Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Evading Deepfake-Image Detectors with White- and Black-Box Attacks   It is now possible to synthesize highly realistic images of people who don't
exist. Such content has, for example, been implicated in the creation of
fraudulent social-media profiles responsible for dis-information campaigns.
Significant efforts are, therefore, being deployed to detect
synthetically-generated content. One popular forensic approach trains a neural
network to distinguish real from synthetic content.
  We show that such forensic classifiers are vulnerable to a range of attacks
that reduce the classifier to near-0% accuracy. We develop five attack case
studies on a state-of-the-art classifier that achieves an area under the ROC
curve (AUC) of 0.95 on almost all existing image generators, when only trained
on one generator. With full access to the classifier, we can flip the lowest
bit of each pixel in an image to reduce the classifier's AUC to 0.0005; perturb
1% of the image area to reduce the classifier's AUC to 0.08; or add a single
noise pattern in the synthesizer's latent space to reduce the classifier's AUC
to 0.17. We also develop a black-box attack that, with no access to the target
classifier, reduces the AUC to 0.22. These attacks reveal significant
vulnerabilities of certain image-forensic classifiers.

23
The categories of this paper are: solv-int
4
The categories of this paper are: cond-mat
15
The categories of this paper are: nucl-ex
21
The categories of this paper are: adap-org
19
The categories of this paper are: eess
27
The categories of this paper are: comp-gas
8
The categories of this paper are: hep-ex
29
The categories of this paper are: funct-an
24
The categories of this paper are: dg-ga
28
The categories of this paper are: alg-geom
17
The categories of this paper are: q-fin
36
The categories of this paper are: cmp-lg
35
The categories of this paper are: mtrl-th
13
The categories of this paper are: quant-ph
6
The categories of this paper are: astro-ph
2
The categories of this paper are: math