Advancing Reliable Synthetic Video Detection: Insights from the SAFE Challenge

TL;DR

SAFE challenge employs deep learning with pre-trained vision backbones and autoencoding to detect synthetic videos, achieving an average AUC of 0.82 across 13 models.

cs.CV 🔴 Advanced 2026-05-08 51 views
Kirill Trapeznikov Gabriel Mancino-Ball Jonathan Li Paul Cummer Jai Aslam Danial Samadi Vahdati Tai Nguyen Matthew C. Stamm Peter Bautista Michael Davinroy Laura Cassani Jill Crisman
deep learning video forensics generalization robustness competition

Key Findings

Methodology

This study utilizes a detection framework combining large-scale pre-trained vision models (e.g., ViT, Swin Transformer) with autoencoding augmentation. The models are trained on a diverse dataset including 13 state-of-the-art synthetic video generators and 21 real sources, with a focus on cross-source generalization and robustness against common post-processing (compression, resampling). The training involves multi-task learning and adversarial strategies, evaluated in a fully blind setting to prevent overfitting. The detection pipeline extracts deep features, encodes them into latent space, and reconstructs to enhance invariance to transformations. The models are validated on hidden datasets, ensuring real-world applicability.

Key Results

  • On 13 high-quality synthetic models, the detection AUC averaged 0.82, significantly outperforming baseline 0.68. Under post-processing like compression and scaling, AUC drops to 0.72 but remains robust compared to traditional methods. Teams using pre-trained models (e.g., Swin Transformer) and autoencoding strategies achieved top performance, demonstrating the effectiveness of the approach. The models showed stable detection across diverse real-world sources, indicating good transferability and generalization. The study highlights persistent vulnerabilities to severe post-processing, suggesting directions for robustness enhancement.

Significance

This work advances the state-of-the-art in synthetic video detection by establishing a rigorous, blind evaluation framework that emphasizes generalization and robustness. It addresses critical gaps in existing benchmarks, which often rely on fixed datasets and limited scenarios, thus providing a more realistic assessment of detection capabilities. The findings have broad implications for digital media security, helping to combat misinformation, fake news, and malicious manipulation, and guiding future research toward more resilient detection systems.

Technical Contribution

The key innovation lies in integrating large-scale pre-trained vision backbones with autoencoding augmentation, enabling models to learn invariant features robust to post-processing and unseen generators. The fully blind evaluation setup ensures unbiased assessment of generalization. The multi-source training strategy and adversarial training further improve robustness, setting a new benchmark for real-world applicability of synthetic video detectors.

Novelty

This is the first comprehensive, fully blind evaluation of synthetic video detectors across multiple unseen generators and post-processing scenarios. The combination of large-scale pre-trained models with autoencoding for robustness constitutes a novel methodological contribution, addressing the limitations of prior approaches that relied heavily on specific generator features or metadata.

Limitations

  • Despite improvements, detection performance declines under severe post-processing like aggressive compression or blurring, indicating robustness gaps. The models are computationally intensive, limiting deployment on resource-constrained devices. The rapid evolution of generation techniques necessitates continuous dataset updates and model retraining to maintain effectiveness.

Future Work

Future efforts will focus on integrating multimodal cues (audio, text) to enhance robustness, developing lightweight models suitable for edge deployment, and expanding datasets to include emerging generation methods. Additionally, exploring unsupervised or semi-supervised learning could reduce data annotation costs and improve adaptability to new fake content.

AI Executive Summary

The rapid advancement of generative video models has posed significant challenges for digital media authenticity verification. Traditional detection methods, often relying on specific artifacts or metadata, struggle to keep pace with the evolving landscape of synthetic content. The SAFE challenge introduces a comprehensive, blind evaluation framework that assesses detection performance across multiple unseen generators and post-processing transformations, reflecting real-world conditions.

Leveraging large-scale pre-trained vision models like ViT and Swin Transformer, combined with autoencoding strategies, the proposed detection framework demonstrates remarkable generalization capabilities. In the challenge, models achieved an average AUC of 0.82 across 13 diverse synthetic video sources, significantly surpassing baseline methods. However, performance degradation under severe post-processing highlights ongoing robustness challenges.

The experimental results underscore the importance of multi-source training and invariant feature learning for effective detection. Teams employing advanced pre-trained architectures and multi-task learning strategies outperformed traditional approaches, validating the effectiveness of the innovations.

This work has broad implications for digital content verification, providing a scalable, realistic benchmark for future research. It addresses critical needs in combating misinformation and malicious manipulation, offering tools that can adapt to the rapid evolution of generative AI. Future directions include multimodal integration, model lightweighting, and continuous dataset expansion, aiming to build resilient, deployable detection systems for real-world applications.

Deep Analysis

Background

Recent breakthroughs in generative AI, including diffusion models, transformers, and adversarial networks, have enabled the creation of highly realistic synthetic videos. Early efforts like FaceForensics++ and DFDC focused on facial manipulation detection, primarily in controlled environments. As models like Imagen Video, Make-A-Video, and Text-to-Video (TI2V) systems matured, synthetic videos diversified across content types and complexity, making detection more challenging. Existing datasets often lack diversity in sources and post-processing conditions, limiting their real-world relevance. The need for robust, generalizable detection methods that can handle unseen generators and post-processing transformations has become urgent, especially given the proliferation of deepfakes on social media and misinformation campaigns.

Core Problem

The core challenge is designing detection algorithms that generalize well across unknown synthetic video sources and withstand common post-processing operations such as compression, resizing, and filtering. Current methods tend to overfit to specific generators or artifacts, leading to poor performance on unseen data. Additionally, real-world videos are often subjected to various transformations that can mask forgery traces, further complicating detection. This creates a pressing need for evaluation frameworks that simulate realistic scenarios, including blind testing on hidden datasets, to accurately measure the robustness and generalization of detection models.

Innovation

This work introduces a novel detection framework combining large-scale pre-trained vision backbones (e.g., ViT, Swin Transformer) with autoencoding-based feature augmentation. Key innovations include:

  • �� Multi-source training: leveraging diverse synthetic generators and real videos to improve generalization.
  • �� Autoencoding augmentation: encoding features into a latent space and reconstructing to enhance robustness against post-processing.
  • �� Fully blind evaluation: assessing models on hidden datasets to prevent overfitting.
  • �� Multi-task learning: jointly optimizing for detection accuracy and robustness, ensuring consistent performance across scenarios.

These strategies collectively address the limitations of prior methods that relied heavily on specific artifacts or metadata, enabling more resilient detection in practical settings.

Methodology

  • �� Data collection: Curated datasets with 13 synthetic generators and 21 real sources, totaling 6,000 videos.
  • �� Feature extraction: Employed pre-trained vision models (e.g., ViT, Swin Transformer) to extract deep features.
  • �� Autoencoding: Encoded features into a latent space, then reconstructed to learn invariant representations.
  • �� Model training: Used multi-task loss combining detection accuracy and robustness objectives, with adversarial training to simulate post-processing effects.
  • �� Evaluation: Conducted in a fully blind setting on hidden datasets, with metrics including AUC and BAC.
  • �� Post-processing augmentation: Included simulated real-world transformations during training to improve robustness.

Experiments

The dataset comprised videos from 21 real sources and 13 synthetic models, split into public and private sets. Models trained on the public set were evaluated on the private set, simulating real-world unseen scenarios. The primary metrics were AUC and BAC, with additional analysis on robustness under post-processing like compression, scaling, and blurring. Ablation studies compared different backbone architectures and augmentation strategies, confirming the effectiveness of autoencoding and multi-source training. Cross-source transferability was validated by testing on unseen generators, demonstrating strong generalization. The experiments also assessed robustness degradation under severe transformations, guiding future improvements.

Results

Detection models achieved an average AUC of 0.82 on the private dataset, with top teams using pre-trained vision backbones and autoencoding strategies. Under post-processing, AUC decreased to 0.72, indicating robustness challenges. Models trained with multi-source data showed better transferability to unseen generators, with some teams maintaining AUC above 0.75. The results confirm that combining large-scale pretraining with invariant feature learning significantly improves detection performance, though robustness to severe transformations remains an open issue. These findings suggest a promising direction for deploying reliable synthetic video detectors in real-world scenarios.

Applications

The developed detection framework can be integrated into social media platforms, news verification tools, and digital forensics workflows to identify deepfakes and manipulated videos. It requires minimal fine-tuning for different content domains and can operate on videos with various post-processing effects, making it suitable for real-time or batch analysis. Long-term, such systems could underpin automated content moderation, misinformation mitigation, and legal evidence verification, contributing to a safer digital environment.

Limitations & Outlook

Despite strong performance, detection accuracy declines under aggressive post-processing like heavy compression or blurring, indicating robustness gaps. The models are computationally intensive, limiting deployment on resource-constrained devices. The rapid evolution of generative techniques demands continuous dataset updates and retraining, posing scalability challenges. Future work should focus on lightweight architectures, multimodal cues, and adaptive learning to address these issues.

Plain Language Accessible to non-experts

想象你在一个工厂里,工厂每天都在生产不同的商品。有些商品是真正的,有些是用特殊机器复制出来的。工厂的检测员需要判断每个商品是真是假,但这些复制品越来越逼真,传统的检测方法变得不那么管用了。于是,工厂引入了一种新工具:一种非常聪明的“侦探”机器。这个机器可以学习各种商品的细节特征,即使商品经过包装、变形或模糊,它依然能识别出真假。科学家们用大量真实和伪造的商品训练这个侦探,让它变得更聪明、更可靠。结果显示,这个侦探在识别不同工厂生产的商品时都表现出色,甚至能应对一些复杂的伪造手段。这就像给检测员装上了“超级眼睛”,让它们更好地保护我们的商品和信息的真实性。

ELI14 Explained like you're 14

想象你有个超级厉害的朋友,他能一眼看出谁在作弊,谁在用特殊方法伪装自己。可是,有时候他遇到更聪明的作弊手段,就会迷糊,不知道真假了。科学家们也遇到类似问题:他们想让电脑像这个朋友一样,能分辨出视频是真是假,但问题是:那些伪造技术变得越来越厉害,普通的方法不再管用。于是,研究人员设计了一种“超级检测器”,它可以学习各种不同的伪造技巧,甚至在视频经过压缩、模糊或缩放后,仍然能准确判断真假。这个检测器用很多真实和伪造的视频训练,学会了“看”出那些细微的伪造痕迹。结果显示,这个方法在识别不同来源的合成视频时表现得非常棒,能帮助我们更好地识别虚假内容,保护信息的真实性。

Glossary

预训练视觉骨架 (Pre-trained Vision Backbone)

一种深度学习模型,用于提取图像或视频的深层特征,便于后续分析。技术上指在大规模数据上预先训练的Transformer或CNN模型。

在本文中,用于提取合成视频与真实视频的关键特征。

自编码增强 (Autoencoding Augmentation)

一种通过编码和解码输入特征,增强模型对变换和噪声的鲁棒性的方法。技术上涉及自编码器网络结构。

用于提升检测模型在后处理操作下的表现。

AUC (Area Under Curve)

衡量分类模型性能的指标,表示ROC曲线下的面积,值在0到1之间,越接近1越好。

用于评估检测模型在真假视频判别中的表现。

后处理操作 (Post-processing Operations)

在视频生成或传播过程中常见的变换,如压缩、缩放、模糊等,用于模拟实际应用中的内容变形。

测试检测模型在实际环境中的鲁棒性。

Open Questions Unanswered questions from this research

  • 1 如何设计更高效的模型以降低计算成本,同时保持检测性能?
  • 2 未来生成技术不断演进,检测模型如何快速适应新模型?
  • 3 多模态信息融合是否能显著提升检测鲁棒性?

Applications

Immediate Applications

内容验证工具

为新闻机构、内容平台提供高效的虚假视频检测工具,确保发布内容的真实性。需结合平台实际情况进行微调,提升检测速度和准确率。

数字取证

辅助执法和司法部门识别伪造视频,维护司法公正。模型需在不同设备和网络环境下保持稳定。

Long-term Vision

自动化内容审核

未来实现全自动化、多模态、多场景的内容真实性检测系统,广泛应用于社交媒体、视频直播等,极大提升信息安全水平。

Abstract

The proliferation of generative video technologies has intensified the need for reliable methods to detect and characterize synthetic media. To address this challenge, we organized the \href{https://safe-video-2025.dsri.org}{SAFE: Synthetic Video Detection Challenge}, co-located with the \textit{Authenticity and Provenance in the Age of Generative AI (APAI) Workshop }at ICCV 2025. The competition invited participants to develop and evaluate algorithms capable of distinguishing real from synthetic videos under fully blind evaluation conditions with over 600 submissions from 12 teams over a 90 day span. Hosted on the Hugging Face platform, the challenge comprised two primary tasks: (1) detection of synthetic video content generated by diverse state-of-the-art models, and (2) detection of synthetic content following common post-processing operations such as resizing, re-compression, motion blur and others. The challenge data consisted of 13 modern high quality synthetic video models with generated content matched to real videos from 21 diverse and challenge sources, all adding up to 20 hours of 6,000 video samples. This paper describes the challenge design, dataset construction, evaluation methodology, and outcomes, offering insights into the generalization and robustness of contemporary synthetic video detection methods. Our findings highlight measurable progress in cross-generator generalization but also persistent vulnerabilities to post-processing artifacts. https://safe-video-2025.dsri.org

cs.CV