CASIA-SURF: A Large-scale Multi-modal Benchmark for Face Anti-spoofing
Not on the map. Why?
Abstract (arXiv)
Face anti-spoofing is essential to prevent face recognition systems from a security breach. Much of the progresses have been made by the availability of face anti-spoofing benchmark datasets in recent years. However, existing face anti-spoofing benchmarks have limited number of subjects (≤negmedspace170) and modalities (≤negmedspace2), which hinder the further development of the academic community. To facilitate face anti-spoofing research, we introduce a large-scale multi-modal dataset, namely CASIA-SURF, which is the largest publicly available dataset for face anti-spoofing in terms of both subjects and modalities. Specifically, it consists of 1,000 subjects with 21,000 videos and each sample has 3 modalities (i.e., RGB, Depth and IR). We also provide comprehensive evaluation metrics, diverse evaluation protocols, training/validation/testing subsets and a measurement tool, developing a new benchmark for face anti-spoofing. Moreover, we present a novel multi-modal multi-scale fusion method as a strong baseline, which performs feature re-weighting to select the more informative channel features while suppressing the less useful ones for each modality across different scales. Extensive experiments have been conducted on the proposed dataset to verify its significance and generalization capability. The dataset is available at https://sites.google.com/qq.com/face-anti-spoofing/welcome/challengecvpr2019?authuser=0
Key facts. Cited by 61 papers in the map (data through 7 Oct 2026). First posted on arXiv 28 Aug 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 10; 2022: 7; 2023: 13; 2024: 10; 2025: 14; 2026: 7.
61 papers.
Sort:
By area:
- 2024Deep Multimodal Learning with Missing Modality: A Surveycited by 89
- 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 64
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2022Multi-domain Learning for Updating Face Anti-spoofing Modelscited by 39
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
- 2021Detection and Continual Learning of Novel Face Presentation Attackscited by 33
- 2023Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognitioncited by 33
- 2021Face.evoLVe: A High-Performance Face Recognition Librarycited by 26
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Modelscited by 23
- 2023FM-ViT: Flexible Modal Vision Transformers for Face Anti-Spoofingcited by 22
38 more
- 2021Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detectioncited by 20
- 2023Rethinking Vision Transformer and Masked Autoencoder in Multimodal Face Anti-Spoofingcited by 19
- 2023MA-ViT: Modality-Agnostic Vision Transformers for Face Anti-Spoofingcited by 18
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
- 2023Surveillance Face Anti-spoofingcited by 12
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Lesscited by 12
- 2021Facial Depth and Normal Estimation using Single Dual-Pixel Cameracited by 11
- 2023Visual Prompt Flexible-Modal Face Anti-Spoofingcited by 9
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detectioncited by 8
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineeringcited by 7
- 2023Domain Generalization via Ensemble Stacking for Face Presentation Attack Detectioncited by 6
- 2022Self-Supervised Face Presentation Attack Detection with Dynamic Grayscale Snippetscited by 5
- 2023Surveillance Face Presentation Attack Detection Challengecited by 5
- 2025Mixture-of-Attack-Experts with Class Regularization for Unified Physical-Digital Face Attack Detectioncited by 5
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2021Asymmetric Modality Translation For Face Presentation Attack Detectioncited by 4
- 2025DADM: Dual Alignment of Domain and Modality for Face Anti-spoofingcited by 4
- 2021Shuffled Patch-Wise Supervision for Presentation Attack Detectioncited by 3
- 2021Review of Face Presentation Attack Detection Competitionscited by 3
- 2024Unified Physical-Digital Attack Detection Challengecited by 3
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2022Attacking Face Recognition with T-shirts: Database, Vulnerability Assessment and Detectioncited by 2
- 2023Wild Face Anti-Spoofing Challenge 2023: Benchmark and Resultscited by 2
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2022Race Bias Analysis of Bona Fide Errors in face anti-spoofingcited by 1
- 2023MARS: Exploiting Multi-Level Parallelism for DNN Workloads on Adaptive Multi-Accelerator Systemscited by 1
- 2024Liveness Detection in Computer Vision: Transformer-based Self-Supervised Learning for Face Anti-Spoofingcited by 1
- 2024G2V2former: Graph Guided Video Vision Transformer for Face Anti-Spoofingcited by 1
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofingcited by 1
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofingcited by 1
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detectioncited by 1
- 2021Improved Detection of Face Presentation Attacks Using Image Decompositioncited by 0
- 2021Understanding Cross Domain Presentation Attack Detection for Visible Face Recognitioncited by 0
- 2022Face Presentation Attack Detectioncited by 0
- 2022A Novel Active Solution for Two-Dimensional Face Presentation Attack Detectioncited by 0
50 most cited of 61 All 61 (JSON)
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detection18 Aug 2026
- 2026DriveFace: A Cross-Spectral Through-Glass Face Dataset for On-the-Move Vehicular Border Control15 Jul 2026
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidance9 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026MMDG-Bench: A Benchmark for Multimodal Domain Generalization30 May 2026
- 2026Domain-generalizable Face Anti-Spoofing with Patch-based Multi-tasking and Artifact Pattern Conversion10 Apr 2026
- 2025When unlearning is free: leveraging low influence points to reduce computational costs4 Dec 2025
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofing20 Oct 2025
- 2025Robust Multi-Modal Face Anti-Spoofing with Domain Adaptation: Tackling Missing Modalities, Noisy Pseudo-Labels, and Model Degradation27 Sep 2025
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
38 more
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofing5 Jul 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineering6 Apr 2025
- 2025Mixture-of-Attack-Experts with Class Regularization for Unified Physical-Digital Face Attack Detection1 Apr 2025
- 2025DADM: Dual Alignment of Domain and Modality for Face Anti-spoofing1 Mar 2025
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Models30 Jan 2025
- 2025Unified Face Matching and Physical-Digital Spoofing Attack Detection16 Jan 2025
- 2024Deep Multimodal Learning with Missing Modality: A Survey12 Sep 2024
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesis4 Sep 2024
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detection23 Aug 2024
- 2024G2V2former: Graph Guided Video Vision Transformer for Face Anti-Spoofing14 Aug 2024
- 2024Liveness Detection in Computer Vision: Transformer-based Self-Supervised Learning for Face Anti-Spoofing19 Jun 2024
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition13 Jun 2024
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systems6 Jun 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024Unified Physical-Digital Attack Detection Challenge9 Apr 2024
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofing21 Mar 2024
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidance28 Sep 2023
- 2023FedSIS: Federated Split Learning with Intermediate Representation Sampling for Privacy-preserving Generalized Face Presentation Attack Detection20 Aug 2023
- 2023Visual Prompt Flexible-Modal Face Anti-Spoofing26 Jul 2023
- 2023MARS: Exploiting Multi-Level Parallelism for DNN Workloads on Adaptive Multi-Accelerator Systems23 Jul 2023
- 2023FM-ViT: Flexible Modal Vision Transformers for Face Anti-Spoofing5 May 2023
- 2023Surveillance Face Presentation Attack Detection Challenge15 Apr 2023
- 2023MA-ViT: Modality-Agnostic Vision Transformers for Face Anti-Spoofing15 Apr 2023
- 2023Wild Face Anti-Spoofing Challenge 2023: Benchmark and Results12 Apr 2023
- 2023Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition28 Mar 2023
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Less16 Mar 2023
- 2023Rethinking Vision Transformer and Masked Autoencoder in Multimodal Face Anti-Spoofing11 Feb 2023
- 2023Domain Generalization via Ensemble Stacking for Face Presentation Attack Detection5 Jan 2023
- 2023Surveillance Face Anti-spoofing3 Jan 2023
- 2022A Novel Active Solution for Two-Dimensional Face Presentation Attack Detection14 Dec 2022
- 2022Face Presentation Attack Detection7 Dec 2022
- 2022Attacking Face Recognition with T-shirts: Database, Vulnerability Assessment and Detection14 Nov 2022
- 2022Race Bias Analysis of Bona Fide Errors in face anti-spoofing11 Oct 2022
- 2022Self-Supervised Face Presentation Attack Detection with Dynamic Grayscale Snippets27 Aug 2022
- 2022Multi-domain Learning for Updating Face Anti-spoofing Models23 Aug 2022
50 newest of 61 All 61 (JSON)
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detectioncited by 0
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detection18 Aug 2026
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2024Deep Multimodal Learning with Missing Modality: A Surveycited by 89
- 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 64
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2022Multi-domain Learning for Updating Face Anti-spoofing Modelscited by 39
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
- 2021Detection and Continual Learning of Novel Face Presentation Attackscited by 33
- 2023Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognitioncited by 33
- 2021Face.evoLVe: A High-Performance Face Recognition Librarycited by 26
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Modelscited by 23
- 2023FM-ViT: Flexible Modal Vision Transformers for Face Anti-Spoofingcited by 22
- 2021Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detectioncited by 20
12 most cited of 53 All 53 (JSON)
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026DriveFace: A Cross-Spectral Through-Glass Face Dataset for On-the-Move Vehicular Border Control15 Jul 2026
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidance9 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026MMDG-Bench: A Benchmark for Multimodal Domain Generalization30 May 2026
- 2026Domain-generalizable Face Anti-Spoofing with Patch-based Multi-tasking and Artifact Pattern Conversion10 Apr 2026
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofing20 Oct 2025
- 2025Robust Multi-Modal Face Anti-Spoofing with Domain Adaptation: Tackling Missing Modalities, Noisy Pseudo-Labels, and Model Degradation27 Sep 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofing5 Jul 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineering6 Apr 2025
12 newest of 53 All 53 (JSON)