FractalForensics: Proactive Deepfake Detection and Localization via Fractal Watermarks
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Proactive Deepfake detection via robust watermarks has seen interest ever since passive Deepfake detectors encountered challenges in identifying high-quality synthetic images. However, while demonstrating reasonable detection performance, they lack localization functionality and explainability in detection results. Additionally, the unstable robustness of watermarks can significantly affect the detection performance. In this study, we propose novel fractal watermarks for proactive Deepfake detection and localization, namely FractalForensics. Benefiting from the characteristics of fractals, we devise a parameter-driven watermark generation pipeline that derives fractal-based watermarks and performs one-way encryption of the selected parameters. Subsequently, we propose a semi-fragile watermarking framework for watermark embedding and recovery, trained to be robust against benign image processing operations and fragile when facing Deepfake manipulations in a black-box setting. Moreover, we introduce an entry-to-patch strategy that implicitly embeds the watermark matrix entries into image patches at corresponding positions, achieving localization of Deepfake manipulations. Extensive experiments demonstrate satisfactory robustness and fragility of our approach against common image processing operations and Deepfake manipulations, outperforming state-of-the-art semi-fragile watermarking algorithms and passive detectors for Deepfake detection. Furthermore, by highlighting the areas manipulated, our method provides explainability for the proactive Deepfake detection results.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 29 of its 53 references that are in the map. First posted on arXiv 13 Apr 2025.
Builds on
29 of 53 references.
Closest ancestors · 4
Same direction, newest first
- 2024LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks26 Nov
- 2023Robust Identity Perceptual Watermark Against Deepfake Face Swapping2 Nov
- 2023SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection10 May
- 2021CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes23 May
Other references · 25
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2017Squeeze-and-Excitation Networkscited by 4,763
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2022Detecting Deepfakes with Self-Blended Imagescited by 332
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2022Implicit Identity Leakage: The Stumbling Block to Improving Deepfake Detection Generalizationcited by 122
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2022Fine-Grained Face Swapping via Regional GAN Inversioncited by 67
13 more
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2022Deepfake Detection: A Comprehensive Survey from the Reliability Perspectivecited by 48
- 2023HyperReenact: One-Shot Reenactment via Jointly Learning to Refine and Retarget Facescited by 48
- 2020FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Trackingcited by 46
- 2021Detect and Locate: Exposing Face Manipulation by Semantic- and Noise-level Telltalescited by 39
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2023Pixel-Inconsistency Modeling for Image Manipulation Localizationcited by 33
- 2022Deep Convolutional Pooling Transformer for Deepfake Detectioncited by 19
- 2022StyleMask: Disentangling the Style Space of StyleGAN2 for Neural Face Reenactmentcited by 17
- 2021FaceGuard: Proactive Deepfake Detectioncited by 16
- 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identificationcited by 15
- 2025NullSwap: Proactive Identity Cloaking Against Deepfake Face Swappingcited by 8
- 2023FakeTracer: Catching Face-swap DeepFakes via Implanting Traces in Trainingcited by 5
Built on by
Citing papers per year: 2025: 3; 2026: 1.
4 papers.
- 2025Defending Deepfake via Texture Feature Perturbationcited by 0
- 2025Disruptive Attacks on Face Swapping via Low-Frequency Perceptual Perturbationscited by 0
- 2025DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Adversarial Reinforcement Learningcited by 0
- 2026Word-Anchored Temporal Forgery Localizationcited by 0
- 2026Word-Anchored Temporal Forgery Localization6 Mar 2026
- 2025DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Adversarial Reinforcement Learning7 Nov 2025
- 2025Disruptive Attacks on Face Swapping via Low-Frequency Perceptual Perturbations28 Aug 2025
- 2025Defending Deepfake via Texture Feature Perturbation24 Aug 2025