mlsanityData to 7 Oct 2026

Standing on the Shoulders of Giants: Reprogramming Visual-Language Model for General Deepfake Detection

arXiv 2409.02664 ↗First posted 4 Sep 2024cs.CVcited by 30

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

The proliferation of deepfake faces poses huge potential negative impacts on our daily lives. Despite substantial advancements in deepfake detection over these years, the generalizability of existing methods against forgeries from unseen datasets or created by emerging generative models remains constrained. In this paper, inspired by the zero-shot advantages of Vision-Language Models (VLMs), we propose a novel approach that repurposes a well-trained VLM for general deepfake detection. Motivated by the model reprogramming paradigm that manipulates the model prediction via input perturbations, our method can reprogram a pre-trained VLM model (e.g., CLIP) solely based on manipulating its input without tuning the inner parameters. First, learnable visual perturbations are used to refine feature extraction for deepfake detection. Then, we exploit information of face embedding to create sample-level adaptative text prompts, improving the performance. Extensive experiments on several popular benchmark datasets demonstrate that (1) the cross-dataset and cross-manipulation performances of deepfake detection can be significantly and consistently improved (e.g., over 88% AUC in cross-dataset setting from FF++ to WildDeepfake); (2) the superior performances are achieved with fewer trainable parameters, making it a promising approach for real-world applications.

Key facts. Cited by 30 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 32 of its 50 references that are in the map. First posted on arXiv 4 Sep 2024.

Builds on

32 of 50 references.

References · 32

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
  4. 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
  5. 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
  6. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
  7. 2020Thinking in Frequency: Face Forgery Detection by Mining Frequency-aware Cluescited by 518
  8. 2023Towards Universal Fake Image Detectors that Generalize Across Generative Modelscited by 483
  9. 2019Face X-ray for More General Face Forgery Detectioncited by 469
  10. 2021Multi-attentional Deepfake Detectioncited by 339
  11. 2022Detecting Deepfakes with Self-Blended Imagescited by 332
  12. 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
20 more
  1. 2021Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domaincited by 241
  2. 2019The Deepfake Detection Challenge (DFDC) Preview Datasetcited by 208
  3. 2021WildDeepfake: A Challenging Real-World Dataset for Deepfake Detectioncited by 207
  4. 2023UCF: Uncovering Common Features for Generalizable Deepfake Detectioncited by 177
  5. 2022Self-supervised Learning of Adversarial Example: Towards Good Generalizations for Deepfake Detectioncited by 172
  6. 2022DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Modelscited by 167
  7. 2023Raising the Bar of AI-generated Image Detection with CLIPcited by 163
  8. 2023DeepfakeBench: A Comprehensive Benchmark of Deepfake Detectioncited by 162
  9. 2023Transcending Forgery Specificity with Latent Space Augmentation for Generalizable Deepfake Detectioncited by 126
  10. 2018Adversarial Reprogramming of Neural Networkscited by 115
  11. 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
  12. 2023TALL: Thumbnail Layout for Deepfake Video Detectioncited by 100
  13. 2024LAA-Net: Localized Artifact Attention Network for Quality-Agnostic and Generalizable Deepfake Detectioncited by 88
  14. 2022Model Reprogramming: Resource-Efficient Cross-Domain Machine Learningcited by 64
  15. 2022SeeABLE: Soft Discrepancies and Bounded Contrastive Learning for Exposing Deepfakescited by 49
  16. 2024Exposing the Deception: Uncovering More Forgery Clues for Deepfake Detectioncited by 47
  17. 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
  18. 2023TransFace++: Rethinking the Face Recognition Paradigm with a Focus on Accuracy, Efficiency, and Securitycited by 22
  19. 2024Learning Spatiotemporal Inconsistency via Thumbnail Layout for Face Deepfake Detectioncited by 21
  20. 2021One-shot Face Reenactment Using Appearance Adaptive Normalizationcited by 12

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 3; 2025: 11; 2026: 16.

30 papers.

Sort:

By area:

  1. 2025Dual Data Alignment Makes AI-Generated Image Detector Easier Generalizablecited by 58
  2. 2024X2-DFD: A framework for eXplainable and eXtendable Deepfake Detectioncited by 35
  3. 2025Unlocking the Capabilities of Large Vision-Language Models for Generalizable and Explainable Deepfake Detectioncited by 20
  4. 2025Breaking Latent Prior Bias in Detectors for Generalizable AIGC Image Detectioncited by 16
  5. 2025Towards Generalizable AI-Generated Image Detection via Image-Adaptive Prompt Learningcited by 8
  6. 2025Rethinking Cross-Generator Image Forgery Detection through DINOv3cited by 8
  7. 2025Guard Me If You Know Me: Protecting Specific Face-Identity from Deepfakescited by 7
  8. 2025DGS-Net: Distillation-Guided Gradient Surgery for CLIP Fine-Tuning in AI-Generated Image Detectioncited by 4
  9. 2025AlignGemini: Generalizable AI-Generated Image Detection Through Task-Model Alignmentcited by 3
  10. 2026AgentFoX: LLM Agent-Guided Fusion with eXplainability for AI-Generated Image Detectioncited by 3
  11. 2026Deep Residual Injection for Full-Spectrum Forensic Signal Perception in Multimodal Large Language Modelscited by 3
  12. 2024Forensics Adapter: Unleashing CLIP for Generalizable Face Forgery Detectioncited by 1
18 more
  1. 2025Fine-Grained DINO Tuning with Dual Supervision for Face Forgery Detectioncited by 1
  2. 2026Detecting AI-Generated Video: A Vision-Language Dual-View Surveycited by 1
  3. 2026Uncertainty-Aware Deepfake Detection via Multi-View Structural Learningcited by 1
  4. 2024Revisiting Face Forgery Detection: From Facial Representation to Forgery Detectioncited by 0
  5. 2025HAMLET-FFD: Hierarchical Adaptive Multi-modal Learning Embeddings Transformation for Face Forgery Detectioncited by 0
  6. 2025Cognitive Inception: Agentic Reasoning against Visual Deceptions by Injecting Skepticismcited by 0
  7. 2026Low-rank Orthogonal Subspace Intervention for Generalizable Face Forgery Detectioncited by 0
  8. 2026Unleashing Vision-Language Semantics for Deepfake Video Detectioncited by 0
  9. 2026GazeCLIP: Gaze-Guided CLIP with Adaptive-Enhanced Fine-Grained Language Prompt for Deepfake Attribution and Detectioncited by 0
  10. 2026LAA-X: Unified Localized Artifact Attention for Quality-Agnostic and Generalizable Face Forgery Detectioncited by 0
  11. 2026M3D-Net: Multi-Modal 3D Facial Feature Reconstruction Network for Deepfake Detectioncited by 0
  12. 2026AIFIND: Artifact-Aware Interpreting Fine-Grained Alignment for Incremental Face Forgery Detectioncited by 0
  13. 2026DVAR: Adversarial Multi-Agent Debate for Video Authenticity Detectioncited by 0
  14. 2026Generalizable Face Forgery Detection via Separable Prompt Learningcited by 0
  15. 2026FairForensics: Seeing Expressions and Parsing Demographics via Vision-Language Modeling for Generalizable Fair Deepfake Detectioncited by 0
  16. 2026Environment-Invariant Subspace Learning for Generalizable Deepfake Detectioncited by 0
  17. 2026Beyond Natural Images: Rethinking AI-Generated Image Detection in Documentscited by 0
  18. 2026Revisiting Cross-Reconstruction for Generalizable Deepfake Detectioncited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Visual Language Models as Zero-Shot Deepfake Detectors
  2. 2025LLMs Are Not Yet Ready for Deepfake Image Detection
  3. 2024CLIPping the Deception: Adapting Vision-Language Models for Universal Deepfake Detection
  4. 2023AntifakePrompt: Prompt-Tuned Vision-Language Models are Fake Image Detectors
  5. 2025AuthGuard: Generalizable Deepfake Detection via Language Guidance
  6. 2024Towards More General Video-based Deepfake Detection through Facial Component Guided Adaptation for Foundation Model
  7. 2024Evolving from Single-modal to Multi-modal Facial Deepfake Detection: Progress and Challenges
  8. 2024Deepfake Generation and Detection: A Benchmark and Survey