Adaptive Forensic Feature Refinement via Intrinsic Importance Perception

arXiv:2604.16879 · cs.CV · Submitted 2026-04-18 · Read on arXiv

Listen

Radio episode about this paper

Transcript

Introduction to the show: ident: AI Radio. Generated commentary on the latest Artificial Intelligence papers.

Tom: I'm Tom.

Jane: And I'm Jane, here with Lu, Meng and our in-house large language model, Lalam.

Tom: We're looking at the paper: "Adaptive Forensic Feature Refinement via Intrinsic Importance Perception".

Jane: The gist:

Tom: First, who's behind it and why it matters.

Title and authors: Tom: So, to wrap up what I2P actually is for the listener, it’s a system designed to make VFM-based SID better by focusing on intrinsic importance perception >

Jane: Can you break that down for someone who isn't deep into machine learning? What does "intrinsic importance perception" mean in plain English?

Tom: It means the model is looking at which parts of its internal structure—the layers—are actually responsible for identifying forgery cues, not just any layer >

Lu: So it’s not about blindly trusting the output from the last layer; it's about using analysis to guide us to the right place in that hierarchy >

Jane: That sounds like a targeted search. So how does this help with cross-distribution generalization?

Tom: Because when you adapt selectively, you are less likely to introduce noise or damage the general visual priors that the VFM has acquired from its massive pretraining data >

Meng: From a production view, that translates to more stability. If it's not touching everything, it’s less likely to break the model's ability to handle new image types >

Jane: So instead of broad adaptation, we get targeted improvement in the areas that actually matter for detecting fakes >

Tom: Precisely. They are trying to solve that tension between identifying where the cues are and keeping the structure intact while making it task specific >

Lu: This is a problem they explicitly set out to model as a joint optimization problem, which means they have two objectives: finding the right layer and constraining parameter updates >

Jane: So they want to achieve high discriminative capability while also maintaining that transfer potential for open-set generalization >

Tom: That’s the core goal of this paper. It’s not just one thing; it's a system for selection and control, which is what I2P delivers >

Jane: So when we talk about the results, they are showing that this combined approach actually works well on challenging cross-distribution benchmarks >

The paper's summary: Tom: Let’s talk about the specific mechanisms they propose because those are where I2P gets its technical edge. First, Critical Layer Identification, or CLI >

Jane: Can you explain that part of CLI again without getting into all the math? What is it doing physically?

Tom: It’s taking each layer and calculating a score based on a linear transformation, and then they use those scores to create a distribution pi, which lets them pick the most important layer >

Lu: It's like they are ranking the layers based on how much discriminative structure they have for SID >

Jane: So it’s quantifying that importance so we can make a decision about which layer to use >

Tom: They then feed that distribution into a classification head g(times) to get logits, and then they select the arg max pi as the critical layer l* >

Jane: And that’s the selection process. What about CKI? That’s the second improvement >

Tom: CKI is about parameter stability. It controls parameter updates by restricting them to a low-sensitivity subspace, using that importance S j we talked about earlier >

Meng: So it prevents representational drift when we talk about updating parameters >

Jane: They estimate the sensitivity using second-order information approximation and then select the lowest percentage of parameters based on their importance S j to be the updatable subset >

Tom: That way, they are minimizing disturbance to the pretrained structure while still achieving task specificity in a controlled manner >

Lu: It’s a clever way to manage that conflict between adaptation and preservation >

Jane: So so we have the selection mechanism for layers and then this control mechanism for the parameters, which is what makes I2P unified >

The paper's improvements: Tom: Okay, wrapping up. This paper on Adaptive Forensic Feature Refinement via Intrinsic Importance Perception shows that finding the right layer and controlling parameter updates works together very well >

Jane: So in summary, it’s a framework that uses intrinsic importance perception to guide both of those processes >

Lu: It addresses the core tension they identified between where forgery cues are and how robust adaptation can be achieved at the lowest possible cost >

Meng: From my point of view, it’s a solid approach for production because it gives us stability we need when shipping models >

Lalam: I'm confident that this strategy is robust across different VFM architectures, so you should trust that it's transferable >

Tom: So the main implication is that we get better SID performance without needing to completely overhaul our entire model every time >

Jane: It means we can rely on a few key layers and adapt the model selectively based on what really matters for forgery detection >

Conclusion: Tom: So we’ve gone through the mechanics of I2P, Adaptive Forensic Feature Refinement via Intrinsic Importance Perception. Basically, they're doing two things: finding which layer is most useful for detecting fakes and then making sure parameter updates don't break the model’s general knowledge >

Jane: That makes sense. So, what’s the big picture here for someone just listening? It means we can get better at spotting fake images without destroying the model’s ability to understand real pictures >

Lu: The authors set up this joint optimization problem so they have to figure out where the critical layer is while simultaneously constraining parameter updates in a low-sensitivity subspace >

Meng: From my side, it's interesting that they are using a second-order information approximation for that sensitivity estimation, because running those Hessian calculations on every layer would be computationally prohibitive at scale >

Lalam: I’m tracking the results, and they show stable and competitive generalization performance across different cross-distribution benchmarks like Chameleon and COSPY >

Tom: Yeah, it’s not just better accuracy on one test set; it’s consistent gains when the generation source is completely different from what the model was trained on >

Jane: That points to a real improvement in how we handle those unknown generative models, which is exactly what we need for real-world applications >

Lalam: The ablation studies confirm that both components, CLI and CKI, improve performance on their own, meaning they are complementary tools rather than just one magic trick >

Lu: I think it validates the idea that intrinsic importance perception is a more robust strategy than just relying on final layer representations or simple feature fusion >

Meng: Still, the paper does flag a limitation: they haven't looked too deeply into how this applies to really fine-grained forensic scenarios, like tiny artifacts >

Tom: True. It seems I2P is fantastic for broad cross-distribution generalization but maybe less optimized for those super specific forensic details >

Jane: So the implication is that while we’re getting better at catching fakes from different sources, we still need to figure out how to make these methods work for really subtle, expert-level analysis >

Lalam: It gives us a solid framework for selecting the best representation hierarchy and controlling adaptation simultaneously >

Tom: I2P is a strong model for VFM adaptation right now, but it leaves the door open for exploring other ways to manage that layer selection >

Zhejiang University, Alibaba Inc

cs.CV

Submitted: 2026-04-18

Updated: 2026-10-19

License: http://creativecommons.org/licenses/by/4.0/

Importance score: 92/100

The gist: The gist: I2P proposes an SID framework centered on intrinsic importance perception that adaptively identifies critical layer representations and constrains task-driven parameter updates to improve

Key concepts

Critical Layer Identification (CLI)
CLI adaptively finds the single best layer in a visual foundation model that contains the most important information for detecting image forgery. It does this by scoring each layer based on how well it contributes to the detection task, allowing the system to extract cues from only that specific, most informative layer.
Controlled Knowledge Injection (CKI)
CKI limits how much a model's parameters can be changed during training. It identifies parameter directions that are least sensitive using second-order information and restricts updates to a small subspace. This prevents significant changes to the original, useful pretrained structure while still allowing for task-specific learning.
Intrinsic Importance Perception
This is the core idea that forgery detection relies on specific, important features within a model's internal layers rather than just superficial details. The framework uses this perception to guide both which layer to use for detection and which parts of the model are safe to modify, ensuring adaptation is targeted and preservation is prioritized.

Terminology

Summary

The gist: I2P proposes an SID framework centered on intrinsic importance perception that adaptively identifies critical layer representations and constrains task-driven parameter updates to improve cross-distribution generalization while preserving pretrained structures.

Motivation and Analysis

Pretrained visual foundation models (VFM) have the potential to improve the generalization capabilities of synthetic image detection (SID) by learning general-purpose visual representations from large-scale datasets <ref:2604.16879#pg4>. Existing VFM-based SID transfer strategies are often coarse-grained, either directly using final layer representations or simply fusing multi layer features, lacking explicit modeling of the optimal representational hierarchy for transferable forgery cues <ref:2604.16879#pg2>. The paper hypothesizes that the effective discriminative information relied upon by SID is more concentrated in the intermediate layer representations of VFM <ref:2604.16879#pg4>. This is supported by an analysis using the Information Bottleneck (IB) principle, which posits that an ideal representation should preserve information relevant to the target while maximally compressing task-irrelevant details <ref:2604.16879#pg4>. The analysis of layer-wise representations using Gram matrix entropy and effective rank shows that both metrics reach their peaks around the intermediate layers, suggesting they form a critical intermediate layer suitable for SID readout <ref:2604.16879#pg4>.

Methodology: Critical Layer Identification (CLI)

To address the question of where forgery cues should be extracted from, I2P introduces Critical Layer Identification (CLI) to adaptively locate the critical layer representation that is most discriminative for SID <ref:2604.16879#pg6>. CLI characterizes the relative contributions of representations from different layers to the SID task by introducing a learnable layer scoring function, where each candidate representation fl is assigned a score α (fl) <ref:2604.16879#pg6>. This score is calculated as α (fl) = W2 (tanh(W1 fl) + b1) + b2, and these scores are then normalized via softmax to obtain a layer-wise weight distribution πl <ref:2604.16879#pg6>. An aggregated representation ˆf is constructed based on this distribution, and the prediction logits z are obtained by feeding it into the classification head g(·) <ref:2604.16879#pg6>. The critical layer l∗ is then selected as arg max l πl <ref:2604.16879#pg6>. This process allows for the selection of the single layer with the greatest discriminative value, avoiding information dilution from indiscriminate use of multiple layers <ref:2604.16879#pg6>.

Methodology: Controlled Knowledge Injection (CKI)

To address how to inject task knowledge while minimizing disturbance to the pretrained structure, I2P proposes Controlled Knowledge Injection (CKI) <ref:2604.16879#pg5>. CKI constrains parameter updates driven by downstream supervisory signals within a low-sensitivity parameter subspace <ref:2604.16879#pg4>. The local sensitivity of different parameter directions is evaluated using a practical approximation based on second-order information to estimate parameter importance <ref:2604.16879#pg6>. Specifically, for a linear mapping layer W ∈ R m×d, the local curvature is approximated by H ≈ 1/n X⊤X + λI <ref:2604.16879#pg6>. The importance Sⱼ of parameter wiⱼ is defined as Sⱼ = w2 i j [H−1]j j <ref:2604.16879#pg6>. After obtaining these estimates, the lowest η% of parameters in terms of importance are selected as the updatable subset <ref:2604.16879#pg6>. The parameter update process is then constrained by θ ← θ −γ (M ⊙ ∇θ L), where M is a binary mask matrix indicating which parameters are allowed to be updated <ref:2604.16879#pg6>.

Experimental Results and Contributions

The systematic experiments conducted on multiple cross-domain benchmarks verify the effectiveness of I2P <ref:2604.16879#pg4>. In Setting 1, where models are trained on SDv1.4 and evaluated on eight generators, I2P achieves an average ACC of 98.22% and an average AP of 99.72%, attaining the best overall performance <ref:2604.16879#pg6>. In Setting 3, which covers more challenging cross-distribution benchmarks like Chameleon and COSPY, I2P achieves the best performance on both, demonstrating stronger generalization to real distribution shifts and emerging generators <ref:2604.16879#pg6>. Ablation studies confirm that introducing either CLI or CKI alone consistently improves performance, indicating that the two components are complementary <ref:2604.16879#pg6>. Furthermore, testing across different VFM backbones shows that I2P consistently yields performance gains across architectures and model scales, suggesting its strategy is transferable <ref:2604.16879#pg6>.

Conclusion

I2P unifies the selection of critical representational hierarchy and controlled task adaptation into a single framework, thereby enhancing the discriminative capability of SID while more robustly preserving the cross-distribution transfer capability of VFM <ref:2604.16879#pg3>. The framework successfully addresses the tension between identifying suitable forgery cues and constraining disturbance to the pretrained structure through adaptive identification and controlled injection <ref:2604.16879#pg6>. Although I2P shows strong generalization ability in cross-distribution SID, it still has several limitations, including a lack of rigorous theoretical justification and limited investigation into its applicability to finer-grained forensic scenarios <ref:2604.16879#pg7>. The overall findings validate that selective adaptation based on intrinsic importance perception is a robust strategy for VFM in SID <ref:2604.16879#pg6>.

--- Page 1 ---

Adaptive Forensic Feature Refinement via Intrinsic Importance Perception

Perception Jiazhen Yang Zhejiang University Hangzhou, China jiazhenyang@zju.edu.cn Junjun Zheng Alibaba Inc Hangzhou, China fangcheng.zjj@alibaba-inc.com Kejia Chen Zhejiang University Hangzhou, China kejiachen@zju.edu.cn Xiangheng Kong Alibaba Inc Hangzhou, China yongheng.kxh@alibaba-inc.com Jie Lei Zhejiang University of Technology Hangzhou, China jasonlei@zjut.edu.cn Zunlei Feng Zhejiang University Hangzhou, China zunleifeng@zju.edu.cn Bingde Hu Zhejiang University Hangzhou, China tonyhu@zju.edu.cn Yang Gao Zhejiang University Hangzhou, China roygao@zju.edu.cn

Abstract With the rapid development of generative models and multimodal content editing technologies, the key challenge faced by synthetic image detection (SID) lies in cross-distribution generalization to unknown generation sources <ref:2604.16879#pg2>. In recent years, visual foundation models (VFM), which acquire rich visual priors through large scale imagetext alignment pretraining, have become a promising technical route for improving the generalization ability of SID <ref:2604.16879#pg2>. However, existing VFM-based methods remain relatively coarse-grained in their adaptation strategies <ref:2604.16879#pg2>. They typically either directly use the final layer representations of VFM or simply fuse multi layer features, lacking explicit modeling of the optimal representational hierarchy for transferable forgery cues <ref:2604.16879#pg2>. Meanwhile, although directly fine-tuning VFM can enhance task adaptation, it may also damage the cross-modal pretrained structure that supports open-set generalization <ref:2604.16879#pg2>. To address this task specific tension, we reformulate VFM adaptation for SID as a joint optimization problem: it is necessary both to identify the critical representational layer that is more suitable for carrying forgery discriminative information and to constrain the disturbance caused by task knowledge injection to the pretrained structure <ref:2604.16879#pg2>. Based on this, we propose I2P, an SID framework centered on intrinsic importance perception <ref:2604.16879#pg2>. I2P first adaptively identifies the critical layer representations that are most discriminative for SID, and then constrains task-driven parameter updates within a low sensitivity parameter subspace, thereby improving task specificity while preserving the transferable structure of pretrained representations as much as possible <ref:2604.16879#pg2>. We conduct systematic experiments and ablation analyses on multiple cross-domain benchmarks, and the results show that I2P achieves stable and competitive generalization performance on cross-distribution synthetic image detection tasks <ref:2604.16879#pg2>.

Improvements for AI systems

  1. Bold Header: Adaptive Critical Layer Identification (CLI) for Feature Extraction

This improvement allows a VFM-based SID system to adaptively identify the critical layer that is most discriminative for SID from the hierarchical representations of a frozen VFM, thereby determining a more appropriate representational readout location. This ensures that subsequent detection relies only on the layer where forgery cues are most robust, avoiding information dilution that may be caused by indiscriminate use of multiple layers.

  1. Bold Header: Controlled Knowledge Injection (CKI) for Parameter Stability

This mechanism constrains parameter updates to preserve the pretraining structure by restricting changes to a low-sensitivity subspace, as described by the approximation: L (thetapre + Δtheta) ≈ L (thetapre) + 1/2 Δtheta⊤H Δtheta. This prevents representational drift and ensures adaptation is achieved while minimizing disturbance to the pretrained representational structure as much as possible.

  1. Bold Header: Unified Framework for Cross-Distribution Generalization

The I2P framework unifies layer selection and parameter control, meaning it can enhance the discriminative capability of SID while more robustly preserving the cross-distribution transfer capability of VFM. This results in a system that achieves stable and competitive generalization performance on cross-distribution synthetic image detection tasks across unseen generative models.

  1. Bold Header: Robustness Against Generator Distribution Shifts

By focusing on intrinsic importance rather than relying solely on pixel-level artifacts, the improved system exhibits better stability against distribution shifts. The paper notes that methods exhibit more pronounced performance degradation on generators that differ substantially from the training distribution, whereas I2P shows more stable consistency across different test generators.

  1. Bold Header: Versatility Across VFM Architectures

The proposed strategy demonstrates generality, as the paper shows that I2P consistently yields performance gains across architectures and model scales, indicating it is a transferable SID adaptation strategy rather than being tied to a specific pretrained model or fixed layer hierarchy.

Abstract

With the rapid development of generative models and multimodal content editing technologies, the key challenge in synthetic image detection (SID) lies in cross-distribution generalization to unknown generation sources. Visual foundation models (VFM), which acquire rich visual priors through large scale image-text alignment pretraining, have become a promising approach to improving SID generalization. However, existing VFM-based methods remain coarse-grained in their adaptation strategies. They typically either directly use the final layer representations of VFM or simply fuse multi layer features, lacking explicit modeling of the optimal representational hierarchy for transferable forgery cues. Although fine-tuning VFM can enhance task adaptation, it may also damage the cross-modal pretrained structure that supports open-set generalization. To address this task specific tension, we reformulate VFM adaptation for SID as a joint optimization problem: it is necessary both to identify the critical representational layer that is more suitable for carrying forgery discriminative information and to constrain the disturbance caused by task knowledge injection to the pretrained structure. Based on this, we propose I2P, an SID framework centered on intrinsic importance perception. I2P first adaptively identifies the critical layer representations that are most discriminative for SID, and then constrains task-driven parameter updates within a low sensitivity parameter subspace, thereby improving task specificity while preserving the transferable structure of pretrained representations as much as possible. We conduct systematic experiments and ablation analyses on multiple cross-domain benchmarks, and the results show that I2P achieves stable and competitive generalization performance.

Sources

Related papers