Answers.Body: <p>Because it is possible to fool many different models at once.
  See table 2 in this paper, for an example using adversarial perturbations: <a href="https://arxiv.org/pdf/1610.08401.pdf" rel="nofollow noreferrer">https://arxiv.org/pdf/1610.08401.pdf</a></p>
  <p>That being said, there is no reason to think that using two detectors at once will not increase chance to detect deepfakes. It will just not resolve the problem completely.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2021-02-09T09:59:40.413Z
Answers.LastActivityDate: 2021-02-09T09:59:40.413Z
Answers.UserDisplayName: Sunny88
Body: <p>Why don't those developing AI Deepfake detectors use two differently trained detectors at once that way if the Deepfake was trained to fool one of the detectors the other would catch it and vice-versa?</p>
  <p>To be clear this is really a question of can deepfakes be made to fool multiple high-accuracy detectors at the same time. And if so then how many can they fool before they become human detectable from noticeable noise?</p>
  <p>I've heard of papers where they injected a certain noise into their deepfake videos which allows them to fool a given detector (<a href="https://arxiv.org/abs/2009.09213" rel="nofollow noreferrer">https://arxiv.org/abs/2009.09213</a>, <a href="https://delaat.net/rp/2019-2020/p74/report.pdf" rel="nofollow noreferrer">https://delaat.net/rp/2019-2020/p74/report.pdf</a>), so I thought well if they simply used two high-accuracy detectors then any pattern of noise used to fool one detector would interfere with the pattern of noise used to fool the other detector.</p>
  
Tags: <machine-learning><generative-adversarial-networks><deepfakes><video-classification>
Title: Why don't those developing AI Deepfake detectors use two detectors at once so as to catch deepfakes in one or the other?
UserDisplayName: Ethan
ThreadText: # Why don't those developing AI Deepfake detectors use two detectors at once so as to catch deepfakes in one or the other?
  
  (Asked by: username_0 on 2021-01-26)
  
  Why don't those developing AI Deepfake detectors use two differently trained detectors at once that way if the Deepfake was trained to fool one of the detectors the other would catch it and vice-versa?
  
  To be clear this is really a question of can deepfakes be made to fool multiple high-accuracy detectors at the same time. And if so then how many can they fool before they become human detectable from noticeable noise?
  
  I've heard of papers where they injected a certain noise into their deepfake videos which allows them to fool a given detector (<https://arxiv.org/abs/2009.09213>, <https://delaat.net/rp/2019-2020/p74/report.pdf>), so I thought well if they simply used two high-accuracy detectors then any pattern of noise used to fool one detector would interfere with the pattern of noise used to fool the other detector.
  
  **Tags:** machine-learning, generative-adversarial-networks, deepfakes, video-classification
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2021-02-09. Score: 3 | Accepted answer
  
  Because it is possible to fool many different models at once.
  See table 2 in this paper, for an example using adversarial perturbations: <https://arxiv.org/pdf/1610.08401.pdf>
  
  That being said, there is no reason to think that using two detectors at once will not increase chance to detect deepfakes. It will just not resolve the problem completely.
  
  
  ---
  
  