Deep Learning for Face Anti-Spoofing: A Survey
Not on the map. Why?
Abstract (arXiv)
Face anti-spoofing (FAS) has lately attracted increasing attention due to its vital role in securing face recognition systems from presentation attacks (PAs). As more and more realistic PAs with novel types spring up, traditional FAS methods based on handcrafted features become unreliable due to their limited representation capacity. With the emergence of large-scale academic datasets in the recent decade, deep learning based FAS achieves remarkable performance and dominates this area. However, existing reviews in this field mainly focus on the handcrafted features, which are outdated and uninspiring for the progress of FAS community. In this paper, to stimulate future research, we present the first comprehensive review of recent advances in deep learning based FAS. It covers several novel and insightful components: 1) besides supervision with binary label (e.g., '0' for bonafide vs. '1' for PAs), we also investigate recent methods with pixel-wise supervision (e.g., pseudo depth map); 2) in addition to traditional intra-dataset evaluation, we collect and analyze the latest methods specially designed for domain generalization and open-set FAS; and 3) besides commercial RGB camera, we summarize the deep learning applications under multi-modal (e.g., depth and infrared) or specialized (e.g., light field and flash) sensors. We conclude this survey by emphasizing current open issues and highlighting potential prospects.
Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). Builds on 93 of its 257 references that are in the map. First posted on arXiv 28 Jun 2021.
Builds on
93 of 257 references.
References · 93
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,845
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2015SSD: Single Shot MultiBox Detectorcited by 3,125
- 2017In Defense of the Triplet Loss for Person Re-Identificationcited by 784
- 2020DeepFakes and Beyond: A Survey of Face Manipulation and Fake Detectioncited by 231
38 more
- 2020Universal Source-Free Domain Adaptationcited by 219
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 161
- 2019FakeCatcher: Detection of Synthetic Portrait Videos using Biological Signalscited by 143
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2021Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognitioncited by 95
- 2020Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learningcited by 93
- 2019Remote Heart Rate Measurement from Highly Compressed Facial Videos: an End-to-end Deep Learning Solution with Video Enhancementcited by 86
- 2019Regularized Fine-grained Meta Face Anti-spoofingcited by 86
- 2015face anti-spoofing based on color texture analysiscited by 82
- 2017A General Framework for Adversarial Examples with Objectivescited by 82
- 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
- 2019Biometric Face Presentation Attack Detection with Multi-Channel Convolutional Neural Networkcited by 78
- 2020Video-based Remote Physiological Measurement via Cross-verified Feature Disentanglingcited by 78
- 2019Deep Pixel-wise Binary Supervision for Face Presentation Attack Detectioncited by 76
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2020Deep Spatial Gradient and Temporal Depth Learning for Face Anti-spoofingcited by 70
- 2020CASIA-SURF CeFA: A Benchmark for Multi-modal Cross-ethnicity Face Anti-spoofingcited by 66
- 2020Face Anti-Spoofing Via Disentangled Representation Learningcited by 65
- 2020Face Anti-Spoofing with Human Material Perceptioncited by 62
- 2020On Disentangling Spoof Trace for Generic Face Anti-Spoofingcited by 62
- 2019CASIA-SURF: A Large-scale Multi-modal Benchmark for Face Anti-spoofingcited by 61
- 2020Learning Meta Face Recognition in Unseen Domainscited by 61
- 2018Face De-Spoofing: Anti-Spoofing via Noise Modelingcited by 60
- 2018A Dataset and Benchmark for Large-scale Multi-modal Face Anti-spoofingcited by 51
- 2021Self-Domain Adaptation for Face Anti-Spoofingcited by 49
- 2021Dual-Cross Central Difference Network for Face Anti-Spoofingcited by 47
- 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
- 2020Revisiting Pixel-Wise Supervision for Face Anti-Spoofingcited by 45
- 2019Learning Meta Model for Zero- and Few-shot Face Anti-spoofingcited by 44
- 2020On the Effectiveness of Vision Transformers for Zero-shot Face Anti-Spoofingcited by 44
- 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
- 2021Cross Modal Focal Loss for RGBD Face Anti-Spoofingcited by 41
- 2021TransRPPG: Remote Photoplethysmography Transformer for 3D Mask Face Presentation Attack Detectioncited by 41
- 2020Multi-Modal Face Anti-Spoofing Based on Central Difference Networkscited by 36
50 most cited of 93 All 93 (JSON)
Built on by
Citing papers per year: 2021: 7; 2022: 10; 2023: 24; 2024: 8; 2025: 8; 2026: 7.
64 papers.
Sort:
By area:
- 2022Thin-Plate Spline Motion Model for Image Animationcited by 209
- 2021PhysFormer: Facial Video-based Physiological Measurement with Temporal Difference Transformercited by 118
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2023PhysFormer++: Facial Video-based Physiological Measurement with SlowFast Temporal Difference Transformercited by 46
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2021Learning Meta Pattern for Face Anti-Spoofingcited by 29
- 2022Benchmarking Joint Face Spoofing and Forgery Detection with Visual and Physiological Cuescited by 24
- 2021Dual Spoof Disentanglement Generation for Face Anti-spoofing with Depth Uncertainty Learningcited by 20
- 2022Flexible-Modal Face Anti-Spoofing: A Benchmarkcited by 20
- 20213D High-Fidelity Mask Face Presentation Attack Detection Challengecited by 18
- 2022Digital and Physical Face Attacks: Reviewing and One Step Furthercited by 17
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
38 more
- 2023Dual-path TokenLearner for Remote Photoplethysmography-based Physiological Measurement with Facial Videoscited by 15
- 2022ViTransPAD: Video Transformer using convolution and self-attention for Face Presentation Attack Detectioncited by 14
- 202550 Years of Automated Face Recognitioncited by 13
- 2022Topology and geometry of data manifold in deep learningcited by 12
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Lesscited by 12
- 2021Facial Depth and Normal Estimation using Single Dual-Pixel Cameracited by 11
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokenscited by 11
- 2021Consistency Regularization for Deep Face Anti-Spoofingcited by 10
- 2023Visual Prompt Flexible-Modal Face Anti-Spoofingcited by 9
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detectioncited by 8
- 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Modelscited by 7
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Modelscited by 6
- 2023Deep neural networks architectures from the perspective of manifold learningcited by 5
- 2023Fine-Grained Annotation for Face Anti-Spoofingcited by 4
- 2022Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Modelscited by 3
- 2023AdvFAS: A robust face anti-spoofing framework against adversarial examplescited by 3
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2022Impact of Face Image Quality Estimation on Presentation Attack Detectioncited by 2
- 2023Wild Face Anti-Spoofing Challenge 2023: Benchmark and Resultscited by 2
- 2023Flickr-PAD: New Face High-Resolution Presentation Attack Detection Databasecited by 2
- 2023Robust face anti-spoofing framework with Convolutional Vision Transformercited by 2
- 2023One-shot lip-based biometric authentication: extending behavioral features with authentication phrase informationcited by 2
- 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofingcited by 2
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
- 2024Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systemscited by 2
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2021Deep Learning meets Liveness Detection: Recent Advancements and Challengescited by 1
- 2023Vulnerability of Face Morphing Attacks: A Case Study on Lookalike and Identical Twinscited by 1
- 2023Mask Attack Detection Using Vascular-weighted Motion-robust rPPG Signalscited by 1
- 2023Hyperbolic Face Anti-Spoofingcited by 1
- 2023IFAST: Weakly Supervised Interpretable Face Anti-spoofing from Single-shot Binocular NIR Imagescited by 1
- 2023Flow-Attention-based Spatio-Temporal Aggregation Network for 3D Mask Detectioncited by 1
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuningcited by 1
- 2022Face Presentation Attack Detectioncited by 0
- 2023Spatiotemporal Pyramidal CNN with Depth-Wise Separable Convolution for Eye Blinking Detection in the Wildcited by 0
- 2023FedSIS: Federated Split Learning with Intermediate Representation Sampling for Privacy-preserving Generalized Face Presentation Attack Detectioncited by 0
- 2023Enhancing Mobile Face Anti-Spoofing: A Robust Framework for Diverse Attack Types under Screen Flashcited by 0
- 2023Distributional Estimation of Data Uncertainty for Surveillance Face Anti-spoofingcited by 0
50 most cited of 64 All 64 (JSON)
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026CardiacMamba: Fair and Robust RGB-RF Fusion for Remote Heart Rate Estimation via State Space Modeling16 Aug 2026
- 2026CanonicalPhys: Pose-Robust Remote Photoplethysmography via Canonical-Space Priors17 Jul 2026
- 2026Intentional Electromagnetic Interference Attacks on Facial Recognition16 Jul 2026
- 2026Flow Augmentation and Knowledge Distillation for Lightweight Face Presentation Attack Detection13 May 2026
- 2026Event-based Liveness Detection using Temporal Ocular Dynamics: An Exploratory Approach29 Apr 2026
- 2026Face Presentation Attack Detection via Content-Adaptive Spatial Operators21 Feb 2026
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detection22 Dec 2025
- 2025Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods3 Sep 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025SoK: On the Survivability of Backdoor Attacks on Unconstrained Face Recognition Systems2 Jul 2025
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuning27 Jun 2025
38 more
- 202550 Years of Automated Face Recognition30 May 2025
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models14 May 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2024Spoof Trace Discovery for Deep Learning Based Explainable Face Anti-Spoofing23 Dec 2024
- 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Models13 Sep 2024
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesis4 Sep 2024
- 2024Time-Aware Face Anti-Spoofing with Rotation Invariant Local Binary Patterns and Deep Learning27 Aug 2024
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detection23 Aug 2024
- 2024Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems11 Jul 2024
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systems6 Jun 2024
- 2024VoxAtnNet: A 3D Point Clouds Convolutional Neural Network for Generalizable Face Presentation Attack Detection19 Apr 2024
- 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofing30 Nov 2023
- 2023AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems20 Nov 2023
- 2023Flow-Attention-based Spatio-Temporal Aggregation Network for 3D Mask Detection25 Oct 2023
- 2023Fine-Grained Annotation for Face Anti-Spoofing12 Oct 2023
- 2023IFAST: Weakly Supervised Interpretable Face Anti-spoofing from Single-shot Binocular NIR Images29 Sep 2023
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidance28 Sep 2023
- 2023Distributional Estimation of Data Uncertainty for Surveillance Face Anti-spoofing18 Sep 2023
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokens7 Sep 2023
- 2023Enhancing Mobile Face Anti-Spoofing: A Robust Framework for Diverse Attack Types under Screen Flash29 Aug 2023
- 2023FedSIS: Federated Split Learning with Intermediate Representation Sampling for Privacy-preserving Generalized Face Presentation Attack Detection20 Aug 2023
- 2023Hyperbolic Face Anti-Spoofing17 Aug 2023
- 2023Dual-path TokenLearner for Remote Photoplethysmography-based Physiological Measurement with Facial Videos15 Aug 2023
- 2023One-shot lip-based biometric authentication: extending behavioral features with authentication phrase information14 Aug 2023
- 2023AdvFAS: A robust face anti-spoofing framework against adversarial examples4 Aug 2023
- 2023Visual Prompt Flexible-Modal Face Anti-Spoofing26 Jul 2023
- 2023Robust face anti-spoofing framework with Convolutional Vision Transformer24 Jul 2023
- 2023Spatiotemporal Pyramidal CNN with Depth-Wise Separable Convolution for Eye Blinking Detection in the Wild20 Jun 2023
- 2023Deep neural networks architectures from the perspective of manifold learning6 Jun 2023
- 2023Mask Attack Detection Using Vascular-weighted Motion-robust rPPG Signals25 May 2023
- 2023Flickr-PAD: New Face High-Resolution Presentation Attack Detection Database25 Apr 2023
- 2023Wild Face Anti-Spoofing Challenge 2023: Benchmark and Results12 Apr 2023
- 2023Vulnerability of Face Morphing Attacks: A Case Study on Lookalike and Identical Twins24 Mar 2023
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Less16 Mar 2023
- 2023PhysFormer++: Facial Video-based Physiological Measurement with SlowFast Temporal Difference Transformer7 Feb 2023
- 2022Face Presentation Attack Detection7 Dec 2022
- 2022Impact of Face Image Quality Estimation on Presentation Attack Detection30 Sep 2022
- 2022Digital and Physical Face Attacks: Reviewing and One Step Further29 Sep 2022
50 newest of 64 All 64 (JSON)
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Modelscited by 6
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detectioncited by 0
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detection22 Dec 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models14 May 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Models13 Sep 2024
- 2022Thin-Plate Spline Motion Model for Image Animationcited by 209
- 2021PhysFormer: Facial Video-based Physiological Measurement with Temporal Difference Transformercited by 118
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2023PhysFormer++: Facial Video-based Physiological Measurement with SlowFast Temporal Difference Transformercited by 46
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2021Learning Meta Pattern for Face Anti-Spoofingcited by 29
- 2022Benchmarking Joint Face Spoofing and Forgery Detection with Visual and Physiological Cuescited by 24
- 2021Dual Spoof Disentanglement Generation for Face Anti-spoofing with Depth Uncertainty Learningcited by 20
- 2022Flexible-Modal Face Anti-Spoofing: A Benchmarkcited by 20
- 20213D High-Fidelity Mask Face Presentation Attack Detection Challengecited by 18
- 2022Digital and Physical Face Attacks: Reviewing and One Step Furthercited by 17
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
12 most cited of 58 All 58 (JSON)
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026CardiacMamba: Fair and Robust RGB-RF Fusion for Remote Heart Rate Estimation via State Space Modeling16 Aug 2026
- 2026CanonicalPhys: Pose-Robust Remote Photoplethysmography via Canonical-Space Priors17 Jul 2026
- 2026Intentional Electromagnetic Interference Attacks on Facial Recognition16 Jul 2026
- 2026Flow Augmentation and Knowledge Distillation for Lightweight Face Presentation Attack Detection13 May 2026
- 2026Event-based Liveness Detection using Temporal Ocular Dynamics: An Exploratory Approach29 Apr 2026
- 2026Face Presentation Attack Detection via Content-Adaptive Spatial Operators21 Feb 2026
- 2025Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods3 Sep 2025
- 2025SoK: On the Survivability of Backdoor Attacks on Unconstrained Face Recognition Systems2 Jul 2025
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuning27 Jun 2025
- 202550 Years of Automated Face Recognition30 May 2025
- 2024Spoof Trace Discovery for Deep Learning Based Explainable Face Anti-Spoofing23 Dec 2024
12 newest of 58 All 58 (JSON)