Attacked Test Set
Participants submit perturbed versions of the provided deepfake test set to induce misclassification by detectors.
Multimedia/CORE Unranked
AADD 2026
Adversarial Attacks on Deepfake Detectors: Generated Media in Real-World Scenarios
The AADD 2026 Challenge is a grand challenge at ACM Multimedia 2026 focused on adversarial attacks against deepfake detectors under realistic, real-world conditions, including JPEG/JPEG-AI compression and social media-like processing. It builds on the 2025 edition by evaluating detector robustness using high- and low-quality generated media, aiming to advance forensic tools critical for digital trust and misinformation prevention.
Key deadlines
Verified September 9, 2026Full paper
June 25, 2026
AoE
Conference timeline
Submission and decisions
Full paperKey deadline
June 25, 2026 · AoE
Paper fit
Contribution paths
A strong submission should clearly identify its contribution and evaluate it appropriately.
Abstract Paper
A 1–2 page abstract describing methodology, motivation, and key contributions, required for evaluation.
Full-Length Paper
Invited only to the top 3 teams; a detailed paper undergoes review and may be published in ACM Proceedings.
Research areas in scope
01
Adversarial Attacks on Deepfake Detectors
Adversarial perturbations on deepfake imagesRobustness of deepfake detectors under JPEG/JPEG-AI compressionReal-world social media post-processing effectsDetection evasion using GANs and diffusion modelsFrequency-domain adversarial attacks
Policies worth checking twice
- Each team may submit only one attacked test set; only the last submission before the deadline is considered.
- Submissions must include original and perturbed image pairs; incomplete pairs are not evaluated.
- Only physical on-site presentations are allowed; remote presentations are prohibited and result in removal from proceedings.
- The top 3 teams are invited to submit full papers for review; acceptance is not guaranteed and depends on review outcomes.
- Multiple submissions by a team are allowed but only the final one counts; teams with more than three submissions are disqualified.
Official sources
Compiled from the official call for papers. The organizers’ pages remain authoritative.
Last verified September 9, 2026