DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Adversarial Reinforcement Learning
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Rapid advances in generative AI have led to increasingly realistic deepfakes, posing growing challenges for law enforcement and public trust. Existing passive deepfake detectors struggle to keep pace, largely due to their dependence on specific forgery artifacts, which limits their ability to generalize to new deepfake types. Proactive deepfake detection using watermarks has emerged to address the challenge of identifying high-quality synthetic media. However, these methods often struggle to balance robustness against benign distortions with sensitivity to malicious tampering. This paper introduces a novel deep learning framework that harnesses high-dimensional latent space representations and the Adversarial Reinforcement Learning (ARL) paradigm to develop a robust and adaptive watermarking approach. Specifically, we develop a learnable watermark embedder that operates in the latent space, capturing high-level image semantics, while offering precise control over message encoding and extraction. The ARL paradigm empowers the learnable watermarking module to pursue an optimal balance between robustness and fragility. This is achieved through interaction with a dynamic curriculum of benign and malicious image manipulations simulated by an adversarial attacker agent. Comprehensive evaluations on the CelebA and CelebA-HQ benchmarks reveal that our method consistently outperforms state-of-the-art approaches, achieving improvements of over 4.5% on CelebA and more than 5.3% on CelebA-HQ under challenging manipulation scenarios.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 40 of its 66 references that are in the map. First posted on arXiv 7 Nov 2025.
Builds on
40 of 66 references.
Closest ancestors · 7
Same direction, newest first
- 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey30 Sep
- 2025FractalForensics: Proactive Deepfake Detection and Localization via Fractal Watermarks13 Apr
- 2024LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks26 Nov
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances24 Oct
- 2023Robust Identity Perceptual Watermark Against Deepfake Face Swapping2 Nov
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AI2 Jun
- 2023SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection10 May
Other references · 33
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2019CNN-generated images are surprisingly easy to spot... for nowcited by 847
- 2017Counterfactual Multi-Agent Policy Gradientscited by 751
- 2022Detecting Deepfakes with Self-Blended Imagescited by 338
- 2020Lips Don't Lie: A Generalisable and Robust Approach to Face Forgery Detectioncited by 287
- 2020What makes fake images detectable? Understanding properties that generalizecited by 273
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Modelscited by 113
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
21 more
- 2021Representative Forgery Mining for Fake Face Detectioncited by 108
- 2020Video Face Manipulation Detection Through Ensemble of CNNscited by 63
- 2021Multi-Agent Reinforcement Learning for Active Voltage Control on Power Distribution Networkscited by 54
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 52
- 2020FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Trackingcited by 46
- 2021Beyond the Spectrum: Detecting Deepfakes via Re-Synthesiscited by 44
- 2022FaceDancer: Pose- and Occlusion-Aware High Fidelity Face Swappingcited by 44
- 2019Failure-Scenario Maker for Rule-Based Agent using Multi-agent Adversarial Reinforcement Learning and its Application to Autonomous Drivingcited by 36
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2021Learning to Simulate Self-Driven Particles System with Coordinated Policy Optimizationcited by 33
- 2020Towards Understanding Cooperative Multi-Agent Q-Learning with Value Factorizationcited by 26
- 2023Robust Multi-Agent Reinforcement Learning via Adversarial Regularization: Theoretical Foundation and Stable Algorithmscited by 25
- 2023StyleGANEX: StyleGAN-Based Manipulation Beyond Cropped Aligned Facescited by 19
- 2021FaceGuard: Proactive Deepfake Detectioncited by 16
- 2020Robust Multi-Agent Reinforcement Learning with Social Empowerment for Coordination and Communicationcited by 6
- 2023Communication-Robust Multi-Agent Learning by Adaptable Auxiliary Multi-Agent Adversary Generationcited by 6
- 2020Multi-Agent Reinforcement Learning for Dynamic Ocean Monitoring by a Swarm of Buoyscited by 4
- 2024ID-Guard: A Universal Framework for Combating Facial Manipulation via Breaking Identificationcited by 4
- 2025Face Deepfakes -- A Comprehensive Reviewcited by 3
- 2024FaceTracer: Unveiling Source Identities from Swapped Face Images and Videos for Fraud Preventioncited by 2
- 2025Cross-Branch Orthogonality for Improved Generalization in Face Deepfake Detectioncited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Learning to Watermark in the Latent Space of Generative Models
- 2024Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics
- 2026DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses
- 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
- 2024Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space
- 2025Uncovering and Mitigating Destructive Multi-Embedding Attacks in Deepfake Proactive Forensics
- 2024LaWa: Using Latent Space for In-Generation Image Watermarking
- 2022FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes