mlsanityData to 7 Oct 2026

Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models

arXiv 2306.15733 ↗First posted 27 Jun 2023cs.CVcited by 12

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Morphed face images have recently become a growing concern for existing face verification systems, as they are relatively easy to generate and can be used to impersonate someone's identity for various malicious purposes. Efficient Morphing Attack Detection (MAD) that generalizes well across different morphing techniques is, therefore, of paramount importance. Existing MAD techniques predominantly rely on discriminative models that learn from examples of bona fide and morphed images and, as a result, often exhibit sub-optimal generalization performance when confronted with unknown types of morphing attacks. To address this problem, we propose a novel, diffusion-based MAD method in this paper that learns only from the characteristics of bona fide images. Various forms of morphing attacks are then detected by our model as out-of-distribution samples. We perform rigorous experiments over four different datasets (CASIA-WebFace, FRLL-Morphs, FERET-Morphs and FRGC-Morphs) and compare the proposed solution to both discriminatively-trained and once-class MAD models. The experimental results show that our MAD model achieves highly competitive results on all considered datasets.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 25 of its 45 references that are in the map. First posted on arXiv 27 Jun 2023.

Builds on

25 of 45 references.

References · 25

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  3. 2020Denoising Diffusion Implicit Modelscited by 9,655
  4. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  5. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
  6. 2016Wide Residual Networkscited by 3,057
  7. 2022Elucidating the Design Space of Diffusion-Based Generative Modelscited by 2,994
  8. 2022DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Stepscited by 1,961
  9. 2021Palette: Image-to-Image Diffusion Modelscited by 1,296
  10. 2022Diffusion Models in Vision: A Surveycited by 1,008
  11. 2014Learning Face Representation from Scratchcited by 451
  12. 2017PixelCNN++: Improving the PixelCNN with Discretized Logistic Mixture Likelihood and Other Modificationscited by 415
13 more
  1. 2018GANomaly: Semi-Supervised Anomaly Detection via Adversarial Trainingcited by 409
  2. 2022Diffusion Models for Medical Anomaly Detectioncited by 231
  3. 2022Fast Unsupervised Brain Anomaly Detection and Segmentation with Diffusion Modelscited by 96
  4. 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
  5. 2020Vulnerability Analysis of Face Morphing Attacks from Landmarks and Generative Adversarial Networkscited by 36
  6. 2021MixFaceNets: Extremely Efficient Face Recognition Networkscited by 36
  7. 2022SYN-MAD 2022: Competition on Face Morphing Attack Detection Based on Privacy-aware Synthetic Training Datacited by 30
  8. 2021PW-MAD: Pixel-wise Supervision for Generalized Face Morphing Attack Detectioncited by 29
  9. 2017Strengths and Weaknesses of Deep Learning Models for Face Recognition Against Image Degradationscited by 19
  10. 2022T2V-DDPM: Thermal to Visible Face Translation using Denoising Diffusion Probabilistic Modelscited by 17
  11. 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
  12. 2018Reflection Analysis for Face Morphing Attack Detectioncited by 11
  13. 2021Differential Anomaly Detection for Facial Imagescited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 1; 2024: 1; 2025: 5; 2026: 5.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023SDeMorph: Towards Better Facial De-morphing from Single Morph
  2. 2025StableMorph: High-Quality Face Morph Generation with Stable Diffusion
  3. 2025ChatGPT Encounters Morphing Attack Detection: Zero-Shot MAD with Multi-Modal Large Language Models and General Vision Models
  4. 2024LADIMO: Face Morph Generation through Biometric Template Inversion with Latent Diffusion
  5. 2026DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion
  6. 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
  7. 2024MorCode: Face Morphing Attack Generation using Generative Codebooks
  8. 2026MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks