mlsanityData to 14 Oct 2026

Digital and Physical Face Attacks: Reviewing and One Step Further

arXiv 2209.14692 ↗First posted 29 Sep 2022cs.CV cs.CRcited by 17

Not on the map. Why?

Abstract (arXiv)

With the rapid progress over the past five years, face authentication has become the most pervasive biometric recognition method. Thanks to the high-accuracy recognition performance and user-friendly usage, automatic face recognition (AFR) has exploded into a plethora of practical applications over device unlocking, checking-in, and financial payment. In spite of the tremendous success of face authentication, a variety of face presentation attacks (FPA), such as print attacks, replay attacks, and 3D mask attacks, have raised pressing mistrust concerns. Besides physical face attacks, face videos/images are vulnerable to a wide variety of digital attack techniques launched by malicious hackers, causing potential menace to the public at large. Due to the unrestricted access to enormous digital face images/videos and disclosed easy-to-use face manipulation tools circulating on the internet, non-expert attackers without any prior professional skills are able to readily create sophisticated fake faces, leading to numerous dangerous applications such as financial fraud, impersonation, and identity theft. This survey aims to build the integrity of face forensics by providing thorough analyses of existing literature and highlighting the issues requiring further attention. In this paper, we first comprehensively survey both physical and digital face attack types and datasets. Then, we review the latest and most advanced progress on existing counter-attack methodologies and highlight their current limits. Moreover, we outline possible future research directions for existing and upcoming challenges in the face forensics community. Finally, the necessity of joint physical and digital face attack detection has been discussed, which has never been studied in previous surveys.

Key facts. Cited by 17 papers in the map (data through 14 Oct 2026). Builds on 124 of its 247 references that are in the map. First posted on arXiv 29 Sep 2022.

Builds on

124 of 247 references.

References · 124

  1. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  2. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  3. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
  4. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  5. 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
  6. 2013Auto-Encoding Variational Bayescited by 4,053
  7. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
  8. 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,332
  9. 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
  10. 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,039
  11. 2019An Introduction to Variational Autoencoderscited by 1,000
  12. 2016Conditional Image Generation with PixelCNN Decoderscited by 862
38 more
  1. 2016Pixel Recurrent Neural Networkscited by 816
  2. 2020Face2Face: Real-time Face Capture and Reenactment of RGB Videoscited by 632
  3. 2019Celeb-DF: A Large-scale Challenging Dataset for DeepFake Forensicscited by 575
  4. 2020Thinking in Frequency: Face Forgery Detection by Mining Frequency-aware Cluescited by 523
  5. 2019Face X-ray for More General Face Forgery Detectioncited by 470
  6. 2020One-Shot Free-View Neural Talking-Head Synthesis for Video Conferencingcited by 444
  7. 2018MesoNet: a Compact Facial Video Forgery Detection Networkcited by 409
  8. 2021Multi-attentional Deepfake Detectioncited by 341
  9. 2022Detecting Deepfakes with Self-Blended Imagescited by 338
  10. 2019FSGAN: Subject Agnostic Face Swapping and Reenactmentcited by 320
  11. 2018Exposing DeepFake Videos By Detecting Face Warping Artifactscited by 319
  12. 2018Exposing Deep Fakes Using Inconsistent Head Posescited by 297
  13. 2017Toward Multimodal Image-to-Image Translationcited by 296
  14. 2020Lips Don't Lie: A Generalisable and Robust Approach to Face Forgery Detectioncited by 287
  15. 2021Generalizing Face Forgery Detection with High-frequency Featurescited by 262
  16. 2019On the Detection of Digital Face Manipulationcited by 260
  17. 2020DeeperForensics-1.0: A Large-Scale Dataset for Real-World Face Forgery Detectioncited by 254
  18. 2020The Creation and Detection of Deepfakes: A Surveycited by 247
  19. 2021Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domaincited by 244
  20. 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
  21. 2017AttGAN: Facial Attribute Editing by Only Changing What You Wantcited by 242
  22. 2020DeepFakes and Beyond: A Survey of Face Manipulation and Fake Detectioncited by 233
  23. 2018DeepFakes: a New Threat to Face Recognition? Assessment and Detectioncited by 209
  24. 2019The Deepfake Detection Challenge (DFDC) Preview Datasetcited by 209
  25. 2020Media Forensics and DeepFakes: an overviewcited by 209
  26. 2021FakeAVCeleb: A Novel Audio-Video Multimodal Deepfake Datasetcited by 181
  27. 2018Capsule-Forensics: Using Capsule Networks to Detect Forged Images and Videoscited by 180
  28. 2020Learning Self-Consistency for Deepfake Detectioncited by 179
  29. 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
  30. 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
  31. 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 163
  32. 2020Two-branch Recurrent Network for Isolating Deepfakes in Videoscited by 161
  33. 2021Exploring Temporal Coherence for More General Video Face Forgery Detectioncited by 159
  34. 2019FakeCatcher: Detection of Synthetic Portrait Videos using Biological Signalscited by 145
  35. 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
  36. 2019Multi-task Learning For Detecting and Segmenting Manipulated Facial Images and Videoscited by 130
  37. 2022Leveraging Real Talking Faces via Self-Supervision for Robust Forgery Detectioncited by 130
  38. 2021ForgeryNet: A Versatile Benchmark for Comprehensive Forgery Analysiscited by 126

50 most cited of 124 All 124 (JSON)

Built on by

Cited by year

Citing papers per year: 2023: 8; 2024: 4; 2025: 5.

17 papers.

Sort:

By area:

  1. 2023Beyond the Prior Forgery Knowledge: Mining Critical Clues for General Face Forgery Detectioncited by 50
  2. 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
  3. 2023Pixel-Inconsistency Modeling for Image Manipulation Localizationcited by 33
  4. 2024MoE-FFD: Mixture of Experts for Generalized and Parameter-Efficient Face Forgery Detectioncited by 27
  5. 2023Enhancing General Face Forgery Detection via Vision Transformer with Low-Rank Adaptationcited by 16
  6. 2023The Age of Synthetic Realities: Challenges and Opportunitiescited by 15
  7. 2023Rehearsal-Free Domain Continual Face Anti-Spoofing: Generalize More and Forget Lesscited by 12
  8. 2023S-Adapter: Generalizing Vision Transformer for Face Anti-Spoofing with Statistical Tokenscited by 11
  9. 2024Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Priorcited by 11
  10. 2024Open-Set Deepfake Detection: A Parameter-Efficient Adaptation Method with Forgery Style Mixturecited by 7
  11. 2023M3FAS: An Accurate and Robust MultiModal Mobile Face Anti-Spoofing Systemcited by 5
  12. 2024A Survey on Physical Adversarial Attacks against Face Recognition Systemscited by 4
5 more
  1. 2025Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localizationcited by 2
  2. 2025SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Modelscited by 0
  3. 2025Enhancing Deepfake Detection using SE Block Attention with CNNcited by 0
  4. 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitionscited by 0
  5. 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detectioncited by 0