Robust Ensemble Morph Detection with Domain Generalization
Not on the map. Why?
Abstract (arXiv)
Although a substantial amount of studies is dedicated to morph detection, most of them fail to generalize for morph faces outside of their training paradigm. Moreover, recent morph detection methods are highly vulnerable to adversarial attacks. In this paper, we intend to learn a morph detection model with high generalization to a wide range of morphing attacks and high robustness against different adversarial attacks. To this aim, we develop an ensemble of convolutional neural networks (CNNs) and Transformer models to benefit from their capabilities simultaneously. To improve the robust accuracy of the ensemble model, we employ multi-perturbation adversarial training and generate adversarial examples with high transferability for several single models. Our exhaustive evaluations demonstrate that the proposed robust ensemble model generalizes to several morphing attacks and face datasets. In addition, we validate that our robust ensemble model gain better robustness against several adversarial attacks while outperforming the state-of-the-art studies.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 38 of its 55 references that are in the map. First posted on arXiv 16 Sep 2022.
Builds on
38 of 55 references.
References · 38
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,509
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2018CCNet: Criss-Cross Attention for Semantic Segmentationcited by 717
26 more
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 682
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 530
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
- 2021Ensemble deep learning: A reviewcited by 283
- 2020How Neural Networks Extrapolate: From Feedforward to Graph Neural Networkscited by 218
- 2021ViTAE: Vision Transformer Advanced by Exploring Intrinsic Inductive Biascited by 216
- 2019Adversarial Training and Robustness for Multiple Perturbationscited by 182
- 2019Efficient Decision-based Black-box Adversarial Attacks on Face Recognitioncited by 173
- 2020Domain Adaptive Ensemble Learningcited by 156
- 2019Enhancing Adversarial Example Transferability with an Intermediate Level Attackcited by 139
- 2020Learnable Boundary Guided Adversarial Trainingcited by 93
- 2020Towards Transferable Adversarial Attack against Deep Face Recognitioncited by 79
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2017Fast Image Processing with Fully-Convolutional Networkscited by 41
- 2020Vulnerability Analysis of Face Morphing Attacks from Landmarks and Generative Adversarial Networkscited by 36
- 2021PW-MAD: Pixel-wise Supervision for Generalized Face Morphing Attack Detectioncited by 29
- 2020Mutual Information Maximization on Disentangled Representations for Differential Morph Detectioncited by 14
- 2021Attention Aware Wavelet-based Detection of Morphed Face Imagescited by 14
- 2021Differential Morph Face Detection using Discriminative Wavelet Sub-bandscited by 13
- 2019SmoothFool: An Efficient Framework for Computing Smooth Adversarial Perturbationscited by 12
- 2021Conditional Identity Disentanglement for Differential Face Morph Detectioncited by 12
- 2021Detection of Morphed Face Images Using Discriminative Wavelet Sub-bandscited by 10
- 2021Deep GAN-Based Cross-Spectral Cross-Resolution Iris Recognitioncited by 10
- 2021Morph Detection Enhanced by Structured Group Sparsitycited by 10
- 2021Gaussian Process based Stochastic Model Predictive Control for Cooperative Adaptive Cruise Controlcited by 6
Built on by
Citing papers per year: 2023: 6; 2024: 0; 2025: 0; 2026: 1.
7 papers.
- 2023A Quality Aware Sample-to-Sample Comparison for Face Recognitioncited by 17
- 2023Predicting mechanical properties of Carbon Nanotube (CNT) images Using Multi-Layer Synthetic Finite Element Model Simulationscited by 5
- 2023CCFace: Classification Consistency for Low-Resolution Face Recognitioncited by 1
- 2023Fused Classification For Differential Face Morphing Detectioncited by 1
- 2023Deep Boosting Multi-Modal Ensemble Face Recognition with Sample-Level Weightingcited by 0
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularizationcited by 0
- 2026MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attackscited by 0
- 2026MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks27 Jul 2026
- 2023Fused Classification For Differential Face Morphing Detection1 Sep 2023
- 2023Towards Generalizable Morph Attack Detection with Consistency Regularization20 Aug 2023
- 2023Deep Boosting Multi-Modal Ensemble Face Recognition with Sample-Level Weighting18 Aug 2023
- 2023CCFace: Classification Consistency for Low-Resolution Face Recognition18 Aug 2023
- 2023Predicting mechanical properties of Carbon Nanotube (CNT) images Using Multi-Layer Synthetic Finite Element Model Simulations16 Jul 2023
- 2023A Quality Aware Sample-to-Sample Comparison for Face Recognition6 Jun 2023