DeepFake detection against adversarial examples based on D‐VAEGAN

Abstract

AbstractRecent years, the development of DeepFake has raise a lot of security problems. Therefore, detection of DeepFake is critical. However, the existing DeepFake detection methods are often vulnerable to adversarial attacks, i.e. adding carefully crafted imperceptible perturbations into forged images is possible to evade detection. In this paper, a DeepFake detection method based on image denoising is proposed by combining variational autoencoder (VAE) and generative adversarial network (GAN), namely D‐VAEGAN. Firstly, an encoder is designed to extract the features of the image in a low‐dimensional latent space. Then, a decoder reconstructs the original clean image using the features in this low‐dimensional latent space. Secondly, an auxiliary discriminative network is introduced to further improve the performance of the model, which improves the quality of the reconstructed images. Furthermore, feature similarity loss is added as a penalty term to the reconstruction optimization function to improve the adversarial robustness. Experimental results on the FaceForensics++ dataset show that the proposed approach significantly outperforms the five adversarial training‐based defence methods. The approach achieves 96% in accuracy, which is on average about 50% higher than other comparison methods.