---
格式版本: 2
标题: "Frozen DINO Localizes Image Edits Without a Localizer"
原文链接: "https://arxiv.org/abs/2608.18968"
发布日期: "2026-08-19"
发布时间校准状态: "found"
发布时间需复核: "否"
发布时间来源: "rule:local:strict_original_body"
发布时间证据: "**\\[v1\\]** Wed, 19 Aug 2026 14:35:59 UTC (1,259 KB)"
发布时间校准原因: "规则确认唯一严格发布时间，来源 local:strict_original_body"
发布时间校准置信度: "high"
发布时间候选数量: 18
发布时间严格候选数量: 6
发布时间原页读取状态: "source template page reused from URL open"
发布时间未找到原因: ""
发布时间校准时间: "2026-08-20T14:41:26+08:00"
发布时间仲裁状态: "skipped"
发布时间仲裁尝试次数: 0
发布时间仲裁耗时毫秒: 0
发现时间: "2026-08-20T14:38:42+08:00"
入库时间: "2026-08-20T06:41:26.163Z"
来源平台: "arXiv 学术论文搜索"
搜索渠道: "source_template"
搜索词: "https://arxiv.org/search/?query=Oracle&searchtype=all"
匹配关键词:
  - "AI"
相关厂家:
  - "Oracle"
相关专家:
  []
内容类型: "网页"
抓取工具: "Free Fetch + Defuddle"
清洗工具: "Defuddle Markdown + Defuddle/Readability 正文提取"
原始附件:
  []
AI优质: "否"
AI打分: 15
AI分档: "非优质"
AI质检状态: "不通过"
AI打分理由: "内容为arXiv计算机视觉论文，涉及图像编辑定位，与超节点、AI Rack、数据中心基础设施等主题完全无关。"
AI质检模型: "ali-deepseek-v4-flash"
AI质检时间: "2026-08-20T14:42:49+08:00"
AI主题相关性: 0
AI来源权威性: 5
AI新颖性: 5
AI技术细节: 0
AI商业部署信号: 0
AI完整性: 5
AI摘要: "论文提出TRAIL方法，利用冻结DINO编码器的patch-token余弦漂移来定位图像编辑区域，无需训练专用局部化器。"
AI摘要模型: "ali-deepseek-v4-flash"
AI摘要时间: "2026-09-07T03:17:16.941Z"
采集批次: "2026年8月20日14点19分32秒"
采集批次ID: "20260820-141932-079"
去重键: "https://arxiv.org/abs/2608.18968"
---

## Computer Science > Computer Vision and Pattern Recognition

## Title:Frozen DINO Localizes Image Edits Without a Localizer

Authors:[Zane Kumar](https://arxiv.org/search/cs?searchtype=author&query=Kumar,+Z), [Vishal Jain](https://arxiv.org/search/cs?searchtype=author&query=Jain,+V), [Bernhard Kainz](https://arxiv.org/search/cs?searchtype=author&query=Kainz,+B)

[View PDF](https://arxiv.org/pdf/2608.18968) [HTML (experimental)](https://arxiv.org/html/2608.18968v1)

> Abstract:Localized image edits can change a photograph's meaning while leaving most of it authentic, so forensic analysis must identify where an edit occurred. We show that patch-level perturbation responses from frozen DINO encoders are themselves localization maps. Training-free Localization of AI-image Edits from patch-token Drift (TRAIL) applies one global Haar perturbation and maps cosine drift between corresponding patch tokens. On 80 source-disjoint CocoGlide test images, TRAIL reaches.903 patch AUROC versus.912 for the mask-supervised Detective SAM; fixed-threshold Dice is.619 versus.709, while an oracle threshold raises TRAIL to.790. Transferred unchanged to Poisson image interpolation, TRAIL reaches.855 AUROC versus.864, showing that the cue persists without a generator. Across sixteen DINO encoders, the best block lies at normalized depth.80-.94. Global context matters: AUROC falls from.903 globally to.857 for local-in-canvas perturbations and.735 for independently encoded crops. Frozen DINO patch tokens therefore contain a strong late-layer localization signal whose visibility depends on the perturbation and preserved context. Code: [this https URL](https://github.com/VishalJ99/trail-image-edit-localization).

| Comments: |  |
| --- | --- |
| Subjects: | Computer Vision and Pattern Recognition (cs.CV) |
| Cite as: | [arXiv:2608.18968](https://arxiv.org/abs/2608.18968) \[cs.CV\] |
|  | (or [arXiv:2608.18968v1](https://arxiv.org/abs/2608.18968v1) \[cs.CV\] for this version) |
|  | [https://doi.org/10.48550/arXiv.2608.18968](https://doi.org/10.48550/arXiv.2608.18968) |

## Submission history

From: Vishal Jain Mr \[[view email](https://arxiv.org/show-email/1bb21f08/2608.18968)\]  
**\[v1\]** Wed, 19 Aug 2026 14:35:59 UTC (1,259 KB)

[Which authors of this paper are endorsers?](https://arxiv.org/auth/show-endorsers/2608.18968) | Disable MathJax ([What is MathJax?](https://info.arxiv.org/help/mathjax.html))