Skip to content
#generative ai #explainable ai Book Open access

Interpretation-Aware Image Manipulation Detection

Nov 2026 · ACM International Conference on Information and Knowledge Management (CIKM) · pp. 2929-2939 · 0 citations
Digital Media Forensic Detection

Abstract

Image manipulation has been a common practice since the early days of photography, and has evolved into a sophisticated threat with the rise of powerful image editing tools and generative AI. It can be used to spread misinformation, manipulate public opinion, and cause harm to individuals and communities. In this article, we study the problem of determining whether an image is misleading, i.e. edited in a misleading way. We introduce a risk framework to assess the intrinsic interpretive shift (ITS) of an ordered image pair, which evaluates whether the final edited image changes the interpretation supported by a source reference image. We show our risk framework can be operationalized with the Content Provenance and Authenticity (C2PA) provenance framework. We estimate ITS with a single-call vision-language implementation of our risk framework, which first checks for meaningful visual differences, then tests whether the differences induce interpretive shift, and finally determines whether the shift is fully explained by permissible transformations rather than content-level changes. The system outputs a binary label (potentially misleading or not) together with interpretive clues and a short justification. To test the approach and show that ITS is a measurable proxy for misleading edits, we built a benchmark of 418 ordered pairs, drawn from real-world fact-check cases and meaning-preserving transformations. The best-performing model configuration (gpt-5.4) achieves 88.2% precision, 94.2% recall, and 96.5% balanced accuracy. The code is available at https://github.com/liyu0x/ITS_detection/.

Read PDF

Similar papers

Preprint Oct 2026

Copying As Defense: Protecting Images from Editing By Eliciting Model Copying

Image editors built on diffusion transformers (DiTs), such as Flux Kontext, make it possible to turn a single photograph into a convincing manipulated image, including harmful and non-consensual edits. Proactive defenses aim to prevent such manipulations by adding an imperceptible perturbation before an image is shared...

Salma Abdel Magid, Sanghyuk Chun, Eric Slyman et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Which Image Property Carries the Jailbreak? A Controlled Dissection of Image-to-Text Jailbreaks

Image-to-text jailbreaks place harmful intent in text, image content, or the relationship between them. We examine image-side factors across four published attack families on a 313-prompt StrongREJECT slice, using five multimodal models and an additional appendix evaluation of InternVL3.5-8B. The harmful instruction is...

Bo-Yuan Chen, Yehia Dawoud, Hailemariam Mersha et al. · 0 citations
Open access Nov 2026

AI-Based Image Forgery Detection System Using EfficientNet-B0 and Grad-CAM Explanations with a Web-Based Interface

Digital photographs are now routinely used as evidence in news reporting, courts, insurance claims and identity checks, yet inexpensive editing software and generative models make it easy to alter them without visible traces. Manual inspection by experts does not scale, and many classical detectors fail once an image h...

J. Bhoomika, Y. Yashaswini, L. L. Lakheesh et al. · 0 citations
Preprint Sep 2026

AniPrO: Interpretable Anime Image Provenance Detection via Multi-Dimensional Semantic Reasoning

As generative AI becomes increasingly used in anime-style image creation, distinguishing human-drawn, AI-inpainted, and text-to-image images is important for copyright attribution, visual provenance, and content governance. Existing AI-generated image detectors mainly target real-world photographs and often overlook an...

Yan Liu, Bao-Xiang Huang, Zian Wang et al. · 0 citations
Preprint Oct 2026

False Claims, Credible Images: A Red-Teaming Benchmark for Commercial Image Generators

Image-generation models can now produce text-rich, natural-looking visual artifacts that are hard to distinguish from real-world evidence, such as news reports and textbook pages. Yet, the same capability introduces a new risk: these models can just as easily fabricate visual misinformation. Even commercial models (e.g...

Ze-Yu Ye, Yan-Chun Li, Si-Bei He et al. · 1 citation
#small language model Preprint Oct 2026

Beyond Plausibility: Verifiable Fine-Grained Image Editing on Structured Assets

Fine-grained image editing requires more than producing a visually plausible result: an editor must execute the requested attribute change precisely while leaving everything else intact. However, existing benchmarks leave a critical gap between realism and verifiability: benchmarks built on realistic images typically r...

Mu-Yao Wang, Chen Zhu, Shi-Qi Yang et al. · 1 citation

Related blog posts

Microsoft Research Blog Nov 10, 2026

Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents

Microsoft researchers have discovered “Lazarus,” a backdoor technique that can reprogram dormant neurons in an AI model, causing an otherwise normal AI agent to execute malicious commands when a hidden trigger appears. The threat is especially serious for AI agents with tool or terminal access. A triggered model could quietly download and run attacker code, […] The post Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents appeared first on Microsoft Research.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.