mlsanityData to 7 Oct 2026

FractalForensics: Proactive Deepfake Detection and Localization via Fractal Watermarks

arXiv 2504.09451 ↗First posted 13 Apr 2025cs.CVcited by 4

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Proactive Deepfake detection via robust watermarks has seen interest ever since passive Deepfake detectors encountered challenges in identifying high-quality synthetic images. However, while demonstrating reasonable detection performance, they lack localization functionality and explainability in detection results. Additionally, the unstable robustness of watermarks can significantly affect the detection performance. In this study, we propose novel fractal watermarks for proactive Deepfake detection and localization, namely FractalForensics. Benefiting from the characteristics of fractals, we devise a parameter-driven watermark generation pipeline that derives fractal-based watermarks and performs one-way encryption of the selected parameters. Subsequently, we propose a semi-fragile watermarking framework for watermark embedding and recovery, trained to be robust against benign image processing operations and fragile when facing Deepfake manipulations in a black-box setting. Moreover, we introduce an entry-to-patch strategy that implicitly embeds the watermark matrix entries into image patches at corresponding positions, achieving localization of Deepfake manipulations. Extensive experiments demonstrate satisfactory robustness and fragility of our approach against common image processing operations and Deepfake manipulations, outperforming state-of-the-art semi-fragile watermarking algorithms and passive detectors for Deepfake detection. Furthermore, by highlighting the areas manipulated, our method provides explainability for the proactive Deepfake detection results.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 29 of its 53 references that are in the map. First posted on arXiv 13 Apr 2025.

Builds on

29 of 53 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks26 Nov
  2. 2023Robust Identity Perceptual Watermark Against Deepfake Face Swapping2 Nov
  3. 2023SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection10 May
  4. 2021CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes23 May

Other references · 25

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2017Squeeze-and-Excitation Networkscited by 4,763
  3. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
  4. 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
  5. 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
  6. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  7. 2022Detecting Deepfakes with Self-Blended Imagescited by 332
  8. 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
  9. 2022Implicit Identity Leakage: The Stumbling Block to Improving Deepfake Detection Generalizationcited by 122
  10. 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
  11. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
  12. 2022Fine-Grained Face Swapping via Regional GAN Inversioncited by 67
13 more
  1. 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
  2. 2022Deepfake Detection: A Comprehensive Survey from the Reliability Perspectivecited by 48
  3. 2023HyperReenact: One-Shot Reenactment via Jointly Learning to Refine and Retarget Facescited by 48
  4. 2020FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Trackingcited by 46
  5. 2021Detect and Locate: Exposing Face Manipulation by Semantic- and Noise-level Telltalescited by 39
  6. 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
  7. 2023Pixel-Inconsistency Modeling for Image Manipulation Localizationcited by 33
  8. 2022Deep Convolutional Pooling Transformer for Deepfake Detectioncited by 19
  9. 2022StyleMask: Disentangling the Style Space of StyleGAN2 for Neural Face Reenactmentcited by 17
  10. 2021FaceGuard: Proactive Deepfake Detectioncited by 16
  11. 2024RLE: A Unified Perspective of Data Augmentation for Cross-Spectral Re-identificationcited by 15
  12. 2025NullSwap: Proactive Identity Cloaking Against Deepfake Face Swappingcited by 8
  13. 2023FakeTracer: Catching Face-swap DeepFakes via Implanting Traces in Trainingcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 1.

4 papers.