mlsanityData to 14 Oct 2026

XAI-Based Detection of Adversarial Attacks on Deepfake Detectors

arXiv 2403.02955 ↗First posted 5 Mar 2024cs.CR cs.CVcited by 9

Not on the map. Why?

Abstract (arXiv)

We introduce a novel methodology for identifying adversarial attacks on deepfake detectors using eXplainable Artificial Intelligence (XAI). In an era characterized by digital advancement, deepfakes have emerged as a potent tool, creating a demand for efficient detection systems. However, these systems are frequently targeted by adversarial attacks that inhibit their performance. We address this gap, developing a defensible deepfake detector by leveraging the power of XAI. The proposed methodology uses XAI to generate interpretability maps for a given method, providing explicit visualizations of decision-making factors within the AI models. We subsequently employ a pretrained feature extractor that processes both the input image and its corresponding XAI image. The feature embeddings extracted from this process are then used for training a simple yet effective classifier. Our approach contributes not only to the detection of deepfakes but also enhances the understanding of possible adversarial attacks, pinpointing potential vulnerabilities. Furthermore, this approach does not change the performance of the deepfake detector. The paper demonstrates promising results suggesting a potential pathway for future deepfake detection mechanisms. We believe this study will serve as a valuable contribution to the community, sparking much-needed discourse on safeguarding deepfake detectors.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 44 of its 57 references that are in the map. First posted on arXiv 5 Mar 2024.

Builds on

44 of 57 references.

References · 44

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  4. 2013Intriguing properties of neural networkscited by 5,155
  5. 2017Axiomatic Attribution for Deep Networkscited by 3,384
  6. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  7. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
  8. 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,332
  9. 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,512
  10. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  11. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  12. 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
32 more
  1. 2014Striving for Simplicity: The All Convolutional Netcited by 990
  2. 2016Practical Black-Box Attacks against Machine Learningcited by 903
  3. 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
  4. 2016Universal adversarial perturbationscited by 784
  5. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
  6. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
  7. 2018Exposing DeepFake Videos By Detecting Face Warping Artifactscited by 319
  8. 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
  9. 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
  10. 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 274
  11. 2018Physical Adversarial Examples for Object Detectorscited by 163
  12. 2023Open Sesame! Universal Black Box Jailbreaking of Large Language Modelscited by 134
  13. 2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 124
  14. 2019Towards Explainable Artificial Intelligencecited by 106
  15. 2020DeepFake Detection by Analyzing Convolutional Tracescited by 81
  16. 2020Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examplescited by 66
  17. 2020Video Face Manipulation Detection Through Ensemble of CNNscited by 63
  18. 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
  19. 2020DeepFake Detection: Current Challenges and Next Stepscited by 44
  20. 2019Universal Adversarial Perturbations for Speech Recognition Systemscited by 41
  21. 2019Curls & Whey: Boosting Black-Box Adversarial Attackscited by 37
  22. 2023Evading DeepFake Detectors via Adversarial Statistical Consistencycited by 37
  23. 2023Quality-Agnostic Deepfake Detection with Intra-model Collaborative Learningcited by 32
  24. 2021MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakescited by 17
  25. 2023I See Dead People: Gray-Box Adversarial Attack on Image-To-Text Modelscited by 17
  26. 2022Foiling Explanations in Deep Neural Networkscited by 14
  27. 2020Preliminary Forensics Analysis of DeepFake Imagescited by 12
  28. 2021Black-box adversarial attacks using Evolution Strategiescited by 11
  29. 2022An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networkscited by 11
  30. 2023An adversarial attack approach for eXplainable AI evaluation on deepfake detection modelscited by 7
  31. 2021How Deep Are the Fakes? Focusing on Audio Deepfake: A Surveycited by 6
  32. 2019TEASPN: Framework and Protocol for Integrated Writing Assistance Environmentscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 2; 2025: 6; 2026: 1.

9 papers.