Evading Deepfake-Image Detectors with White- and Black-Box Attacks

Nicholas Carlini, Hany Farid

It is now possible to synthesize highly realistic images of people who don't exist. Such content has, for example, been implicated in the creation of fraudulent social-media profil…