PRADA: Probability-Ratio-Based Attribution and Detection of Autoregressive-Generated Images
Not on the map. Why?
Abstract (arXiv)
Autoregressive (AR) image generation has recently emerged as a powerful paradigm for image synthesis. Leveraging the generation principle of large language models, they allow for efficiently generating deceptively real-looking images, further increasing the need for reliable detection methods. However, to date there is a lack of work specifically targeting the detection of images generated by AR image generators. In this work, we present PRADA (Probability-Ratio-Based Attribution and Detection of Autoregressive-Generated Images), a simple and interpretable approach that can reliably detect AR-generated images and attribute them to their respective source model. The key idea is to inspect the ratio of a model's conditional and unconditional probability for the autoregressive token sequence representing a given image. Whenever an image is generated by a particular model, its probability ratio shows unique characteristics which are not present for images generated by other models or real images. We exploit these characteristics for threshold-based attribution and detection by calibrating a simple, model-specific score function. Our experimental evaluation shows that PRADA is highly effective against eight class-to-image and four text-to-image models. We release our code and data at github.com/jonasricker/prada.
Key facts. Cited by 1 paper in the map (data through 13 Oct 2026). Builds on 65 of its 87 references that are in the map. First posted on arXiv 25 Nov 2025.
Builds on
65 of 87 references.
References · 65
- 2015Deep Residual Learning for Image Recognitioncited by 51,950
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,588
- 2020Denoising Diffusion Probabilistic Modelscited by 20,952
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,777
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,213
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,857
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,564
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,339
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,103
- 2022Classifier-Free Diffusion Guidancecited by 5,785
- 2017Neural Discrete Representation Learningcited by 4,680
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,077
38 more
- 2015Fast and Accurate Deep Network Learning by Exponential Linear Units (ELUs)cited by 1,061
- 2024Visual Autoregressive Modeling: Scalable Image Generation via Next-Scale Predictioncited by 1,012
- 2019CNN-generated images are surprisingly easy to spot... for nowcited by 846
- 2016Pixel Recurrent Neural Networkscited by 815
- 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 799
- 2024Autoregressive Model Beats Diffusion: Llama for Scalable Image Generationcited by 764
- 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 504
- 2023Towards Universal Fake Image Detectors that Generalize Across Generative Modelscited by 488
- 2019Likelihood Ratios for Out-of-Distribution Detectioncited by 451
- 2024Janus: Decoupling Visual Encoding for Unified Multimodal Understanding and Generationcited by 451
- 2018Do Deep Generative Models Know What They Don't Know?cited by 443
- 2023DIRE for Diffusion-Generated Image Detectioncited by 389
- 2023Detecting Pretraining Data from Large Language Modelscited by 383
- 2024Infinity: Scaling Bitwise AutoRegressive Modeling for High-Resolution Image Synthesiscited by 300
- 2019Detecting and Simulating Artifacts in GAN Fake Imagescited by 293
- 2022On the detection of synthetic images generated by diffusion modelscited by 283
- 2020Watch your Up-Convolution: CNN Based Generative Deep Neural Networks are Failing to Reproduce Spectral Distributionscited by 279
- 2020What makes fake images detectable? Understanding properties that generalizecited by 273
- 2018Do GANs leave artificial fingerprints?cited by 190
- 2022DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Modelscited by 168
- 2023Raising the Bar of AI-generated Image Detection with CLIPcited by 164
- 2021Are GAN generated images easy to detect? A critical analysis of the state-of-the-artcited by 139
- 2019Fourier Spectrum Discrepancies in Deep Network Generated Imagescited by 138
- 2024Randomized Autoregressive Visual Generationcited by 126
- 2024AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Errorcited by 125
- 2019Detecting GAN generated Fake Images using Co-occurrence Matricescited by 124
- 2023Intriguing properties of synthetic images: from generative adversarial networks to diffusion modelscited by 122
- 2022Towards the Detection of Diffusion Model Deepfakescited by 111
- 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 102
- 2024Leveraging Representations from Intermediate Encoder-blocks for Synthetic Image Detectioncited by 89
- 2022The Creativity of Text-to-Image Generationcited by 73
- 2024A Bias-Free Training Paradigm for More General AI-generated Image Detectioncited by 67
- 2021Towards Discovery and Attribution of Open-world GAN Generated Imagescited by 66
- 2023Shadows Don't Lie and Lines Can't Bend! Generative Models don't know Projective Geometry...for nowcited by 61
- 2024FakeInversion: Learning to Detect Images from Unseen Text-to-Image Models by Inverting Stable Diffusioncited by 61
- 2020Exposing GAN-generated Faces Using Inconsistent Corneal Specular Highlightscited by 59
- 2024Zero-Shot Detection of AI-Generated Imagescited by 50
- 2021Eyes Tell All: Irregular Pupil Shapes Reveal GAN-generated Facescited by 48
50 most cited of 65 All 65 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026MGI: Member vs Generated Inferencecited by 0
- 2026MGI: Member vs Generated Inference22 Jun 2026