Source-linked AI summary

FReTAL: Generalizing Deepfake Detection using Knowledge Distillation and Representation Learning

Minha Kim, Shahroz Tariq, Simon S. Woo

arXiv:2105.13617v1cs.CV

TL;DR

Deepfake detectors can struggle with new generation methods, while adapting to new domains risks forgetting prior knowledge. FReTAL uses representation learning and knowledge distillation for adaptation without source-domain data. The paper reports improved baseline performance, including up to 86.97% accuracy on low-quality deepfakes.

  • Problem

    Deepfake detection performance can suffer on new types of deepfakes, and adapting across domains can lead to catastrophic forgetting of previously learned information.

    Source: §2.2 · p. 3
  • Method

    FReTAL transfers representations from a pretrained teacher to a target-domain student using knowledge distillation and representation learning without source-domain data.

    Source: §1 · p. 2, §3 · p. 3
  • Results

    Up to 86.97% accuracy on low-quality deepfakes, FReTAL outperforms baseline approaches on deepfake benchmark datasets.

    Source: §1 · p. 2
  • Takeaways & Limitations

    FReTAL adapts to new deepfake types with reasonable performance using as few as ten target-domain samples.

    Source: §7 · p. 8

    Models trained on low-quality deepfakes do not perform well on high-quality deepfakes unless the high-quality videos are compressed to low quality.

    Source: §6 · p. 8

Abstract

from arXiv · show

As GAN-based video and image manipulation technologies become more sophisticated and easily accessible, there is an urgent need for effective deepfake detection technologies. Moreover, various deepfake generation techniques have emerged over the past few years. While many deepfake detection methods have been proposed, their performance suffers from new types of deepfake methods on which they are not sufficiently trained. To detect new types of deepfakes, the model should learn from additional data without losing its prior knowledge about deepfakes (catastrophic forgetting), especially when new deepfakes are significantly different. In this work, we employ the Representation Learning (ReL) and Knowledge Distillation (KD) paradigms to introduce a transfer learning-based Feature Representation Transfer Adaptation Learning (FReTAL) method. We use FReTAL to perform domain adaptation tasks on new deepfake datasets while minimizing catastrophic forgetting. Our student model can quickly adapt to new types of deepfake by distilling knowledge from a pre-trained teacher model and applying transfer learning without using source domain data during domain adaptation. Through experiments on FaceForensics++ datasets, we demonstrate that FReTAL outperforms all baselines on the domain adaptation task with up to 86.97% accuracy on low-quality deepfakes.

1. Introduction

Deepfake detectors often generalize poorly to novel generation methods, particularly on compressed, low-quality videos. FReTAL combines representation learning and knowledge distillation for domain adaptation without source-domain data, and the paper reports stronger baseline performance.

1. Introduction

  • Up to 86.97% accuracy on low-quality deepfakes, FReTAL outperforms baseline approaches; Figure 1 reports significantly better performance than zero-shot and fine-tuning in its low-quality case.Figure 1 uses Face2Face as the source and FaceSwap as the target, with Xception as the backbone.Source: Figure 1 · p. 1, §1 · p. 2
  • Detectors that score highly on one deepfake dataset can perform poorly on novel generation methods, especially compressed videos common on social media.The introduction identifies low-quality deepfakes as the paper’s focus.Source: §1 · p. 2
  • The authors argue that developing a separate large training dataset for each generation method is unrealistic and focus on generalization under data scarcity.They note that high-quality deepfakes are relatively easier to detect and therefore emphasize low-quality cases.Source: §1 · p. 2
  • FReTAL combines knowledge distillation and representation learning to transfer representations from a source-domain teacher to a target-domain student without source-domain data.The paper presents this as a way to prevent catastrophic forgetting during domain adaptation.Source: §1 · p. 2

2. Background and Related Work

The section surveys deepfake generation and detection, then introduces representation learning, domain adaptation, and knowledge distillation as relevant foundations. It highlights that domain adaptation can risk forgetting prior knowledge, while some existing approaches retain source-domain information.

2.1. Deepfakes

  • Deepfake generation methods differ in implementation and continue to evolve, producing varied types of deepfakes.Open-source neural style-transfer applications are described as a straightforward approach used to create deepfakes at scale.Source: §2.1 · pp. 2–3
  • Detection research spans DNN-based methods and cues such as splice artifacts, eye blinking, signal artifacts, head pose, and behavior patterns.The section notes limited prior domain-adaptation work for deepfake detection, using high-quality or c23-compressed videos rather than the paper’s high-compression setting.Source: §2.1 · p. 3

2.2. Representation Learning

  • Representation learning transforms or extracts input features to make classification or prediction easier, while domain adaptation transfers a model between related domains with shared feature spaces but different distributions.The section distinguishes this from broader transfer learning, which can involve different feature spaces.Source: §2.2 · p. 3
  • Feature-based domain adaptation initializes a model with source-trained weights and then learns on target data, but dissimilar domains can cause catastrophic forgetting of previously learned information.The paper describes catastrophic forgetting as abrupt loss of learned information upon learning new information.Source: §2.2 · p. 3
  • Knowledge distillation transfers a teacher’s knowledge to a student; prior approaches preserve source knowledge through distillation or stored exemplars, which can require substantial memory and raise privacy concerns.The section motivates a representation-learning approach that avoids storing or using source data during transfer learning.Source: §2.2 · p. 3

3. FReTAL

FReTAL adapts deepfake detectors to a target domain using target data alone, combining feature-based representation learning with distillation from a fixed source teacher. It is motivated by catastrophic forgetting and the practical unavailability or privacy sensitivity of source data.

  • FReTAL uses target-domain data alone during adaptation, applying knowledge distillation from a pretrained teacher to address catastrophic forgetting without retaining source data.The paper notes that source data may be unavailable or raise privacy concerns.Source: §3 · p. 3
  • Faces are detected with MTCNN, cropped and center-aligned to 128 × 128 × 3 without stretching their aspect ratio.Source: §3 · p. 3
  • The source-trained teacher is frozen, its weights initialize the student, and only the student is trained on the target domain.The student is trained using knowledge distillation and feature-based representation learning.Source: §3 · p. 4
  • Feature-based learning compares teacher and student representations on target data, storing distinguishable softmax features in intervals to reduce domain shifting.Real and fake features are stored separately, and their difference is measured with a feature-based square loss.Source: §3 · p. 4
  • The method also applies temperature-softened knowledge distillation and cross-entropy losses while training the student on target data.The combined FReTAL objective weights feature-square, distillation, and cross-entropy losses with three scaling factors.Source: §3 · pp. 4–5

4. Experiment

The experiments compare FReTAL with transfer-learning and detection baselines using FaceForensics++ datasets. They describe the dataset split, implementation, and teacher-to-student adaptation setup; the supplied result passage reports Xception as the strongest teacher baseline on high-quality source data.

4. Experiment

  • The experiment compares FReTAL with transfer-learning methods and describes implementation, training, and testing procedures.Source: §4 · p. 5

4.1. Dataset Description

  • FaceForensics++ pristine videos and four manipulation datasets support training and evaluation, with 750 videos for teacher training, ten for adaptation, and 125 each for validation and testing.The source-domain dataset is not used during transfer learning.Source: §4.1 · p. 5

4.2. Baselines

  • The detection baselines include CNN+LSTM, DenseNet with a bidirectional RNN, ShallowNet, and Xception.Source: §4.2 · p. 5

4.3. Domain Adaptation Methods

  • The compared adaptation methods include fine-tuning, T-GD, and a KD-only variant applied to Xception.T-GD combines L2-SP and self-training; the KD variant uses only the distillation-loss component.Source: §4.3 · p. 5
  • Xception performs best among the baselines on the high-quality source dataset.Source: Table 2 · p. 6

4.4. Implementation Details of FReTAL

  • Implementation uses Xception, SGD, early stopping, MTCNN landmarks, CutMix, and F1-score evaluation.Videos yield 16 samples of five consecutive frames; testing uses 125 real and 125 deepfake videos.Source: §4.4 · p. 6

4.5. Configuring Training Models

  • The teacher is trained on 750 real and 750 deepfake source videos, frozen, and copied to initialize a student trained on target data without source examples.Source: §4.5 · p. 6

5. Results

The results compare teacher performance with student transfer across high- and low-quality deepfakes, finding FReTAL strongest across low-quality source-to-target configurations. Ablations indicate that feature representation learning and student cross-entropy contribute to its advantage over KD.

5.1. Performance of Teacher

  • On the high-quality teacher evaluation, Xception leads the four baselines, but its low-quality zero-shot performance is poor outside the source domain.The authors use Xception for subsequent experiments and conclude that detectors perform well mainly on deepfake types seen in training.Source: §5.1 · p. 6

5.2. Performance of Student using FReTAL

  • On high-quality transfer, Xception + FReTAL performs best in most scenarios, while Xception + KD performs better for F2F→DF and FS→DF.The reported table includes only selected source-to-target configurations.Source: §5.2 · p. 6, Table 4 · p. 7
  • Xception + FReTAL performs best across all low-quality source-to-target configurations, and the study reports robustness to catastrophic forgetting.The table covers selected configurations; the authors attribute some fine-tuning failures to catastrophic forgetting.Source: Table 5 · p. 7, §5.2 · p. 7

5.3. Ablation Study: Feature Representation

  • Removing feature-based representation learning and student cross-entropy makes FReTAL similar to KD, which performs worse in most reported scenarios.The authors interpret this comparison as showing that both components are necessary for better performance.Source: §5.3 · p. 7

6. Discussion

The discussion identifies boundaries in dataset coverage, image quality, and deepfake type. It also describes future directions for mixed-quality detection and adaptation to additional deepfake settings.

Evaluation of DFDC and CelebDF

  • DFDC and CelebDF are not included in the experiments; the authors plan to evaluate them in future work.They caution that poor performance on low-quality FaceForensics++ may also indicate difficulty on these more complex datasets.Source: §6 · pp. 7–8

Performance on Low-quality Deepfakes

  • Transfer learning on low-quality deepfakes remains below 90%, leaving room for improvement; superresolution augmentation is proposed as a possible way to reduce the gap.Source: §6 · p. 8

Mixed LQ and HQ Deepfake Detection

  • Models trained on low-quality deepfakes also perform poorly on high-quality ones unless the high-quality data receives matching compression.The authors identify programmatic quality identification and mixed-quality datasets such as DFDC as future research directions.Source: §6 · p. 8

Limitations and Future Work

  • The work does not explore talking-head or full-body gesture-based deepfakes, leaving generalization to those types for future study.The authors also propose few-shot augmentation, adaptation to other detectors, alternative training strategies, and multi-domain adaptation.Source: §6 · p. 8

7. Conclusion

FReTAL supports domain adaptation to new deepfake types, including in the more challenging low-quality setting. The authors report that KD loss without source data can reduce catastrophic forgetting and that adaptation can use as few as ten target-domain samples.

7. Conclusion

  • The method uses feature storage and KD loss in a teacher-student network whose teacher is not trained on the target domain.Source: §7 · p. 8
  • Domain adaptation for deepfake detection is more challenging for low-quality images than for high-quality ones.Source: §7 · p. 8
  • FReTAL adapts to new deepfake types with reasonable performance using as few as ten target-domain samples.Source: §7 · p. 8
  • KD loss without source data can reduce catastrophic forgetting, described here as domain shifting in deepfake detection.Source: §7 · p. 8
  • Future work will explore more target-data augmentation and apply FReTAL to improve adaptability and generalization in CLRNet and Mesonet.Source: §7 · p. 8
Loading 2105.13617v1…