Deepfakes pose an evolving cybersecurity threat that calls for the development of automated countermeasures. While considerable forensic research has been devoted to the detection and localisation of deepfakes, solutions for 'fake-to-real' reversal are yet to be developed. In this study, we introduce the concept of cyber vaccination for conferring immunity to deepfakes. In other words, we aim to impart a self-healing ability to the face-containing media so that the original content can be recovered after manipulation by AI-based deepfake technology. Analogous to biological vaccination which uses injected antigens to induce immunity prior to infection by an actual pathogen, cyber vaccination simulates deepfakes and performs adversarial training to build a defensive immune system. Aiming to build up attack-agnostic immunity with limited computational resources, we propose simulating various deepfakes with one single overpowering attack: face masking. The proposed immune system consists of a vaccinator for inducing immunity and a neutraliser for recovering facial content. Experimental evaluations demonstrate effective immunity to face replacement and various types of corruption.
CITATION STYLE
Chang, C. C., Nguyen, H. H., Yamagishi, J., & Echizen, I. (2023). Cyber Vaccine for Deepfake Immunity. IEEE Access, 11, 105027–105039. https://doi.org/10.1109/ACCESS.2023.3311461
Mendeley helps you to discover research relevant for your work.