Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

Exposing and Mitigating Temporal Attack in Deepfake Video Detection

About

While spatiotemporal deepfake detectors achieve high AUC, our experiments reveal their susceptibility to evasion attacks. These models tend to overfit on fragile temporal spectrum cues, rather than learning robust semantic causality. To mitigate this vulnerability, we propose SpInShield, a temporal spectral-invariant defense framework explicitly designed to decouple semantic motion from manipulatable spectral artifacts. We propose a learnable spectral adversary that dynamically synthesizes severe spectral deformations, simulating extreme attack scenarios. By employing a shortcut suppression optimization strategy, SpInShield compels the encoder to extract reliable forensic cues while purging unstable spectral statistics from the latent space. Experiments show that SpInShield obtains competitive performance on widely used datasets and outperforms the strongest baseline by 21.30 percentage points in AUC under simulated amplitude spectral attacks.

Zheyuan Gu, Minghao Shao, Zhen Wang, Yusong Wang, Mingkun Xu, Shijie Zhang, Hao Jiang• 2026

Related benchmarks

TaskDatasetResultRank
Deepfake DetectionDFD
AUC0.981
193
Deepfake DetectionCelebDF v2
AUC0.948
134
Deepfake DetectionCDF v2
AUC0.9052
97
Deepfake DetectionFaceForensics++ (test)
AUC89.92
65
Image Deepfake DetectionDFo
AUC0.9481
62
Deepfake DetectionWDF
AUC0.889
54
Deepfake DetectionFaceForensics++ c23 (test)
AUC99.6
52
Deepfake DetectionWildDeepfake (WDF)
Video-level AUC0.6183
31
Deepfake DetectionDiF
AUC0.8528
22
Deepfake DetectionDaG
AUC83.92
22
Showing 10 of 22 rows

Other info

Follow for update