dChan - Q Origins Project Archive

Looks like they are again trying to get out ahead of…something?

Should I be surprised this researcher's last name = "Hussain"?

----------—

Deepfake Detectors Can Be Defeated, Computer Scientists Show For The First Time

BY TYLER DURDEN

MONDAY, FEB 08, 2021 - 16:23

University of California, San Diego Via EurekAlert.com (emphasis ours)

Systems designed to detect deepfakes videos that manipulate real-life footage via artificial intelligencecan be deceived, computer scientists showed for the first time at the WACV 2021 conference which took place online Jan. 5 to 9, 2021.

Researchers showed detectors can be defeated by inserting inputs called adversarial examples into every video frame. The adversarial examples are slightly manipulated inputs which cause artificial intelligence systems such as machine learning models to make a mistake. In addition, the team showed that the attack still works after videos are compressed.

"Our work shows that attacks on deepfake detectors could be a real-world threat," said Shehzeen Hussain, a UC San Diego computer engineering Ph.D. student and first co-author on the WACV paper. "More alarmingly, we demonstrate that it's possible to craft robust adversarial deepfakes in even when an adversary may not be aware of the inner workings of the machine learning model used by the detector."

In deepfakes, a subject's face is modified in order to create convincingly realistic footage of events that never actually happened. As a result, typical deepfake detectors focus on the face in videos: first tracking it and then passing on the cropped face data to a neural network that determines whether it is real or fake. For example, eye blinking is not reproduced well in deepfakes, so detectors focus on eye movements as one way to make that determination. State-of-the-art Deepfake detectors rely on machine learning models for identifying fake videos.

https://www.zerohedge.com/technology/deepfake-detectors-can-be-defeated-computer-scientists-show-first-time