[107],"illustrates":[109],"how":[110],"misleads":[112],"systems":[114,133],"by":[115],"altering":[116],"image":[118,152],"areas":[119],"used":[120],"most":[121],"for":[122,143],"classification.":[123],"Our":[124],"findings":[125],"highlight":[126],"vulnerability":[128],"current":[130],"attacks":[137],"as":[138,140],"well":[139],"need":[142],"future":[144],"work":[145],"enhance":[147],"robustness":[149],"through":[150],"improved":[151],"fidelity":[153],"constraints.":[154]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}