Boosting Active Defense Persistence: A Two-Stage Defense Framework Combining Interruption and Poisoning Against Deepfake

Summary

Researchers propose a Two-Stage Defense Framework (TSDF) against deepfakes that aims to keep active defenses effective after attackers retrain their models. The framework uses dual-function adversarial perturbations that distort forged results and also poison the data preparation step of an attacker's retraining pipeline. The source reports that traditional interruption methods degrade sharply under adversarial retraining, while TSDF shows stronger dual defense capability.

Topics

• Deepfakes and impersonation

Related items

• CriticalCVE-2026-48705: MONAI PydicomReader affine computation accepts non-finite DICOM valuesSimilar attack · NVD/CVE Database
• InfoSigned but Steerable: Measuring and Closing the Text-Vector Integrity Gap in Offline Retrieval-Augmented GenerationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoSecuring next-generation edge intelligence: A survey from federated learning to autonomous agents in cyber-physical systemsSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoPop Goes the Verifier: Phoneme-Targeted Data Poisoning of Voice Liveness DetectionSimilar attack · Arxiv (cs.RO + cs.CV security)
• InfoCharacterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)