Digital and Physical Face Attacks: Reviewing and One Step Further
Not on the map. Why?
Abstract (arXiv)
With the rapid progress over the past five years, face authentication has become the most pervasive biometric recognition method. Thanks to the high-accuracy recognition performance and user-friendly usage, automatic face recognition (AFR) has exploded into a plethora of practical applications over device unlocking, checking-in, and financial payment. In spite of the tremendous success of face authentication, a variety of face presentation attacks (FPA), such as print attacks, replay attacks, and 3D mask attacks, have raised pressing mistrust concerns. Besides physical face attacks, face videos/images are vulnerable to a wide variety of digital attack techniques launched by malicious hackers, causing potential menace to the public at large. Due to the unrestricted access to enormous digital face images/videos and disclosed easy-to-use face manipulation tools circulating on the internet, non-expert attackers without any prior professional skills are able to readily create sophisticated fake faces, leading to numerous dangerous applications such as financial fraud, impersonation, and identity theft. This survey aims to build the integrity of face forensics by providing thorough analyses of existing literature and highlighting the issues requiring further attention. In this paper, we first comprehensively survey both physical and digital face attack types and datasets. Then, we review the latest and most advanced progress on existing counter-attack methodologies and highlight their current limits. Moreover, we outline possible future research directions for existing and upcoming challenges in the face forensics community. Finally, the necessity of joint physical and digital face attack detection has been discussed, which has never been studied in previous surveys.
Key facts. Cited by 17 papers in the map (data through 14 Oct 2026). Builds on 124 of its 247 references that are in the map. First posted on arXiv 29 Sep 2022.
Builds on
124 of 247 references.
References · 124
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
- 2013Auto-Encoding Variational Bayescited by 4,053
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,332
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,039
- 2019An Introduction to Variational Autoencoderscited by 1,000
- 2016Conditional Image Generation with PixelCNN Decoderscited by 862
38 more
- 2016Pixel Recurrent Neural Networkscited by 816
- 2020Face2Face: Real-time Face Capture and Reenactment of RGB Videoscited by 632
- 2019Celeb-DF: A Large-scale Challenging Dataset for DeepFake Forensicscited by 575
- 2020Thinking in Frequency: Face Forgery Detection by Mining Frequency-aware Cluescited by 523
- 2019Face X-ray for More General Face Forgery Detectioncited by 470
- 2020One-Shot Free-View Neural Talking-Head Synthesis for Video Conferencingcited by 444
- 2018MesoNet: a Compact Facial Video Forgery Detection Networkcited by 409
- 2021Multi-attentional Deepfake Detectioncited by 341
- 2022Detecting Deepfakes with Self-Blended Imagescited by 338
- 2019FSGAN: Subject Agnostic Face Swapping and Reenactmentcited by 320
- 2018Exposing DeepFake Videos By Detecting Face Warping Artifactscited by 319
- 2018Exposing Deep Fakes Using Inconsistent Head Posescited by 297
- 2017Toward Multimodal Image-to-Image Translationcited by 296
- 2020Lips Don't Lie: A Generalisable and Robust Approach to Face Forgery Detectioncited by 287
- 2021Generalizing Face Forgery Detection with High-frequency Featurescited by 262
- 2019On the Detection of Digital Face Manipulationcited by 260
- 2020DeeperForensics-1.0: A Large-Scale Dataset for Real-World Face Forgery Detectioncited by 254
- 2020The Creation and Detection of Deepfakes: A Surveycited by 247
- 2021Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domaincited by 244
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2017AttGAN: Facial Attribute Editing by Only Changing What You Wantcited by 242
- 2020DeepFakes and Beyond: A Survey of Face Manipulation and Fake Detectioncited by 233
- 2018DeepFakes: a New Threat to Face Recognition? Assessment and Detectioncited by 209
- 2019The Deepfake Detection Challenge (DFDC) Preview Datasetcited by 209
- 2020Media Forensics and DeepFakes: an overviewcited by 209
- 2021FakeAVCeleb: A Novel Audio-Video Multimodal Deepfake Datasetcited by 181
- 2018Capsule-Forensics: Using Capsule Networks to Detect Forged Images and Videoscited by 180
- 2020Learning Self-Consistency for Deepfake Detectioncited by 179
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 163
- 2020Two-branch Recurrent Network for Isolating Deepfakes in Videoscited by 161
- 2021Exploring Temporal Coherence for More General Video Face Forgery Detectioncited by 159
- 2019FakeCatcher: Detection of Synthetic Portrait Videos using Biological Signalscited by 145
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2019Multi-task Learning For Detecting and Segmenting Manipulated Facial Images and Videoscited by 130
- 2022Leveraging Real Talking Faces via Self-Supervision for Robust Forgery Detectioncited by 130
- 2021ForgeryNet: A Versatile Benchmark for Comprehensive Forgery Analysiscited by 126
50 most cited of 124 All 124 (JSON)
Built on by
Citing papers per year: 2023: 8; 2024: 4; 2025: 5.
17 papers.
Sort:
By area:
- 2023Beyond the Prior Forgery Knowledge: Mining Critical Clues for General Face Forgery Detectioncited by 50
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
- 2023Pixel-Inconsistency Modeling for Image Manipulation Localizationcited by 33
- 2024MoE-FFD: Mixture of Experts for Generalized and Parameter-Efficient Face Forgery Detectioncited by 27
- 2023Enhancing General Face Forgery Detection via Vision Transformer with Low-Rank Adaptationcited by 16
- 2023The Age of Synthetic Realities: Challenges and Opportunitiescited by 15
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Lesscited by 12
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokenscited by 11
- 2024Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Priorcited by 11
- 2024Open-Set Deepfake Detection: A Parameter-Efficient Adaptation Method with Forgery Style Mixturecited by 7
- 2023M3FAS: An Accurate and Robust MultiModal Mobile Face Anti-Spoofing Systemcited by 5
- 2024A Survey on Physical Adversarial Attacks against Face Recognition Systemscited by 4
5 more
- 2025Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localizationcited by 2
- 2025SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Modelscited by 0
- 2025Enhancing Deepfake Detection using SE Block Attention with CNNcited by 0
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitionscited by 0
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detectioncited by 0
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detection22 Dec 2025
- 2025Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localization25 Aug 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Enhancing Deepfake Detection using SE Block Attention with CNN12 Jun 2025
- 2025SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models27 Feb 2025
- 2024Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior2 Dec 2024
- 2024A Survey on Physical Adversarial Attacks against Face Recognition Systems10 Oct 2024
- 2024Open-Set Deepfake Detection: A Parameter-Efficient Adaptation Method with Forgery Style Mixture23 Aug 2024
- 2024MoE-FFD: Mixture of Experts for Generalized and Parameter-Efficient Face Forgery Detection12 Apr 2024
- 2023Pixel-Inconsistency Modeling for Image Manipulation Localization30 Sep 2023
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokens7 Sep 2023
- 2023The Age of Synthetic Realities: Challenges and Opportunities9 Jun 2023
5 more
- 2023Beyond the Prior Forgery Knowledge: Mining Critical Clues for General Face Forgery Detection24 Apr 2023
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Less16 Mar 2023
- 2023Enhancing General Face Forgery Detection via Vision Transformer with Low-Rank Adaptation2 Mar 2023
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger28 Feb 2023
- 2023M3FAS: An Accurate and Robust MultiModal Mobile Face Anti-Spoofing System30 Jan 2023
- 2023Beyond the Prior Forgery Knowledge: Mining Critical Clues for General Face Forgery Detectioncited by 50
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
- 2023Pixel-Inconsistency Modeling for Image Manipulation Localizationcited by 33
- 2023Enhancing General Face Forgery Detection via Vision Transformer with Low-Rank Adaptationcited by 16
- 2023The Age of Synthetic Realities: Challenges and Opportunitiescited by 15
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Lesscited by 12
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokenscited by 11
- 2024Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Priorcited by 11
- 2024Open-Set Deepfake Detection: A Parameter-Efficient Adaptation Method with Forgery Style Mixturecited by 7
- 2023M3FAS: An Accurate and Robust MultiModal Mobile Face Anti-Spoofing Systemcited by 5
- 2024A Survey on Physical Adversarial Attacks against Face Recognition Systemscited by 4
- 2025Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localizationcited by 2
12 most cited of 14 All 14 (JSON)
- 2025Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localization25 Aug 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Enhancing Deepfake Detection using SE Block Attention with CNN12 Jun 2025
- 2024Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior2 Dec 2024
- 2024A Survey on Physical Adversarial Attacks against Face Recognition Systems10 Oct 2024
- 2024Open-Set Deepfake Detection: A Parameter-Efficient Adaptation Method with Forgery Style Mixture23 Aug 2024
- 2023Pixel-Inconsistency Modeling for Image Manipulation Localization30 Sep 2023
- 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokens7 Sep 2023
- 2023The Age of Synthetic Realities: Challenges and Opportunities9 Jun 2023
- 2023Beyond the Prior Forgery Knowledge: Mining Critical Clues for General Face Forgery Detection24 Apr 2023
- 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Less16 Mar 2023
- 2023Enhancing General Face Forgery Detection via Vision Transformer with Low-Rank Adaptation2 Mar 2023
12 newest of 14 All 14 (JSON)