Training-free Detection of AI-generated images via Cropping Robustness
Not on the map. Why?
Abstract (arXiv)
AI-generated image detection has become crucial with the rapid advancement of vision-generative models. Instead of training detectors tailored to specific datasets, we study a training-free approach leveraging self-supervised models without requiring prior data knowledge. These models, pre-trained with augmentations like RandomResizedCrop, learn to produce consistent representations across varying resolutions. Motivated by this, we propose WaRPAD, a training-free AI-generated image detection algorithm based on self-supervised models. Since neighborhood pixel differences in images are highly sensitive to resizing operations, WaRPAD first defines a base score function that quantifies the sensitivity of image embeddings to perturbations along high-frequency directions extracted via Haar wavelet decomposition. To simulate robustness against cropping augmentation, we rescale each image to a multiple of the models input size, divide it into smaller patches, and compute the base score for each patch. The final detection score is then obtained by averaging the scores across all patches. We validate WaRPAD on real datasets of diverse resolutions and domains, and images generated by 23 different generative models. Our method consistently achieves competitive performance and demonstrates strong robustness to test-time corruptions. Furthermore, as invariance to RandomResizedCrop is a common training scheme across self-supervised models, we show that WaRPAD is applicable across self-supervised models.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 46 of its 57 references that are in the map. First posted on arXiv 18 Nov 2025.
Builds on
46 of 57 references.
References · 46
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,403
34 more
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2022Generative Adversarial Networkscited by 5,627
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2020Unsupervised Learning of Visual Features by Contrasting Cluster Assignmentscited by 2,857
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,375
- 2021iBOT: Image BERT Pre-Training with Online Tokenizercited by 903
- 2023Vision Transformers Need Registerscited by 871
- 2021Vector Quantized Diffusion Model for Text-to-Image Synthesiscited by 774
- 2022Pseudo Numerical Methods for Diffusion Models on Manifoldscited by 700
- 2023GenImage: A Million-Scale Benchmark for Detecting AI-Generated Imagecited by 321
- 2022On the detection of synthetic images generated by diffusion modelscited by 283
- 2021Projected GANs Converge Fastercited by 208
- 2023A Survey on Self-supervised Learning: Algorithms, Applications, and Future Trendscited by 207
- 2022Diffusion-GAN: Training GANs with Diffusioncited by 205
- 2024A Sanity Check for AI-generated Image Detectioncited by 189
- 2023Forgery-aware Adaptive Transformer for Generalizable Synthetic Image Detectioncited by 182
- 2023Raising the Bar of AI-generated Image Detection with CLIPcited by 164
- 2024AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Errorcited by 125
- 2022Wukong: A 100 Million Large-scale Chinese Cross-modal Pre-training Benchmarkcited by 114
- 2022Towards the Detection of Diffusion Model Deepfakescited by 111
- 2021On the Frequency Bias of Generative Modelscited by 60
- 2024Zero-Shot Detection of AI-Generated Imagescited by 50
- 2024RIGID: A Training-free and Model-Agnostic Framework for Robust AI-Generated Image Detectioncited by 36
- 2024A Simple Image Segmentation Framework via In-Context Examplescited by 19
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 13
- 2025Stay-Positive: A Case for Ignoring Real Image Features in Fake Image Detectioncited by 11
- 2025Manifold Induced Biases for Zero-shot and Few-shot Detection of Generated Imagescited by 10
- 2024Understanding and Improving Training-Free AI-Generated Image Detections with Vision Foundation Modelscited by 8
Built on by
Citing papers per year: 2026: 10.
10 papers.
- 2026Simplicity Prevails: The Emergence of Generalizable AIGI Detection in Visual Foundation Modelscited by 7
- 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarkingcited by 7
- 2026DRIFT: From Robustness Gaps to Invariance Manifolds for AI-Generated Image Detectioncited by 1
- 2026Dissect and Prune: Enhancing Robustness in AI-Generated Image Detectioncited by 1
- 2026Efficient Zero-Shot AI-Generated Image Detectioncited by 0
- 2026Enhancing Self-Supervised Talking Head Forgery Detection via a Training-Free Dual-System Frameworkcited by 0
- 2026Micro-Defects Expose Macro-Fakes: Detecting AI-Generated Images via Local Distributional Shiftscited by 0
- 2026Foundation Models are Implicit Deepfake Detectorscited by 0
- 2026Frozen DINO Localizes Image Edits Without a Localizercited by 0
- 2026Certification of Real Images through Calibrated Content Authenticationcited by 0
- 2026Certification of Real Images through Calibrated Content Authentication5 Oct 2026
- 2026Frozen DINO Localizes Image Edits Without a Localizer19 Aug 2026
- 2026Foundation Models are Implicit Deepfake Detectors10 Aug 2026
- 2026Dissect and Prune: Enhancing Robustness in AI-Generated Image Detection9 Jun 2026
- 2026DRIFT: From Robustness Gaps to Invariance Manifolds for AI-Generated Image Detection5 Jun 2026
- 2026Micro-Defects Expose Macro-Fakes: Detecting AI-Generated Images via Local Distributional Shifts10 May 2026
- 2026Enhancing Self-Supervised Talking Head Forgery Detection via a Training-Free Dual-System Framework5 May 2026
- 2026Efficient Zero-Shot AI-Generated Image Detection23 Mar 2026
- 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking13 Mar 2026
- 2026Simplicity Prevails: The Emergence of Generalizable AIGI Detection in Visual Foundation Models2 Feb 2026