Search papers, labs, and topics across Lattice.
This paper introduces $μ$Flow, a novel one-class deepfake detector that is trained exclusively on real images, circumventing the limitations of supervised training with both real and fake images. By averaging multiple images to enhance consistent generative traces, the method creates highly discriminative feature representations, which are then modeled using a normalizing flow to align individual image features with the averaged distribution. Experimental results demonstrate that $μ$Flow significantly outperforms state-of-the-art detectors in a fully out-of-distribution evaluation, highlighting its superior generalization capabilities across different generator categories.
Training deepfake detectors solely on real images can lead to significantly better generalization across unseen generator types.
Current generative models, including GANs and diffusion models, have reached an outstanding level of photorealism, posing significant risks to privacy and security. To ensure real-world applicability, deepfake detectors must generalise effectively to unseen generators. However, most existing approaches rely on supervised training with both real and fake images, which limits their generalisation especially across generators categories (e.g. GANs vs DMs). In this work, we introduce $μ$Flow, a one-class deepfake detector trained only on real images without relying on pseudo-deepfakes or synthetic artifacts. Our approach builds on the observation that averaging multiple images amplifies consistent generative traces, producing highly discriminative feature representations. We leverage this property by modelling the distribution of features extracted from averaged images and training a normalizing flow to align the feature space of individual images with this distribution. This alignment yields a likelihood-based criterion that separates real and fake samples while promoting strong generalisation. We evaluate $μ$Flow on a fully out-of-distribution setting, where both real and fake datasets are unseen during training. Experimental results show that our method significantly outperforms SOTA detectors. Project page: https://opontorno.github.io/MuFlow.