arXiv Computer Vision

Can Tainted Pixels Expose Deepfake Videos?

The paper introduces TaintedPixels, a proactive video‑protection technique that embeds subtle, structured perturbations into the blue channel of facial regions. These perturbations remain invisible in the original video but become noticeable after black‑box manipulation, thereby flagging deepfakes. Experiments on three off‑the‑shelf manipulation tools and two detectors show that TaintedPixels achieves the highest forgery detection rate while keeping visual distortion minimal (LPIPS = 0.0042), and a human study confirms that protected videos are rarely suspected, whereas forgeries from protected sources are identified as fake far more often than those from unprotected sources.

arXiv Computer Vision
Sep 28

ManiVid: Unified and Explainable Forensic Analysis of Manipulated Videos

ManiVid introduces a unified forensic analysis framework for manipulated videos, combining forgery detection, artifact grounding, and anomaly explanation. The authors release ManiVid-38K, a large dataset of 19K real‑fake video pairs with authenticity labels, forgery masks, and explanations, and a benchmark ManiVidBench with 1K balanced pairs. ManiVidLens, the proposed model, outperforms existing methods in artifact grounding and anomaly explanation while matching state‑of‑the‑art detection accuracy.

By Hengrui Kang, Zhonghao Yan, Yuxuan Yang, Ruoyan Jing, Yuncheng Guo, Hao Chen, Kongming Liang, Zhanyu Ma, Conghui He, Weijia Li
arXiv AI
Aug 28

High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking

The paper introduces VeriFi, a watermarking framework that protects face images from AI‑generated manipulation. It embeds a compact semantic latent watermark to preserve content, localizes pixel‑level edits without explicit payloads, and simulates realistic deepfake attacks to improve robustness. Experiments on CelebA‑HQ and FFHQ show that VeriFi outperforms existing methods in robustness, localization accuracy, and recovery quality.

By Peipeng Yu, Jinfeng Xie, Chengfu Ou, Xiaoyu Zhou, Jianwei Fei, Yunshu Dai, Zhihua Xia, Chip Hong Chang
arXiv Computer Vision
Oct 12

KVeil: First-Place Solution to ECCV 2026 LifeGenIP Challenge on Unlearnable Videos

The paper presents KVeil, the first‑place solution to the ECCV 2026 LifeGenIP Challenge on Unlearnable Videos. It introduces Reference Capacity Collapse and a Motion‑Guided EOT mechanism for Phase 1, and a two‑layer framework that protects facial and background regions for Phase 2, achieving strong protection against various customization attacks. The methods build on the authors’ prior work LETHE and are publicly available on GitHub.

By Boheng Li, Yueming Xing, Yiming Li, Jie Zhang, Han Qiu, Tianwei Zhang
arXiv AI
Sep 30

A Benchmark & Dataset for Detecting AI-Manipulated Visual Evidence in the Court System

arXiv:2609.37783v1 Announce Type: cross Abstract: Photographic evidence is becoming increasingly vulnerable to forms of alteration and fabrication that existing legal and technical workflows are not...

By Kelly McConvey, Sajad Ebrahimi, Nima Jamali, Jalehsadat Mahdavimoghaddam, Matina Mahdizadeh Sani, Maksym Taranukhin, Wentao Zhang, Jacquelyn Burkell, Yuntian Deng, Karen Eltis, Maura R. Grossman, Vered Shwartz, Ebrahim Bagheri
arXiv Computer Vision
Oct 9

Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos

The paper introduces Motion‑Aware Deepfake (MAD) videos, a new class of deepfakes generated by pose‑guided diffusion models that can animate entire human figures. To study this threat, the authors build the first MAD‑specific benchmark with 1.5 million frames from 1,363 real and 30,122 synthetic videos, and analyze the subtle high‑frequency artifacts and spectral fingerprints that arise from limited input frames. Leveraging these insights, they propose MoDA, a defense framework that combines spatial semantics with steganalysis‑rich frequency features, achieving high detection and attribution accuracy across in‑distribution, cross‑dataset, and zero‑shot scenarios, and demonstrating robustness against adaptive attacks.

By Fazhong Liu, Yan Meng, Tian Dong, Guoxing Chen, Haojin Zhu
arXiv Computer Vision
Sep 28

FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models

FeatMark is a watermarking framework that protects images from text‑to‑image diffusion model mimicry attacks by embedding small, scene‑consistent micro‑features instead of pixel‑level perturbations. It constructs domain‑specific feature banks, selects executable features, and injects them via mask‑guided concept editing to create highly localized, natural edits. Experiments on VGGFace2, CelebA‑HQ, and WikiArt show FeatMark remains robust against ten strong watermark removal attacks and several adaptive attacks, with minimal impact on perceptual quality and extending to video mimicry scenarios.

By Haoyang Li, Ruoxi Sun, Qingqing Ye, Benjamin Zi Hao Zhao, Yaxin Xiao, Jason Xue, Haibo Hu
arXiv Computer Vision
Oct 12

LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapse

LETHE is a new protection method that defends against unauthorized image‑to‑video generation by disrupting how diffusion models read a reference image. It achieves this by collapsing the spread of reference value vectors and attracting subsequent frames to these collapsed tokens, thereby severely degrading generated videos. Extensive experiments on modern I2V models and two human‑centric benchmarks show that LETHE outperforms existing protection techniques.

By Boheng Li, Yueming Xing, Yiming Li, Jie Zhang, Tianwei Zhang
arXiv Computer Vision
3d ago

Beyond Generation: Using Multimodal LLMs as Detectors of LLM-Generated Deepfake Facial Images

The paper evaluates whether multimodal large language models (MLLMs) can serve as forensic detectors of deepfake facial images. Six MLLMs—including GPT-4o, GPT-5, GPT-5.2, Gemini 2.5, Gemini 3, and Seed 1.6—were tested on a dataset of 400 images (50 authentic and 350 synthetic) generated by seven leading image models. Results show that several MLLMs achieve high detection accuracy, with GPT-5.2 reaching 97.9% in pairwise comparisons, but the presence of invisible SynthID watermarks can reduce detection performance by about 10% for Gemini.

By Olivia Salamon, Virginia N. L. Franqueira, Shujun Li
Hugging Face Trending Papers
Jun 24

VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks

Recent advancements in Image-to-Video (I2V) generation have transformed input images from simple appearance references into interactive control interfaces where visual cues such as arrows, sketches, and emojis orchestrate complex video dynamics with unprecedented controllability. However, these seemingly innocuous static cues can be interpreted by models as executable temporal instructions, unfolding into harmful actions in the generated videos.