{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,24]],"date-time":"2025-08-24T00:01:00Z","timestamp":1755993660897,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,24]],"date-time":"2024-06-24T00:00:00Z","timestamp":1719187200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Natural Science Foundation of China","award":["62072481"],"award-info":[{"award-number":["62072481"]}]},{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2336208"],"award-info":[{"award-number":["U2336208"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,24]]},"DOI":"10.1145\/3658664.3659653","type":"proceedings-article","created":{"date-parts":[[2024,6,12]],"date-time":"2024-06-12T15:09:27Z","timestamp":1718204967000},"page":"159-164","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Evading DeepFake Detectors via Conditional Diffusion Models"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-7892-8953","authenticated-orcid":false,"given":"Wenhao","family":"Wang","sequence":"first","affiliation":[{"name":"School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3098-3373","authenticated-orcid":false,"given":"Fangjun","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,6,24]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3253390"},{"key":"e_1_3_2_1_2_1","volume-title":"ILVR: Conditioning Method for Denoising Diffusion Probabilistic Models. In ICCV. 14367--14376.","author":"Choi Jooyoung","year":"2021","unstructured":"Jooyoung Choi, Sungwon Kim, Yonghyun Jeong, Youngjune Gwon, and Sungroh Yoon. 2021. ILVR: Conditioning Method for Denoising Diffusion Probabilistic Models. In ICCV. 14367--14376."},{"key":"e_1_3_2_1_3_1","volume-title":"Stargan: Unified generative adversarial networks for multi-domain image-to-image translation. In CVPR. 8789--8797.","author":"Choi Yunjey","year":"2018","unstructured":"Yunjey Choi, Minje Choi, Munyoung Kim, Jung-Woo Ha, Sunghun Kim, and Jaegul Choo. 2018. Stargan: Unified generative adversarial networks for multi-domain image-to-image translation. In CVPR. 8789--8797."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Yunjey Choi Youngjung Uh Jaejun Yoo and Jung-Woo Ha. 2020. Stargan v2: Diverse image synthesis for multiple domains. In CVPR. 8188--8197.","DOI":"10.1109\/CVPR42600.2020.00821"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Yinpeng Dong Fangzhou Liao Tianyu Pang Hang Su Jun Zhu Xiaolin Hu and Jianguo Li. 2018. Boosting adversarial attacks with momentum. In CVPR. 9185--9193.","DOI":"10.1109\/CVPR.2018.00957"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Apurva Gandhi and Shomik Jain. 2020. Adversarial perturbations fool deepfake detectors. In IJCNN. 1--8.","DOI":"10.1109\/IJCNN48605.2020.9207034"},{"key":"e_1_3_2_1_7_1","volume-title":"EXPLAINING AND HARNESSING ADVERSARIAL EXAMPLES. stat","author":"Goodfellow Ian J","year":"2015","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. EXPLAINING AND HARNESSING ADVERSARIAL EXAMPLES. stat , Vol. 1050 (2015), 20."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2016. Deep residual learning for image recognition. In CVPR. 770--778.","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_9_1","unstructured":"Jonathan Ho Ajay Jain and Pieter Abbeel. 2020. Denoising diffusion probabilistic models. In NeurIPS. 6840--6851."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Yang Hou Qing Guo Yihao Huang Xiaofei Xie Lei Ma and Jianjun Zhao. 2023. Evading DeepFake Detectors via Adversarial Statistical Consistency. In CVPR. 12271--12280.","DOI":"10.1109\/CVPR52729.2023.01181"},{"key":"e_1_3_2_1_11_1","unstructured":"Tero Karras Timo Aila Samuli Laine and Jaakko Lehtinen. 2018. Progressive Growing of GANs for Improved Quality Stability and Variation. In ICLR."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Tero Karras Samuli Laine and Timo Aila. 2019. A Style-Based Generator Architecture for Generative Adversarial Networks. In CVPR. 4396--4405.","DOI":"10.1109\/CVPR.2019.00453"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"Tero Karras Samuli Laine Miika Aittala Janne Hellsten Jaakko Lehtinen and Timo Aila. 2020. Analyzing and improving the image quality of stylegan. In CVPR. 8110--8119.","DOI":"10.1109\/CVPR42600.2020.00813"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Lingzhi Li Jianmin Bao Ting Zhang Hao Yang Dong Chen Fang Wen and Baining Guo. 2020. Face x-ray for more general face forgery detection. In CVPR. 5001--5010.","DOI":"10.1109\/CVPR42600.2020.00505"},{"key":"e_1_3_2_1_15_1","unstructured":"Yuchen Luo Yong Zhang Junchi Yan and Wei Liu. 2021. Generalizing face forgery detection with high-frequency features. In CVPR. 16317--16326."},{"key":"e_1_3_2_1_16_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2018. Towards Deep Learning Models Resistant to Adversarial Attacks. In ICLR."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Konpat Preechakul Nattanat Chatthee Suttisak Wizadwongsa and Supasorn Suwajanakorn. 2022. Diffusion autoencoders: Toward a meaningful and decodable representation. In CVPR. 10619--10629.","DOI":"10.1109\/CVPR52688.2022.01036"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Yuyang Qian Guojun Yin Lu Sheng Zixuan Chen and Jing Shao. 2020. Thinking in frequency: Face forgery detection by mining frequency-aware clues. In ECCV. 86--103.","DOI":"10.1007\/978-3-030-58610-2_6"},{"key":"e_1_3_2_1_19_1","volume-title":"Faceforensics: Learning to detect manipulated facial images. In ICCV. 1--11.","author":"Rossler Andreas","year":"2019","unstructured":"Andreas Rossler, Davide Cozzolino, Luisa Verdoliva, Christian Riess, Justus Thies, and Matthias Nie\u00dfner. 2019. Faceforensics: Learning to detect manipulated facial images. In ICCV. 1--11."},{"key":"e_1_3_2_1_20_1","volume-title":"NeurIPS. Curran Associates","author":"Schwarz Katja","year":"1812","unstructured":"Katja Schwarz, Yiyi Liao, and Andreas Geiger. 2022. On the Frequency Bias of Generative Models. In NeurIPS. Curran Associates, Inc., 18126--18136."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Fahad Shamshad Koushik Srivatsan and Karthik Nandakumar. 2023. Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces. In CVPR. 16469--16478.","DOI":"10.1109\/CVPR52729.2023.01580"},{"key":"e_1_3_2_1_22_1","unstructured":"Jiaming Song Chenlin Meng and Stefano Ermon. 2020. Denoising Diffusion Implicit Models. In ICLR."},{"key":"e_1_3_2_1_23_1","first-page":"3998","article-title":"NIMA: Neural image assessment","volume":"27","author":"Talebi Hossein","year":"2018","unstructured":"Hossein Talebi and Peyman Milanfar. 2018. NIMA: Neural image assessment. IEEE TIP, Vol. 27, 8 (2018), 3998--4011.","journal-title":"IEEE TIP"},{"key":"e_1_3_2_1_24_1","volume-title":"Efficientnet: Rethinking model scaling for convolutional neural networks. In ICML. 6105--6114.","author":"Tan Mingxing","year":"2019","unstructured":"Mingxing Tan and Quoc Le. 2019. Efficientnet: Rethinking model scaling for convolutional neural networks. In ICML. 6105--6114."},{"key":"e_1_3_2_1_25_1","volume-title":"Semantic Adversarial Attacks via Diffusion Models. arXiv preprint arXiv:2309.07398","author":"Wang Chenan","year":"2023","unstructured":"Chenan Wang, Jinhao Duan, Chaowei Xiao, Edward Kim, Matthew Stamm, and Kaidi Xu. 2023. Semantic Adversarial Attacks via Diffusion Models. arXiv preprint arXiv:2309.07398 (2023)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"Xiaosen Wang and Kun He. 2021. Enhancing the transferability of adversarial attacks through variance tuning. In CVPR. 1924--1933.","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"Richard Zhang Phillip Isola Alexei A Efros Eli Shechtman and Oliver Wang. 2018a. The unreasonable effectiveness of deep features as a perceptual metric. In CVPR. 586--595.","DOI":"10.1109\/CVPR.2018.00068"},{"key":"e_1_3_2_1_28_1","first-page":"36","article-title":"Blind image quality assessment using a deep bilinear convolutional neural network","volume":"30","author":"Zhang Weixia","year":"2018","unstructured":"Weixia Zhang, Kede Ma, Jia Yan, Dexiang Deng, and Zhou Wang. 2018b. Blind image quality assessment using a deep bilinear convolutional neural network. IEEE TCSVT, Vol. 30, 1 (2018), 36--47.","journal-title":"IEEE TCSVT"}],"event":{"name":"IH&MMSEC '24: ACM Workshop on Information Hiding and Multimedia Security","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Baiona Spain","acronym":"IH&MMSEC '24"},"container-title":["Proceedings of the 2024 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659653","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658664.3659653","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:43:58Z","timestamp":1755906238000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659653"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,24]]},"references-count":28,"alternative-id":["10.1145\/3658664.3659653","10.1145\/3658664"],"URL":"https:\/\/doi.org\/10.1145\/3658664.3659653","relation":{},"subject":[],"published":{"date-parts":[[2024,6,24]]},"assertion":[{"value":"2024-06-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}