arXiv: ISPCloak: Weaponizing ISP for Optimization-Free Physical Camouflage against Deepfake Detectors

This paper, published on arXiv, introduces a novel adversarial attack called ISPCloak that weaponizes the image signal processing (ISP) pipeline—the standard hardware and software chain in cameras—to create physical camouflage that evades deepfake detectors. Unlike prior attacks requiring complex optimization, ISPCloak exploits inherent ISP vulnerabilities to generate images that appear normal to humans but are classified as fake by detection algorithms. The research demonstrates that current deepfake detectors are fundamentally brittle when faced with real-world, camera-level manipulations.

The primary affected sectors are organizations deploying deepfake detection for identity verification, content moderation, or fraud prevention, including financial services, social media platforms, law enforcement, and any EU-regulated entity under the AI Act’s high-risk classification for biometric or deepfake systems. Manufacturers of camera hardware and ISP firmware are also indirectly impacted, as the attack targets their core processing chains.

Compliance teams should immediately assess whether their organization’s deepfake detection systems have been tested against adversarial ISP-level attacks. Engage with technical teams to review detector robustness, particularly for systems used in high-risk AI applications. Consider updating risk assessments under the AI Act to account for this new attack vector, and monitor for subsequent mitigation research. Proactive testing against ISPCloak-like methods is recommended before any regulatory audit.