AdvFAS: A robust face anti-spoofing framework against adversarial examples
Not on the map. Why?
Abstract (arXiv)
Ensuring the reliability of face recognition systems against presentation attacks necessitates the deployment of face anti-spoofing techniques. Despite considerable advancements in this domain, the ability of even the most state-of-the-art methods to defend against adversarial examples remains elusive. While several adversarial defense strategies have been proposed, they typically suffer from constrained practicability due to inevitable trade-offs between universality, effectiveness, and efficiency. To overcome these challenges, we thoroughly delve into the coupled relationship between adversarial detection and face anti-spoofing. Based on this, we propose a robust face anti-spoofing framework, namely AdvFAS, that leverages two coupled scores to accurately distinguish between correctly detected and wrongly detected face images. Extensive experiments demonstrate the effectiveness of our framework in a variety of settings, including different attacks, datasets, and backbones, meanwhile enjoying high accuracy on clean examples. Moreover, we successfully apply the proposed method to detect real-world adversarial examples.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 35 of its 55 references that are in the map. First posted on arXiv 4 Aug 2023.
Builds on
35 of 55 references.
References · 35
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2019Adversarial Training for Free!cited by 638
- 2020On Adaptive Attacks to Adversarial Example Defensescited by 547
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
- 2017Detecting Adversarial Samples from Artifactscited by 244
23 more
- 2017On Detecting Adversarial Perturbationscited by 232
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2021Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognitioncited by 95
- 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
- 2019Biometric Face Presentation Attack Detection with Multi-Channel Convolutional Neural Networkcited by 78
- 2019Deep Pixel-wise Binary Supervision for Face Presentation Attack Detectioncited by 76
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 64
- 2020Towards Face Encryption by Generating Adversarial Identity Maskscited by 62
- 2017Adversarial and Clean Data Are Not Twinscited by 52
- 2021Dual-Cross Central Difference Network for Face Anti-Spoofingcited by 47
- 2021Cross Modal Focal Loss for RGBD Face Anti-Spoofingcited by 41
- 2022Multi-domain Learning for Updating Face Anti-spoofing Modelscited by 39
- 2019Adversarial Examples in Modern Machine Learning: A Reviewcited by 36
- 2021Unified Detection of Digital and Physical Face Attackscited by 31
- 20213D High-Fidelity Mask Face Presentation Attack Detection Challengecited by 18
- 2021FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systemscited by 14
- 2021Two Coupled Rejection Metrics Can Tell Adversarial Examples Apartcited by 14
- 2022ViTransPAD: Video Transformer using convolution and self-attention for Face Presentation Attack Detectioncited by 14
- 2018Detecting Adversarial Perturbations with Saliencycited by 8
- 2022Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognitioncited by 8
Built on by
Citing papers per year: 2024: 2; 2025: 1.
3 papers.