Sequential training of GANs against GAN-classifiers reveals correlated "knowledge gaps" present among independently trained GAN instances
cs.LG, cs.CV
Submitted: 2023-03-27
Updated: 2023-03-27
Journal ref: 2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
DOI: 10.1109/CVPR52729.2023.02343
Code: https://github.com/NVlabs/stylegan2
License: http://creativecommons.org/licenses/by/4.0/
The gist: Modern Generative Adversarial Networks (GANs) generate realistic images remarkably well.
Terminology
Abstract
Modern Generative Adversarial Networks (GANs) generate realistic images remarkably well. Previous work has demonstrated the feasibility of "GAN-classifiers" that are distinct from the co-trained discriminator, and operate on images generated from a frozen GAN. That such classifiers work at all affirms the existence of "knowledge gaps" (out-of-distribution artifacts across samples) present in GAN training. We iteratively train GAN-classifiers and train GANs that "fool" the classifiers (in an attempt to fill the knowledge gaps), and examine the effect on GAN training dynamics, output quality, and GAN-classifier generalization. We investigate two settings, a small DCGAN architecture trained on low dimensional images (MNIST), and StyleGAN2, a SOTA GAN architecture trained on high dimensional images (FFHQ). We find that the DCGAN is unable to effectively fool a held-out GAN-classifier without compromising the output quality. However, StyleGAN2 can fool held-out classifiers with no change in output quality, and this effect persists over multiple rounds of GAN/classifier training which appears to reveal an ordering over optima in the generator parameter space. Finally, we study different classifier architectures and show that the architecture of the GAN-classifier has a strong influence on the set of its learned artifacts.
Sources
- ForensicTransfer: Weakly-supervised Domain Adaptation for Forgery Detection
- [RE] CNN-generated images are surprisingly easy to spot...for now
- Adversarial Attacks on Co-Occurrence Features for GAN Detection
- Making DeepFakes more spurious: evading deep face forgery detection via trace removal attack
- Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks
- Intriguing properties of neural networks
- Making Generated Images Hard To Spot: A Transferable Attack On Synthetic Image Detectors
Related papers
- Polynomial-Augmented Neural Networks (PANNs) with Weak Orthogonality Constraints for Enhanced Function and PDE Approximation
- AIRL-S: Unifying Reinforcement Learning and Search-Based Test-Time Scaling via Adversarial Inverse Reinforcement Learning
- Transformers as Bayesian In-Context Experimenters: Smoothness-Adaptive Efficient ATE Estimation
- Convergence issues in Relational Concept Analysis based on AOC-posets
- Beliefs Beyond Posteriors: The Predictive Cost of ELBO Binding
- Understanding Diffusion Models via Ratio-Based Function Approximation with SignReLU Networks