Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detection
Not on the map. Why?
Abstract (arXiv)
The supervised-learning-based morphing attack detection (MAD) solutions achieve outstanding success in dealing with attacks from known morphing techniques and known data sources. However, given variations in the morphing attacks, the performance of supervised MAD solutions drops significantly due to the insufficient diversity and quantity of the existing MAD datasets. To address this concern, we propose a completely unsupervised MAD solution via self-paced anomaly detection (SPL-MAD) by leveraging the existing large-scale face recognition (FR) datasets and the unsupervised nature of convolutional autoencoders. Using general FR datasets that might contain unintentionally and unlabeled manipulated samples to train an autoencoder can lead to a diverse reconstruction behavior of attack and bona fide samples. We analyze this behavior empirically to provide a solid theoretical ground for designing our unsupervised MAD solution. This also results in proposing to integrate our adapted modified self-paced learning paradigm to enhance the reconstruction error separability between the bona fide and attack samples in a completely unsupervised manner. Our experimental results on a diverse set of MAD evaluation datasets show that the proposed unsupervised SPL-MAD solution outperforms the overall performance of a wide range of supervised MAD solutions and provides higher generalizability on unknown attacks.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 22 of its 55 references that are in the map. First posted on arXiv 11 Aug 2022.
Builds on
22 of 55 references.
References · 22
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2020Training Generative Adversarial Networks with Limited Datacited by 1,184
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2014Learning Face Representation from Scratchcited by 451
- 2016Learning Temporal Regularity in Video Sequencescited by 254
- 2020Learning From Multiple Experts: Self-paced Knowledge Distillation for Long-tailed Classificationcited by 175
- 2021ElasticFace: Elastic Margin Loss for Deep Face Recognitioncited by 143
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2020Can GAN Generated Morphs Threaten Face Recognition Systems Equally as Landmark Based Morphs? -- Vulnerability and Detectioncited by 46
10 more
- 2020Vulnerability Analysis of Face Morphing Attacks from Landmarks and Generative Adversarial Networkscited by 36
- 2021MixFaceNets: Extremely Efficient Face Recognition Networkscited by 36
- 2021PW-MAD: Pixel-wise Supervision for Generalized Face Morphing Attack Detectioncited by 29
- 2019Face morphing detection in the presence of printing/scanning and heterogeneous image sourcescited by 22
- 2016Self-Paced Learning: an Implicit Regularization Perspectivecited by 21
- 2021ReGenMorph: Visibly Realistic GAN Generated Face Morphing Attacks by Attack Re-generationcited by 21
- 2021Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detectioncited by 20
- 2019Detection of Face Recognition Adversarial Attackscited by 15
- 2020Mutual Information Maximization on Disentangled Representations for Differential Morph Detectioncited by 14
- 2021Differential Anomaly Detection for Facial Imagescited by 11
Built on by
Citing papers per year: 2023: 5; 2024: 2; 2025: 2; 2026: 7.
16 papers.
Sort:
By area:
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
- 2025MADation: Face Morphing Attack Detection with Foundation Modelscited by 14
- 2023Face Morphing Attack Detection with Denoising Diffusion Probabilistic Modelscited by 12
- 2023Unveiling the Two-Faced Truth: Disentangling Morphed Identities for Face Morphing Detectioncited by 9
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learningcited by 7
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detectioncited by 6
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Datacited by 5
- 2024Evaluating the Effectiveness of Attack-Agnostic Features for Morphing Attack Detectioncited by 2
- 2026FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detectioncited by 2
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Modelscited by 1
- 2026DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusioncited by 1
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularizationcited by 0
4 more
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026On the Impact of Face Segmentation-Based Background Removal on Recognition and Morphing Attack Detectioncited by 0
- 2026Enhancing Single-Image Facial Demorphing using Multimodal Large Language Modelscited by 0
- 2026Enhancing Single-Image Facial Demorphing using Multimodal Large Language Models25 May 2026
- 2026DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion23 Apr 2026
- 2026On the Impact of Face Segmentation-Based Background Removal on Recognition and Morphing Attack Detection22 Apr 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection16 Mar 2026
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models17 Feb 2026
- 2026FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detection28 Jan 2026
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning7 Apr 2025
- 2025MADation: Face Morphing Attack Detection with Foundation Models7 Jan 2025
- 2024Evaluating the Effectiveness of Attack-Agnostic Features for Morphing Attack Detection22 Oct 2024
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detection3 Aug 2024
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Data9 Nov 2023
4 more
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularization20 Aug 2023
- 2023Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models27 Jun 2023
- 2023Unveiling the Two-Faced Truth: Disentangling Morphed Identities for Face Morphing Detection5 Jun 2023
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Data5 Mar 2023
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
- 2025MADation: Face Morphing Attack Detection with Foundation Modelscited by 14
- 2023Unveiling the Two-Faced Truth: Disentangling Morphed Identities for Face Morphing Detectioncited by 9
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learningcited by 7
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detectioncited by 6
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Datacited by 5
- 2026FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detectioncited by 2
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularizationcited by 0
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026On the Impact of Face Segmentation-Based Background Removal on Recognition and Morphing Attack Detectioncited by 0
- 2026On the Impact of Face Segmentation-Based Background Removal on Recognition and Morphing Attack Detection22 Apr 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection16 Mar 2026
- 2026FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detection28 Jan 2026
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning7 Apr 2025
- 2025MADation: Face Morphing Attack Detection with Foundation Models7 Jan 2025
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detection3 Aug 2024
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Data9 Nov 2023
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularization20 Aug 2023
- 2023Unveiling the Two-Faced Truth: Disentangling Morphed Identities for Face Morphing Detection5 Jun 2023
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Data5 Mar 2023