XAI-Based Detection of Adversarial Attacks on Deepfake Detectors
Not on the map. Why?
Abstract (arXiv)
We introduce a novel methodology for identifying adversarial attacks on deepfake detectors using eXplainable Artificial Intelligence (XAI). In an era characterized by digital advancement, deepfakes have emerged as a potent tool, creating a demand for efficient detection systems. However, these systems are frequently targeted by adversarial attacks that inhibit their performance. We address this gap, developing a defensible deepfake detector by leveraging the power of XAI. The proposed methodology uses XAI to generate interpretability maps for a given method, providing explicit visualizations of decision-making factors within the AI models. We subsequently employ a pretrained feature extractor that processes both the input image and its corresponding XAI image. The feature embeddings extracted from this process are then used for training a simple yet effective classifier. Our approach contributes not only to the detection of deepfakes but also enhances the understanding of possible adversarial attacks, pinpointing potential vulnerabilities. Furthermore, this approach does not change the performance of the deepfake detector. The paper demonstrates promising results suggesting a potential pathway for future deepfake detection mechanisms. We believe this study will serve as a valuable contribution to the community, sparking much-needed discourse on safeguarding deepfake detectors.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 44 of its 57 references that are in the map. First posted on arXiv 5 Mar 2024.
Builds on
44 of 57 references.
References · 44
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,332
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,512
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
32 more
- 2014Striving for Simplicity: The All Convolutional Netcited by 990
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
- 2016Universal adversarial perturbationscited by 784
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2018Exposing DeepFake Videos By Detecting Face Warping Artifactscited by 319
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
- 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
- 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 274
- 2018Physical Adversarial Examples for Object Detectorscited by 163
- 2023Open Sesame! Universal Black Box Jailbreaking of Large Language Modelscited by 134
- 2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 124
- 2019Towards Explainable Artificial Intelligencecited by 106
- 2020DeepFake Detection by Analyzing Convolutional Tracescited by 81
- 2020Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examplescited by 66
- 2020Video Face Manipulation Detection Through Ensemble of CNNscited by 63
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2020DeepFake Detection: Current Challenges and Next Stepscited by 44
- 2019Universal Adversarial Perturbations for Speech Recognition Systemscited by 41
- 2019Curls & Whey: Boosting Black-Box Adversarial Attackscited by 37
- 2023Evading DeepFake Detectors via Adversarial Statistical Consistencycited by 37
- 2023Quality-Agnostic Deepfake Detection with Intra-model Collaborative Learningcited by 32
- 2021MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakescited by 17
- 2023I See Dead People: Gray-Box Adversarial Attack on Image-To-Text Modelscited by 17
- 2022Foiling Explanations in Deep Neural Networkscited by 14
- 2020Preliminary Forensics Analysis of DeepFake Imagescited by 12
- 2021Black-box adversarial attacks using Evolution Strategiescited by 11
- 2022An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networkscited by 11
- 2023An adversarial attack approach for eXplainable AI evaluation on deepfake detection modelscited by 7
- 2021How Deep Are the Fakes? Focusing on Audio Deepfake: A Surveycited by 6
- 2019TEASPN: Framework and Protocol for Integrated Writing Assistance Environmentscited by 2
Built on by
Citing papers per year: 2024: 2; 2025: 6; 2026: 1.
9 papers.
- 2024On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspectivecited by 11
- 2025Don't Lag, RAG: Training-Free Adversarial Detection Using RAGcited by 5
- 2024Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectorscited by 4
- 2025Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networkscited by 2
- 2025From Prediction to Explanation: Multimodal, Explainable, and Interactive Deepfake Detection Framework for Non-Expert Userscited by 2
- 2025SAGA: Source Attribution of Generative AI Videoscited by 2
- 2025VERITAS: Verification and Explanation of Realness in Images for Transparency in AI Systemscited by 0
- 2025Unmasking Synthetic Realities in Generative AI: A Comprehensive Review of Adversarially Robust Deepfake Detection Systemscited by 0
- 2026JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Modelscited by 0
- 2026JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models27 May 2026
- 2025SAGA: Source Attribution of Generative AI Videos16 Nov 2025
- 2025From Prediction to Explanation: Multimodal, Explainable, and Interactive Deepfake Detection Framework for Non-Expert Users11 Aug 2025
- 2025Unmasking Synthetic Realities in Generative AI: A Comprehensive Review of Adversarially Robust Deepfake Detection Systems24 Jul 2025
- 2025VERITAS: Verification and Explanation of Realness in Images for Transparency in AI Systems7 Jul 2025
- 2025Don't Lag, RAG: Training-Free Adversarial Detection Using RAG7 Apr 2025
- 2025Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks13 Feb 2025
- 2024On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective25 Aug 2024
- 2024Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors18 Apr 2024