Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Morphed face images have recently become a growing concern for existing face verification systems, as they are relatively easy to generate and can be used to impersonate someone's identity for various malicious purposes. Efficient Morphing Attack Detection (MAD) that generalizes well across different morphing techniques is, therefore, of paramount importance. Existing MAD techniques predominantly rely on discriminative models that learn from examples of bona fide and morphed images and, as a result, often exhibit sub-optimal generalization performance when confronted with unknown types of morphing attacks. To address this problem, we propose a novel, diffusion-based MAD method in this paper that learns only from the characteristics of bona fide images. Various forms of morphing attacks are then detected by our model as out-of-distribution samples. We perform rigorous experiments over four different datasets (CASIA-WebFace, FRLL-Morphs, FERET-Morphs and FRGC-Morphs) and compare the proposed solution to both discriminatively-trained and once-class MAD models. The experimental results show that our MAD model achieves highly competitive results on all considered datasets.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 25 of its 45 references that are in the map. First posted on arXiv 27 Jun 2023.
Builds on
25 of 45 references.
References · 25
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
- 2016Wide Residual Networkscited by 3,057
- 2022Elucidating the Design Space of Diffusion-Based Generative Modelscited by 2,994
- 2022DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Stepscited by 1,961
- 2021Palette: Image-to-Image Diffusion Modelscited by 1,296
- 2022Diffusion Models in Vision: A Surveycited by 1,008
- 2014Learning Face Representation from Scratchcited by 451
- 2017PixelCNN++: Improving the PixelCNN with Discretized Logistic Mixture Likelihood and Other Modificationscited by 415
13 more
- 2018GANomaly: Semi-Supervised Anomaly Detection via Adversarial Trainingcited by 409
- 2022Diffusion Models for Medical Anomaly Detectioncited by 231
- 2022Fast Unsupervised Brain Anomaly Detection and Segmentation with Diffusion Modelscited by 96
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2020Vulnerability Analysis of Face Morphing Attacks from Landmarks and Generative Adversarial Networkscited by 36
- 2021MixFaceNets: Extremely Efficient Face Recognition Networkscited by 36
- 2022SYN-MAD 2022: Competition on Face Morphing Attack Detection Based on Privacy-aware Synthetic Training Datacited by 30
- 2021PW-MAD: Pixel-wise Supervision for Generalized Face Morphing Attack Detectioncited by 29
- 2017Strengths and Weaknesses of Deep Learning Models for Face Recognition Against Image Degradationscited by 19
- 2022T2V-DDPM: Thermal to Visible Face Translation using Denoising Diffusion Probabilistic Modelscited by 17
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
- 2018Reflection Analysis for Face Morphing Attack Detectioncited by 11
- 2021Differential Anomaly Detection for Facial Imagescited by 11
Built on by
Citing papers per year: 2023: 1; 2024: 1; 2025: 5; 2026: 5.
12 papers.
- 2025MADation: Face Morphing Attack Detection with Foundation Modelscited by 14
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learningcited by 7
- 2023On the Vulnerability of DeepFake Detectors to Attacks Generated by Denoising Diffusion Modelscited by 6
- 2024Evaluating the Effectiveness of Attack-Agnostic Features for Morphing Attack Detectioncited by 2
- 2025Metric for Evaluating Performance of Reference-Free Demorphing Methodscited by 2
- 2025LoRA-Enhanced Vision Transformer for Single Image based Morphing Attack Detection via Knowledge Distillation from EfficientNetcited by 1
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Modelscited by 1
- 2025WaFusion: A Wavelet-Enhanced Diffusion Framework for Face Morph Generationcited by 0
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026Enhancing Single-Image Facial Demorphing using Multimodal Large Language Modelscited by 0
- 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)cited by 0
- 2026Enhancing Single-Image Facial Demorphing using Multimodal Large Language Models25 May 2026
- 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)16 May 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection16 Mar 2026
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models17 Feb 2026
- 2025LoRA-Enhanced Vision Transformer for Single Image based Morphing Attack Detection via Knowledge Distillation from EfficientNet16 Nov 2025
- 2025WaFusion: A Wavelet-Enhanced Diffusion Framework for Face Morph Generation15 Jul 2025
- 2025SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning7 Apr 2025
- 2025Metric for Evaluating Performance of Reference-Free Demorphing Methods21 Jan 2025
- 2025MADation: Face Morphing Attack Detection with Foundation Models7 Jan 2025
- 2024Evaluating the Effectiveness of Attack-Agnostic Features for Morphing Attack Detection22 Oct 2024
- 2023On the Vulnerability of DeepFake Detectors to Attacks Generated by Denoising Diffusion Models11 Jul 2023
Similar, not cited
Close in wording, no citation either way
- 2023SDeMorph: Towards Better Facial De-morphing from Single Morph
- 2025StableMorph: High-Quality Face Morph Generation with Stable Diffusion
- 2025ChatGPT Encounters Morphing Attack Detection: Zero-Shot MAD with Multi-Modal Large Language Models and General Vision Models
- 2024LADIMO: Face Morph Generation through Biometric Template Inversion with Latent Diffusion
- 2026DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
- 2024MorCode: Face Morphing Attack Generation using Generative Codebooks
- 2026MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks