LAVA: Layered Audio-Visual Anti-tampering Watermarking for Robust Deepfake Detection and Localization
Bokang Zeng 1, Zheng Gao 1, Xiaoyu Li 1, Xiaoyan Feng 2, Jiaojiao Jiang 1
Published on arXiv
2604.23957
Output Integrity Attack
OWASP ML Top 10 — ML09
Key Finding
Achieves near-perfect detection performance (AP = 0.999) and significantly improves tamper localization reliability over existing audio-visual fusion baselines while remaining robust to compression and multimodal misalignment
LAVA
Novel technique introduced
Proactive watermarking offers a promising approach for deepfake tamper detection and localization in short-form videos. However, existing methods often decouple audio and visual evidence and assume that watermark signals remain reliable under real-world degradations, making tamper localization vulnerable to multimodal misalignment and compression distortions. Moreover, existing semi-fragile visual watermarking methods often degrade significantly under codec compression because their embedding bands overlap with compression-sensitive frequency regions. To address these limitations, we propose Layered Audio-Visual Anti-tampering Watermarking (LAVA), a calibration-aware audio-visual watermark fusion framework for deepfake tamper detection and localization. LAVA leverages cross-modal watermark fusion and calibration-aware alignment to preserve consistent and reliable tamper evidence under compression and audio-visual asynchrony, enabling robust tamper localization. Extensive experiments demonstrate that LAVA achieves near-perfect detection performance (AP = 0.999), remains robust to compression and multimodal misalignment, and significantly improves tamper localization reliability over existing audio-visual fusion baselines.
Key Contributions
- Cross-modal watermark fusion framework combining audio and visual signals for tamper detection
- Calibration-aware alignment mechanism to preserve watermark reliability under compression and audio-visual asynchrony
- Near-perfect deepfake detection (AP=0.999) with robust tamper localization under real-world degradations
🛡️ Threat Analysis
Embeds watermarks in audio-visual content outputs to detect and localize deepfake tampering — this is content integrity and authenticity verification, the core of ML09.