鲁棒性与安全 · CVPR2026 ·2026.06.03

超越[CLS]词元:查询驱动的词元级伪造净化用于可泛化深度伪造检测

Beyond [CLS] Token: Query-Driven Token-Level Forgery Purification for Generalizable Deepfake Detection

Changshuo Wang、Jiangming Wang、Ke-Yue Zhang、Taiping Yao、Shouhong Ding、Shunli Wang 等 8 人

与你有关的部分

针对ViT基础模型在深度伪造检测中[CLS]词元偏向全局语义的问题,提出可学习的查询词元聚合多图像块证据,并设计伪造似然对比损失与真实注意力对齐约束,为利用视觉基础模型做细粒度取证提供了可复用的词元级特征重组方案。

原文依据 the [CLS] token suffers from the Pre-trained Information Bias (PIB)
可迁移到 深度伪造检测图像取证视觉Transformer表征学习

摘要译文

由模型翻译 · 术语统一 · 请对照原文核对关键结论

我们研究了利用基于ViT的视觉基础模型的最优深度伪造检测器,发现[CLS]词元存在预训练信息偏差(PIB),即由于预训练模型参数所主导的知识,它倾向于主要关注全局语义,而难以强调细微的局部伪造线索。为克服这一局限,一种可能的方式是引入词元级特征以重构检测专用词元。为此,我们提出查询驱动的词元级伪造净化(QTFP)框架,以在不丢失有用预训练先验的情况下更好地捕捉局部伪造痕迹。具体而言,我们引入独立于骨干网络和先验知识的随机初始化可学习查询词元,有效将多图像块证据聚合为用于检测的全局词元。为使查询词元关注有意义的区域,我们提出一种理论上的伪造似然对比学习损失,采用加权策略突出显著的伪造区域同时削弱类真实图像块的影响。利用信噪比理论,我们验证了所设计的权重既可靠又具有信息量。为进一步保留有用的真实信息,对查询词元施加真实注意力对齐约束。这些设计通过联合重组所有词元中的真实与伪造信息,超越了仅依赖[CLS]词元的方式,成功增强了检测器的鲁棒性。在多样化数据集上的大量实验证明了我们方法的有效性。

英文原文摘要 1555 字符

We investigate state-of-the-art deepfake detectors that leverage ViT-based vision foundation models and discover that the [CLS] token suffers from the Pre-trained Information Bias (PIB), i.e., it tends to mainly focus on global semantics due to the knowledge dominated by pre-trained model parameters, while struggling to emphasize subtle local forgery cues. To overcome this limitation, one potential way is incorporating the token-level features to reform a detection-specific token. To this end, we propose Query-Driven Token-Level Forgery Purification (QTFP) framework to better capture local forgery traces without losing useful pre-trained prior. Specifically, we introduce randomly initialized, learnable query tokens independent of the backbone and prior knowledge, which effectively aggregate multi-patch evidence into a global token for detection. To make query tokens focus on meaningful regions, we propose a theoretical fake-likelihood contrastive learning loss, which employs a weighting strategy to highlight significant fake regions while diminishing real-like patch impact. Using SNR theory, we verify that the designed weight is both reliable and informative. To further maintain useful authentic information, a real-attention alignment constraint is applied to query tokens. These designs go beyond relying solely on the [CLS] token by jointly reorganizing real and fake information across all tokens, which successfully enhance detector robustness. Extensive experiments on diverse datasets demonstrate the effectiveness of our method.

标签

会议 CVPR2026
页码 42922-42931
Bibkey
来源 CVF Open Access