DCHVF-GAN: Synthesizing Adversarial DeepFakes with High Visual Fidelity by Multimodality Fusion
Deepfake, an AI-driven face-swapping technique, has been weaponized to spread disinformation. In response, researchers have developed forensic detectors to identify such manipulations. To circumvent these defenses, a growing body of work now focuses on generating adversarial samples—carefully perturbed forgeries designed to deceive detection tools. However, most existing adversarial generation methods sacrifice image quality to achieve undetectability, introducing perceptible artifacts that ironically make them more detectable under human scrutiny. To address this limitation, we propose a novel spectral fusion approach to multimodally synthesize forgery traces from authentic facial images. Unlike traditional noise injection methods, our technique integrates diffusion-based noise during image preprocessing, embedding perturbations in the forward process of a diffusion model. This approach not only deceives forensic detectors more effectively but also preserves high visual fidelity. Through extensive experiments, our method achieves state-of-the-art DeepFake anti-forensic performance while preserving high visual fidelity, ensuring that the adversarial samples remain indistinguishable from real images.
Authors
- 况任生
- Guopu Zhu (ORCID: https://orcid.org/0000-0001-7956-5343)
- Xinan He
- Pradeep K. Atrey (ORCID: https://orcid.org/0000-0002-9577-0969)
- Feng Ding (ORCID: https://orcid.org/0000-0002-3069-8337)
- Xiaogang Zhu (ORCID: https://orcid.org/0000-0003-4286-9620)
- Mengyao Xiao (ORCID: https://orcid.org/0009-0005-2877-7721)
Institutions
- Harbin Institute of Technology (CN)
- University at Albany, State University of New York (US)
- Science Exchange (United States) (US)
Publication Details
- Journal
- ACM Transactions on Multimedia Computing Communications and Applications
- Published
- 2026-05-16
- DOI
- https://doi.org/10.1145/3808697
- Primary Topic
- Generative Adversarial Networks and Image Synthesis
- Type
- article
- Field-Weighted Citation Impact
- 0.00