Progressive Open Space Expansion for Open-Set Model Attribution
Not on the map. Why?
Abstract (arXiv)
Despite the remarkable progress in generative technology, the Janus-faced issues of intellectual property protection and malicious content supervision have arisen. Efforts have been paid to manage synthetic images by attributing them to a set of potential source models. However, the closed-set classification setting limits the application in real-world scenarios for handling contents generated by arbitrary models. In this study, we focus on a challenging task, namely Open-Set Model Attribution (OSMA), to simultaneously attribute images to known models and identify those from unknown ones. Compared to existing open-set recognition (OSR) tasks focusing on semantic novelty, OSMA is more challenging as the distinction between images from known and unknown models may only lie in visually imperceptible traces. To this end, we propose a Progressive Open Space Expansion (POSE) solution, which simulates open-set samples that maintain the same semantics as closed-set samples but embedded with different imperceptible traces. Guided by a diversity constraint, the open space is simulated progressively by a set of lightweight augmentation models. We consider three real-world scenarios and construct an OSMA benchmark dataset, including unknown models trained with different random seeds, architectures, and datasets from known ones. Extensive experiments on the dataset demonstrate POSE is superior to both existing model attribution methods and off-the-shelf OSR methods.
Key facts. Cited by 32 papers in the map (data through 7 Oct 2026). Builds on 48 of its 59 references that are in the map. First posted on arXiv 13 Mar 2023.
Builds on
48 of 59 references.
References · 48
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
- 2018Spectral Normalization for Generative Adversarial Networkscited by 1,618
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2018Demystifying MMD GANscited by 1,268
- 2021Alias-Free Generative Adversarial Networkscited by 1,181
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
36 more
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
- 2018Self-Attention Generative Adversarial Networkscited by 809
- 2017Unpaired Image-to-Image Translation using Cycle-Consistent Adversarial Networkscited by 707
- 2020A Lip Sync Expert Is All You Need for Speech to Lip Generation In The Wildcited by 669
- 2015Towards Open Set Deep Networkscited by 533
- 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 501
- 2021Open-Set Recognition: a Good Closed-Set Classifier is All You Need?cited by 351
- 2019FSGAN: Subject Agnostic Face Swapping and Reenactmentcited by 319
- 2020Watch your Up-Convolution: CNN Based Generative Deep Neural Networks are Failing to Reproduce Spectral Distributionscited by 278
- 2017AttGAN: Facial Attribute Editing by Only Changing What You Wantcited by 241
- 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
- 2018Do GANs leave artificial fingerprints?cited by 188
- 2018Reducing Network Agnostophobiacited by 165
- 2017Generative OpenMax for Multi-Class Open Set Classificationcited by 157
- 2021Adversarial Reciprocal Points Learning for Open Set Recognitioncited by 153
- 2018Classification-Reconstruction Learning for Open-Set Recognitioncited by 146
- 2019C2AE: Class Conditioned Auto-Encoder for Open-set Recognitioncited by 142
- 2021OpenGAN: Open-Set Recognition via Open Data Generationcited by 135
- 2021Learning Placeholders for Open-Set Recognitioncited by 121
- 2020Learning Open Set Network with Discriminative Reciprocal Pointscited by 115
- 2017DOC: Deep Open Classification of Text Documentscited by 109
- 2020Hybrid Models for Open Set Recognitioncited by 109
- 2020Conditional Gaussian Distribution Learning for Open Set Recognitioncited by 104
- 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
- 2021A Closer Look at Fourier Spectrum Discrepancies for CNN-generated Images Detectioncited by 68
- 2021Towards Discovery and Attribution of Open-world GAN Generated Imagescited by 66
- 2019High-Fidelity Image Generation With Fewer Labelscited by 51
- 2022Deepfake Network Architecture Attributioncited by 47
- 2022RepMix: Representation Mixing for Robust Attribution of Synthesized Imagescited by 39
- 2020InfoMax-GAN: Improved Adversarial Image Generation via Information Maximization and Contrastive Learningcited by 37
- 2022Difficulty-Aware Simulator for Open Set Recognitioncited by 24
- 2021Learning to Disentangle GAN Fingerprint for Fake Image Attributioncited by 19
- 2021Conditional Variational Capsule Network for Open Set Recognitioncited by 17
- 2020Decentralized Attribution of Generative Modelscited by 16
- 2021Towards Harmonized Regional Style Transfer and Manipulation for Facial Imagescited by 7
- 2019Scalable Fine-grained Generated Image Classification Based on Deep Metric Learningcited by 6
Built on by
Citing papers per year: 2023: 3; 2024: 7; 2025: 11; 2026: 11.
32 papers.
Sort:
By area:
- 2023Rethinking Image Editing Detection in the Era of Generative AI Revolutioncited by 21
- 2024Are CLIP features all you need for Universal Synthetic Image Origin Attribution?cited by 14
- 2025Handling Out-of-Distribution Data: A Surveycited by 14
- 2024Synthetic Image Verification in the Era of Generative AI: What Works and What Isn't There Yetcited by 13
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 12
- 2025Forensic Self-Descriptions Are All You Need for Zero-Shot Detection, Open-Set Source Attribution, and Clustering of AI-generated Imagescited by 11
- 2024BOSC: A Backdoor-based Framework for Open Set Synthetic Image Attributioncited by 6
- 2025Few-Shot Synthetic Image Attribution: Identifying Unseen Generators with Limited Samplescited by 6
- 2023Model Synthesis for Zero-Shot Model Attributioncited by 5
- 2024Are handcrafted filters helpful for attributing AI-generated images?cited by 5
- 2025Learning Counterfactually Decoupled Attention for Open-World Model Attributioncited by 5
- 2025SAIDO: Generalizable Detection of AI-Generated Images via Scene-Aware and Importance-Guided Dynamic Optimization in Continual Learningcited by 4
20 more
- 2024Regeneration Based Training-free Attribution of Fake Images Generated by Text-to-Image Generative Modelscited by 3
- 2026Attribution as Retrieval: Model-Agnostic AI-Generated Image Attributioncited by 3
- 2026IncreFA: Breaking the Static Wall of Generative Model Attributioncited by 3
- 2025SAGA: Source Attribution of Generative AI Videoscited by 2
- 2024Reject Threshold Adaptation for Open-Set Model Attribution of Deepfake Audiocited by 1
- 2025Autonomous and Self-Adapting System for Synthetic Media Detection and Attributioncited by 1
- 2025Traceable TTS: Toward Watermark-Free TTS with Strong Traceabilitycited by 1
- 2025Untraceable DeepFakes via Traceable Fingerprint Eliminationcited by 1
- 2025Forewarned is Forearmed: Pre-Synthesizing Jailbreak-like Instructions to Enhance LLM Safety Guardrail to Potential Attackscited by 1
- 2025Supervised Contrastive Learning for Few-Shot AI-Generated Image Detection and Attributioncited by 1
- 2026ImageAttributionBench: How Far Are We from Generalizable Attribution?cited by 1
- 2023A Siamese-based Verification System for Open-set Architecture Attribution of Synthetic Imagescited by 0
- 2026Unknown Aware AI-Generated Content Attributioncited by 0
- 2026Who Generated This 3D Asset? Learning Source Attribution for Generative 3D Modelscited by 0
- 2026Face-Trace: Open-Set Attribution and Progressive Discovery of Synthetic Face Generatorscited by 0
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracingcited by 0
- 2026Retrieval-Driven Training-Free AI-Generated Video Attributioncited by 0
- 2026Scalable Black-Box Model Attribution for Imagescited by 0
- 2026Multi-Tool Image Editing Attribution in Facial Forgerycited by 0
- 2026Can Pixels Alone Reveal Image Origin? Minimax Limits and Learnable Interfaces for Passive Provenancecited by 0
- 2026Can Pixels Alone Reveal Image Origin? Minimax Limits and Learnable Interfaces for Passive Provenance25 Sep 2026
- 2026Multi-Tool Image Editing Attribution in Facial Forgery2 Sep 2026
- 2026Scalable Black-Box Model Attribution for Images16 Aug 2026
- 2026Retrieval-Driven Training-Free AI-Generated Video Attribution31 Jul 2026
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracing15 Jul 2026
- 2026Face-Trace: Open-Set Attribution and Progressive Discovery of Synthetic Face Generators8 Jul 2026
- 2026Who Generated This 3D Asset? Learning Source Attribution for Generative 3D Models18 May 2026
- 2026ImageAttributionBench: How Far Are We from Generalizable Attribution?13 May 2026
- 2026IncreFA: Breaking the Static Wall of Generative Model Attribution20 Apr 2026
- 2026Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution11 Mar 2026
- 2026Unknown Aware AI-Generated Content Attribution1 Jan 2026
- 2025SAIDO: Generalizable Detection of AI-Generated Images via Scene-Aware and Importance-Guided Dynamic Optimization in Continual Learning29 Nov 2025
20 more
- 2025Supervised Contrastive Learning for Few-Shot AI-Generated Image Detection and Attribution20 Nov 2025
- 2025SAGA: Source Attribution of Generative AI Videos16 Nov 2025
- 2025Few-Shot Synthetic Image Attribution: Identifying Unseen Generators with Limited Samples30 Sep 2025
- 2025Forewarned is Forearmed: Pre-Synthesizing Jailbreak-like Instructions to Enhance LLM Safety Guardrail to Potential Attacks27 Aug 2025
- 2025Untraceable DeepFakes via Traceable Fingerprint Elimination5 Aug 2025
- 2025Handling Out-of-Distribution Data: A Survey25 Jul 2025
- 2025Traceable TTS: Toward Watermark-Free TTS with Strong Traceability5 Jul 2025
- 2025Learning Counterfactually Decoupled Attention for Open-World Model Attribution29 Jun 2025
- 2025Autonomous and Self-Adapting System for Synthetic Media Detection and Attribution4 Apr 2025
- 2025Forensic Self-Descriptions Are All You Need for Zero-Shot Detection, Open-Set Source Attribution, and Clustering of AI-generated Images26 Mar 2025
- 2024Reject Threshold Adaptation for Open-Set Model Attribution of Deepfake Audio2 Dec 2024
- 2024Are CLIP features all you need for Universal Synthetic Image Origin Attribution?17 Aug 2024
- 2024Are handcrafted filters helpful for attributing AI-generated images?19 Jul 2024
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authentication15 Jul 2024
- 2024BOSC: A Backdoor-based Framework for Open Set Synthetic Image Attribution19 May 2024
- 2024Synthetic Image Verification in the Era of Generative AI: What Works and What Isn't There Yet30 Apr 2024
- 2024Regeneration Based Training-free Attribution of Fake Images Generated by Text-to-Image Generative Models3 Mar 2024
- 2023Rethinking Image Editing Detection in the Era of Generative AI Revolution29 Nov 2023
- 2023Model Synthesis for Zero-Shot Model Attribution29 Jul 2023
- 2023A Siamese-based Verification System for Open-set Architecture Attribution of Synthetic Images19 Jul 2023
- 2023Rethinking Image Editing Detection in the Era of Generative AI Revolutioncited by 21
- 2025Handling Out-of-Distribution Data: A Surveycited by 14
- 2024Synthetic Image Verification in the Era of Generative AI: What Works and What Isn't There Yetcited by 13
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 12
- 2025Forensic Self-Descriptions Are All You Need for Zero-Shot Detection, Open-Set Source Attribution, and Clustering of AI-generated Imagescited by 11
- 2024BOSC: A Backdoor-based Framework for Open Set Synthetic Image Attributioncited by 6
- 2025Few-Shot Synthetic Image Attribution: Identifying Unseen Generators with Limited Samplescited by 6
- 2023Model Synthesis for Zero-Shot Model Attributioncited by 5
- 2024Are handcrafted filters helpful for attributing AI-generated images?cited by 5
- 2025SAIDO: Generalizable Detection of AI-Generated Images via Scene-Aware and Importance-Guided Dynamic Optimization in Continual Learningcited by 4
- 2024Regeneration Based Training-free Attribution of Fake Images Generated by Text-to-Image Generative Modelscited by 3
- 2026Attribution as Retrieval: Model-Agnostic AI-Generated Image Attributioncited by 3
12 most cited of 28 All 28 (JSON)
- 2026Can Pixels Alone Reveal Image Origin? Minimax Limits and Learnable Interfaces for Passive Provenance25 Sep 2026
- 2026Multi-Tool Image Editing Attribution in Facial Forgery2 Sep 2026
- 2026Scalable Black-Box Model Attribution for Images16 Aug 2026
- 2026Retrieval-Driven Training-Free AI-Generated Video Attribution31 Jul 2026
- 2026Face-Trace: Open-Set Attribution and Progressive Discovery of Synthetic Face Generators8 Jul 2026
- 2026Who Generated This 3D Asset? Learning Source Attribution for Generative 3D Models18 May 2026
- 2026ImageAttributionBench: How Far Are We from Generalizable Attribution?13 May 2026
- 2026IncreFA: Breaking the Static Wall of Generative Model Attribution20 Apr 2026
- 2026Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution11 Mar 2026
- 2026Unknown Aware AI-Generated Content Attribution1 Jan 2026
- 2025SAIDO: Generalizable Detection of AI-Generated Images via Scene-Aware and Importance-Guided Dynamic Optimization in Continual Learning29 Nov 2025
- 2025Supervised Contrastive Learning for Few-Shot AI-Generated Image Detection and Attribution20 Nov 2025
12 newest of 28 All 28 (JSON)