arXiv Machine Learning

When Does Training on Synthetic Data Provably Work?

arXiv Machine Learning
Aug 11

From Fake to Real: Pretraining on Balanced Synthetic Images to Prevent Spurious Correlations in Image Recognition

arXiv:2308. 04553v4 Announce Type: replace-cross Abstract: Visual recognition models are prone to learning spurious correlations induced by a biased training set where certain conditions $B$ (\eg, Indoors) are over-represented in certain classes $Y$ (\eg, Big Dogs).

By Maan Qraitem, Kate Saenko, Bryan A. Plummer
arXiv Machine Learning
Sep 22

EmbeddGAN: A Novel GAN Framework Using an Embedding Network and Gini Distance Correlation

EmbeddGAN introduces a new GAN framework that replaces the traditional discriminator with an embedding network trained to maximize statistical dependence between embeddings and real/fake labels using Gini distance correlation (gCor). The generator simultaneously minimizes this dependence, encouraging real and generated samples to become indistinguishable in the learned low‑dimensional embedding space. Experiments on MNIST, CIFAR‑10, and CelebA show competitive performance and notably more stable training dynamics compared to established baselines.

By MaTais Caldwell, Yixin Chen, Xin Dang, Charles Walter
Hugging Face Trending Papers
Oct 5

Certification of Real Images through Calibrated Content Authentication

The paper examines the reliability of deepfake detectors, noting a decline in accuracy from 99.5% to 76% over four years and a drastic drop below 2% when adversarial perturbations are applied. It argues that content alone cannot determine provenance because generators can perfectly reproduce authentic images, so a new detection approach is proposed that certifies authenticity only if a generator cannot faithfully reconstruct the content. The authors demonstrate that their calibrated detector can limit false certifications to 1% while maintaining robustness against bounded‑perturbation attacks, though it struggles with arbitrary transformations.

arXiv Computer Vision
Oct 8

Certification of Real Images through Calibrated Content Authentication

The paper evaluates twenty deepfake detectors against ten recent generators, finding that accuracy has dropped from 99.5% to 76% and that adversarial perturbations can reduce detector performance to below 2%. It proposes a new detection paradigm that certifies authenticity only when a faithful reconstruction by a known generator is impossible, and shows that this calibrated detector can limit false certifications to at most 1% while remaining robust to bounded‑perturbation attacks. The study also highlights the erosion of post‑hoc verifiability, noting that newer generators can reproduce a larger fraction of previously unreplicable images.

By Sarim Hashmi, Abdelrahman Elsayed, Mohammed Talha Alam, Samuele Poppi, Nils Lukas