How well are open sourced AI-generated image detection models out-of-the-box: A comprehensive benchmark study
Organizations: Neo · Dennis
Abstract
As AI-generated images proliferate across digital platforms, reliable detection methods have become critical for combating misinformation and maintaining content authenticity. While numerous deepfake detection methods have been proposed, existing benchmarks predominantly evaluate fine-tuned models, leaving a critical gap in understanding out-of-the-box performance -- the most common deployment scenario for practitioners. We present the first comprehensive zero-shot evaluation of 16 state-of-the-art detection methods, comprising 23 pretrained detector variants (due to multiple released versions of certain detectors), across 12 diverse datasets, comprising 2.6million image samples spanning 291 unique generators including modern diffusion models. Our systematic analysis reveals striking findings: (1)v7) defeat most detectors, achieving only 18--30% average accuracy; and (5)no universal winner exists, with detector rankings exhibiting substantial instability (Spearman: 0.01 -- 0.87 across dataset pairs); (2)a 37percentage-point performance gap separates the best detector (75.0% mean accuracy) from the worst (37.5%); (3)training data alignment critically impacts generalization, causing up to 20--60% performance variance within architecturally identical detector families; (4)v4, Midjourneymodern commercial generators (FluxDev, Fireflywe identify three systematic failure patterns affecting cross-dataset generalization. Statistical analysis confirms significant performance differences between detectors (Friedman test: =121.01, , Kendall=0.524). Our findings challenge the ``one-size-fits-all'' detector paradigm and provide actionable deployment guidelines, demonstrating that practitioners must carefully select detectors based on their specific threat landscape rather than relying on published benchmark performance.
Figures & tables
| Method | Architecture | Training Data | Key Features |
| CNN-based Detectors | |||
| PatchCraft [ 38 ] | EfficientNet-B4 | GAN + Diffusion images | Patch-level texture analysis |
| AIDE_progan [ 39 ] | ResNet-50 | ProGAN | Training data alignment analysis |
| AIDE_GenImage [ 39 ] | ResNet-50 | GenImage dataset | Training data alignment analysis |
| AIDE_sd14 [ 39 ] | ResNet-50 | Stable Diffusion v1.4 | Training data alignment analysis |
| CNNSpot [ 40 ] † | ResNet-50 | GAN-based datasets | Classical CNN baseline |
| Dataset | Generation Source (Models) | Data Provenance | #Gen. | Year |
|---|---|---|---|---|
| GenImage [ 52 ] | GANs and diffusion models | Official dataset (ImageNet-based) | 8 | 2023 |
| AIGCDetectionBench [ 40 ] | GANs and diffusion models | Community-curated benchmark | 18 | 2023 |
| WildFake [ 53 ] | Diverse generative models | Community-curated & in-house collection | diverse | 2024 |
| OpenFake [ 54 ] | Diffusion-based generators | Community-curated & third-party collected | hundreds | 2023 |
| Diffusion1kstep [ 55 ] | Stable Diffusion variants | Community-collected from official models | 6 | 2023 |
| SynthBuster [ 56 ] | Commercial text-to-image models | Third-party collected from official tools | 9 | 2024 |
| Detector | Mean | Median | Std | Range |
| Top-5 Detectors | ||||
| Community-Forensics [ 47 ] | 0.780 | 0.821 | 0.155 | [0.50, 0.97] |
| SAFE [ 17 ] | 0.688 | 0.812 | 0.298 | [0.03, 1.00] |
| PatchCraft [ 38 ] | 0.675 | 0.742 | 0.190 | [0.39, 0.90] |
| DRCT CLIP-ViT (SD v2.0) [ 45 ] | 0.718 | 0.696 | 0.171 | [0.52, 0.94] |
| DRCT CLIP-ViT (SD v1.4) [ 45 ] | 0.721 | 0.677 | 0.184 | [0.33, 0.98] |
Appendix figures & tables2 assets
Supplementary material from the paper’s appendix.
Appendix
| Detector | GenImage | AIGCDetectionBench | wildfake | OpenFake | Diffusion1kstep | GPT_4o | synthbuster | Chameleon | AI-GenBench | Nano-banana | MNW_fake | community_test |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Community-Forensics | 1.000 | 0.994 | 0.969 | 0.928 | 0.962 | 1.000 | 0.975 | 0.896 | 0.964 | 0.812 | 0.879 | – |
| Community-Forensics | 0.969 | 0.987 | 0.947 | 0.886 | 0.902 | 0.998 | 0.947 | 0.821 | 0.878 | 0.782 | 0.787 | 0.596 |
| Community-Forensics orig | 0.903 | 0.963 | 0.925 | 0.821 | 0.861 | 0.945 | 0.892 | 0.754 | 0.821 | 0.660 | 0.712 | 0.500 |
| SAFE | 0.998 | 0.952 | 0.984 | 0.867 | 0.881 | 0.956 | 0.092 | 0.812 | 0.724 | 0.538 | 0.625 | 0.032 |
| PatchCraft | 0.904 | 0.879 | 0.789 | 0.945 | 0.742 | 0.863 | 0.789 | 0.742 | 0.663 | 0.497 | 0.576 | 0.393 |
| AIDE progan | 0.985 | 0.967 | 0.932 | 0.812 | 0.715 | 0.887 | 0.764 | 0.643 | 0.459 | 0.459 | 0.047 | 0.154 |
| Detector | GI | AIGC | WF | OF | D1k | GPT | SB | Cham | AIG | NB | MNW | Std |
| Comm-For v0.3 | 1 | 1 | 2 | 4 | 2 | 1 | 1 | 2 | 1 | 2 | 1 | 1.27 |
| Comm-For v0.2 | 3 | 2 | 3 | 5 | 5 | 2 | 3 | 4 | 2 | 3 | 2 | 2.19 |
| SAFE | 2 | 4 | 1 | 6 | 6 | 3 | 21 | 3 | 5 | 8 | 6 | 5.67 |
| GI=GenImage, AIGC=AIGCDetectionBench, WF=wildfake, OF=OpenFake, | ||||||||||||
| D1k=Diffusion1kstep, SB=synthbuster, Cham=Chameleon, AIG=AI-GenBench | ||||||||||||
| NB=Nano-banana, MNW=MNW_fake | ||||||||||||
AI-Generated Image Detection
AI-generated image detection identifies synthetic or AI-edited images and develops methods that generalize across generators, domains, and image transformations.
See all 194 papers