Efficient and Robust Video Defense Framework against 3D-field Personalized Talking Face
Talking Face Generation (TFG) has made remarkable progress in synthesizing realistic speaker videos, evolving into two paradigms based on identity incorporation: image-based 2D TFG and video-based 3D TFG. Despite enabling efficient content creation, TFG also raises risks of unauthorized portrait forgery and privacy abuse, motivating proactive defenses. Existing defenses mainly target image-based 2D TFG, while, to our knowledge, no proactive defense has been developed for video-based 3D TFG. A straightforward solution is to apply existing image-based defenses independently to each video frame. However, experiments show that this adaptation is ineffective and computationally expensive: video-based 3D TFG lacks the image-reference modules and reverse diffusion processes exploited by existing defenses, and per-frame optimization incurs substantial overhead. To address this gap, we analyze the vulnerabilities of video-based 3D TFG and propose ErodedFace, an efficient proactive defense framework targeting reference-video preprocessing. ErodedFace uses a curriculum-inspired two-stage strategy: Stage I establishes scale-robust disruption through similarity-guided parameter inheritance and adaptive multi-scale optimization; Stage II improves perceptual fidelity and transformation robustness without weakening protection. Extensive experiments show that ErodedFace effectively protects portrait videos against unauthorized video-based 3D TFG, achieves a 10.0x speedup in defense generation over existing image-based 2D TFG defenses, and remains robust to common transformations and recent purification methods.