FARE: Forensic Acceptance Region Estimation for Catching Bait-and-Switch Image Generators
Across generator swaps, including substitutions with similar model versions and model variants, FARE is effective at detecting swaps, consistently outperforming existing baselines at strict operating points, and remains effective under the exact-model and decision-only attacks evaluated in this work.