# Morphing Attack Potential

arXiv: https://arxiv.org/abs/2204.13374 · HTML: https://mlsanity.com/paper/2204.13374/

## Key facts

- Cited by 15 papers in the map (data through 14 Oct 2026).
- Builds on 2 of its 10 references that are in the map.
- First posted on arXiv 28 Apr 2022.

## Builds on (most cited first, 2 of 2)

- [Morphing Attack Detection -- Database, Evaluation Platform and Benchmarking](https://mlsanity.com/paper/2006.06458/) (2020)
- [On the Influence of Ageing on Face Morph Attacks: Vulnerability and Detection](https://mlsanity.com/paper/2007.02684/) (2020)

## Built on by (most cited first, 15 of 15)

- [Greedy-DiM: Greedy Algorithms for Unreasonably Effective Face Morphs](https://mlsanity.com/paper/2404.06025/) (2024)
- [LADIMO: Face Morph Generation through Biometric Template Inversion with Latent Diffusion](https://mlsanity.com/paper/2410.07988/) (2024)
- [Deep Composite Face Image Attacks: Generation, Vulnerability and Detection](https://mlsanity.com/paper/2211.11039/) (2022)
- [Fast-DiM: Towards Fast Diffusion Morphs](https://mlsanity.com/paper/2310.09484/) (2023)
- [SynMorph: Generating Synthetic Face Morphing Dataset with Mated Samples](https://mlsanity.com/paper/2409.05595/) (2024)
- [Voice Morphing: Two Identities in One Voice](https://mlsanity.com/paper/2309.02404/) (2023)
- [Worst-Case Morphs using Wasserstein ALI and Improved MIPGAN](https://mlsanity.com/paper/2310.08371/) (2023)
- [TetraLoss: Improving the Robustness of Face Recognition against Morphing Attacks](https://mlsanity.com/paper/2401.11598/) (2024)
- [The Impact of Print-Scanning in Heterogeneous Morph Evaluation Scenarios](https://mlsanity.com/paper/2404.06559/) (2024)
- [StableMorph: High-Quality Face Morph Generation with Stable Diffusion](https://mlsanity.com/paper/2511.08090/) (2025)
- [V-MAD: Video-based Morphing Attack Detection in Operational Scenarios](https://mlsanity.com/paper/2404.06963/) (2024)
- [DOOMGAN:High-Fidelity Dynamic Identity Obfuscation Ocular Generative Morphing](https://mlsanity.com/paper/2507.17158/) (2025)
- [MLSD-GAN -- Generating Strong High Quality Face Morphing Attacks using Latent Semantic Disentanglement](https://mlsanity.com/paper/2404.12679/) (2024)
- [VoxMorph: Scalable Zero-shot Voice Identity Morphing via Disentangled Embeddings](https://mlsanity.com/paper/2601.20883/) (2026)
- [Arc2Morph: Identity-Preserving Facial Morphing with Arc2Face](https://mlsanity.com/paper/2602.16569/) (2026)

## Abstract (arXiv)

In security systems the risk assessment in the sense of common criteria testing is a very relevant topic; this requires quantifying the attack potential in terms of the expertise of the attacker, his knowledge about the target and access to equipment. Contrary to those attacks, the recently revealed morphing attacks against Face Recognition Systems (FRSs) can not be assessed by any of the above criteria. But not all morphing techniques pose the same risk for an operational face recognition system. This paper introduces with the Morphing Attack Potential (MAP) a consistent methodology, that can quantify the risk, which a certain morphing attack creates.