Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detection
Not on the map. Why?
Abstract (arXiv)
Face masks have become one of the main methods for reducing the transmission of COVID-19. This makes face recognition (FR) a challenging task because masks hide several discriminative features of faces. Moreover, face presentation attack detection (PAD) is crucial to ensure the security of FR systems. In contrast to the growing number of masked FR studies, the impact of face masked attacks on PAD has not been explored. Therefore, we present novel attacks with real face masks placed on presentations and attacks with subjects wearing masks to reflect the current real-world situation. Furthermore, this study investigates the effect of masked attacks on PAD performance by using seven state-of-the-art PAD algorithms under different experimental settings. We also evaluate the vulnerability of FR systems to masked attacks. The experiments show that real masked attacks pose a serious threat to the operation and security of FR systems.
Key facts. Cited by 20 papers in the map (data through 14 Oct 2026). Builds on 18 of its 43 references that are in the map. First posted on arXiv 2 Mar 2021.
Builds on
18 of 43 references.
References · 18
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 903
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 737
- 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 624
- 2019Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networkscited by 582
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 105
6 more
- 2015face anti-spoofing based on color texture analysiscited by 82
- 2019Deep Pixel-wise Binary Supervision for Face Presentation Attack Detectioncited by 76
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2019CASIA-SURF: A Large-scale Multi-modal Benchmark for Face Anti-spoofingcited by 61
- 2020The Effect of Wearing a Mask on Face Recognition Performance: an Exploratory Studycited by 26
- 2018Discriminative Representation Combinations for Accurate Face Spoofing Detectioncited by 6
Built on by
Citing papers per year: 2021: 7; 2022: 5; 2023: 3; 2024: 0; 2025: 1; 2026: 4.
20 papers.
Sort:
By area:
- 2021Robust Physical-World Attacks on Face Recognitioncited by 26
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detectioncited by 14
- 2022Fairness in Face Presentation Attack Detectioncited by 13
- 2021FocusFace: Multi-task Contrastive Learning for Masked Face Recognitioncited by 12
- 2021Partial Attack Supervision and Regional Weighted Inference for Masked Face Presentation Attack Detectioncited by 10
- 2021Consistency Regularization for Deep Face Anti-Spoofingcited by 10
- 2021Mask-invariant Face Recognition through Template-level Knowledge Distillationcited by 10
- 2022Face Morphing Attacks and Face Image Quality: The Effect of Morphing and the Unsupervised Attack Detection by Qualitycited by 8
- 2021My Eyes Are Up Here: Promoting Focus on Uncovered Regions in Masked Face Recognitioncited by 7
- 2021Explainability of the Implications of Supervised and Unsupervised Face Image Quality Estimations Through Activation Map Variation Analyses in Face Recognition Modelscited by 7
8 more
- 2022OCFR 2022: Competition on Occluded Face Recognition From Synthetically Generated Structure-Aware Occlusionscited by 7
- 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statisticscited by 7
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Datacited by 5
- 2022A Survey on Computer Vision based Human Analysis in the COVID-19 Eracited by 3
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detection20 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detection6 Jan 2025
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Data9 Nov 2023
- 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statistics28 Aug 2023
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Data5 Mar 2023
- 2022A Survey on Computer Vision based Human Analysis in the COVID-19 Era7 Nov 2022
- 2022Fairness in Face Presentation Attack Detection19 Sep 2022
- 2022Face Morphing Attacks and Face Image Quality: The Effect of Morphing and the Unsupervised Attack Detection by Quality11 Aug 2022
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection11 Aug 2022
8 more
- 2022OCFR 2022: Competition on Occluded Face Recognition From Synthetically Generated Structure-Aware Occlusions4 Aug 2022
- 2021Mask-invariant Face Recognition through Template-level Knowledge Distillation10 Dec 2021
- 2021Explainability of the Implications of Supervised and Unsupervised Face Image Quality Estimations Through Activation Map Variation Analyses in Face Recognition Models9 Dec 2021
- 2021Consistency Regularization for Deep Face Anti-Spoofing24 Nov 2021
- 2021Partial Attack Supervision and Regional Weighted Inference for Masked Face Presentation Attack Detection8 Nov 2021
- 2021FocusFace: Multi-task Contrastive Learning for Masked Face Recognition28 Oct 2021
- 2021Robust Physical-World Attacks on Face Recognition20 Sep 2021
- 2021My Eyes Are Up Here: Promoting Focus on Uncovered Regions in Masked Face Recognition2 Aug 2021
- 2021Robust Physical-World Attacks on Face Recognitioncited by 26
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detectioncited by 14
- 2022Fairness in Face Presentation Attack Detectioncited by 13
- 2021FocusFace: Multi-task Contrastive Learning for Masked Face Recognitioncited by 12
- 2021Partial Attack Supervision and Regional Weighted Inference for Masked Face Presentation Attack Detectioncited by 10
- 2021Consistency Regularization for Deep Face Anti-Spoofingcited by 10
- 2022Face Morphing Attacks and Face Image Quality: The Effect of Morphing and the Unsupervised Attack Detection by Qualitycited by 8
- 2021My Eyes Are Up Here: Promoting Focus on Uncovered Regions in Masked Face Recognitioncited by 7
- 2021Explainability of the Implications of Supervised and Unsupervised Face Image Quality Estimations Through Activation Map Variation Analyses in Face Recognition Modelscited by 7
- 2022OCFR 2022: Competition on Occluded Face Recognition From Synthetically Generated Structure-Aware Occlusionscited by 7
12 most cited of 18 All 18 (JSON)
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detection20 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detection6 Jan 2025
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Data9 Nov 2023
- 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statistics28 Aug 2023
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Data5 Mar 2023
- 2022A Survey on Computer Vision based Human Analysis in the COVID-19 Era7 Nov 2022
- 2022Fairness in Face Presentation Attack Detection19 Sep 2022
- 2022Face Morphing Attacks and Face Image Quality: The Effect of Morphing and the Unsupervised Attack Detection by Quality11 Aug 2022
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection11 Aug 2022
- 2022OCFR 2022: Competition on Occluded Face Recognition From Synthetically Generated Structure-Aware Occlusions4 Aug 2022
12 newest of 18 All 18 (JSON)