LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks

TL;DR

LampMark introduces a training-free, landmark-based perceptual watermarking method for proactive Deepfake detection, enhancing robustness and generalizability against hyper-realistic synthetic facial images.

Contribution

The paper presents a novel, training-free landmark perceptual watermarking framework that improves Deepfake detection accuracy and robustness without relying on extensive training data.

Findings

Superior watermark recovery accuracy

Enhanced Deepfake detection performance

Effective across various datasets and manipulation types

Abstract

Deepfake facial manipulation has garnered significant public attention due to its impacts on enhancing human experiences and posing privacy threats. Despite numerous passive algorithms that have been attempted to thwart malicious Deepfake attacks, they mostly struggle with the generalizability challenge when confronted with hyper-realistic synthetic facial images. To tackle the problem, this paper proposes a proactive Deepfake detection approach by introducing a novel training-free landmark perceptual watermark, LampMark for short. We first analyze the structure-sensitive characteristics of Deepfake manipulations and devise a secure and confidential transformation pipeline from the structural representations, i.e. facial landmarks, to binary landmark perceptual watermarks. Subsequently, we present an end-to-end watermarking framework that imperceptibly and robustly embeds and extracts watermarks concerning the images to be protected. Relying on promising watermark recovery accuracies, Deepfake detection is accomplished by assessing the consistency between the content-matched landmark perceptual watermark and the robustly recovered watermark of the suspect image. Experimental results demonstrate the superior performance of our approach in watermark recovery and Deepfake detection compared to state-of-the-art methods across in-dataset, cross-dataset, and cross-manipulation scenarios.