FLIP: Cross-domain Face Anti-spoofing with Language Guidance
Not on the map. Why?
Abstract (arXiv)
Face anti-spoofing (FAS) or presentation attack detection is an essential component of face recognition systems deployed in security-critical applications. Existing FAS methods have poor generalizability to unseen spoof types, camera sensors, and environmental conditions. Recently, vision transformer (ViT) models have been shown to be effective for the FAS task due to their ability to capture long-range dependencies among image patches. However, adaptive modules or auxiliary loss functions are often required to adapt pre-trained ViT weights learned on large-scale datasets such as ImageNet. In this work, we first show that initializing ViTs with multimodal (e.g., CLIP) pre-trained weights improves generalizability for the FAS task, which is in line with the zero-shot transfer capabilities of vision-language pre-trained (VLP) models. We then propose a novel approach for robust cross-domain FAS by grounding visual representations with the help of natural language. Specifically, we show that aligning the image representation with an ensemble of class descriptions (based on natural language semantics) improves FAS generalizability in low-data regimes. Finally, we propose a multimodal contrastive learning strategy to boost feature generalization further and bridge the gap between source and target domains. Extensive experiments on three standard protocols demonstrate that our method significantly outperforms the state-of-the-art methods, achieving better zero-shot transfer performance than five-shot transfer of adaptive ViTs. Code: https://github.com/koushiksrivats/FLIP
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 53 of its 69 references that are in the map. First posted on arXiv 28 Sep 2023.
Builds on
53 of 69 references.
References · 53
- 2017Attention Is All You Needcited by 59,932
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,848
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
- 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,818
- 2022Conditional Prompt Learning for Vision-Language Modelscited by 1,427
- 2017Adversarial Discriminative Domain Adaptationcited by 1,309
- 2021VICReg: Variance-Invariance-Covariance Regularization for Self-Supervised Learningcited by 1,013
- 2021Open-vocabulary Object Detection via Vision and Language Knowledge Distillationcited by 903
38 more
- 2021Florence: A New Foundation Model for Computer Visioncited by 802
- 2022Language-driven Semantic Segmentationcited by 711
- 2021FILIP: Fine-grained Interactive Language-Image Pre-Trainingcited by 626
- 2022Detecting Twenty-thousand Classes using Image-level Supervisioncited by 613
- 2021LiT: Zero-Shot Transfer with Locked-image text Tuningcited by 572
- 2021DenseCLIP: Language-Guided Dense Prediction with Context-Aware Promptingcited by 530
- 2022Tip-Adapter: Training-free Adaption of CLIP for Few-shot Classificationcited by 355
- 2021Generic Attention-model Explainability for Interpreting Bi-Modal and Encoder-Decoder Transformerscited by 316
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2016Deep Reconstruction-Classification Networks for Unsupervised Domain Adaptationcited by 162
- 2022Bridging the Gap between Object and Image-level Representations for Open-Vocabulary Detectioncited by 145
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2020Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learningcited by 93
- 2019Regularized Fine-grained Meta Face Anti-spoofingcited by 86
- 2019Biometric Face Presentation Attack Detection with Multi-Channel Convolutional Neural Networkcited by 78
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2020CASIA-SURF CeFA: A Benchmark for Multi-modal Cross-ethnicity Face Anti-spoofingcited by 66
- 2020Face Anti-Spoofing Via Disentangled Representation Learningcited by 65
- 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 64
- 2020Face Anti-Spoofing with Human Material Perceptioncited by 62
- 2020On Disentangling Spoof Trace for Generic Face Anti-Spoofingcited by 62
- 2019CASIA-SURF: A Large-scale Multi-modal Benchmark for Face Anti-spoofingcited by 61
- 2018A Dataset and Benchmark for Large-scale Multi-modal Face Anti-spoofingcited by 51
- 2021Self-Domain Adaptation for Face Anti-Spoofingcited by 49
- 2021Adaptive Normalized Representation Learning for Generalizable Face Anti-Spoofingcited by 49
- 2021Dual Reweighting Domain Generalization for Face Presentation Attack Detectioncited by 47
- 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
- 2019Learning Meta Model for Zero- and Few-shot Face Anti-spoofingcited by 44
- 2020On the Effectiveness of Vision Transformers for Zero-shot Face Anti-Spoofingcited by 44
- 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
- 2022Generative Domain Adaptation for Face Anti-Spoofingcited by 33
- 2020Cross-ethnicity Face Anti-spoofing Recognition Challenge: A Reviewcited by 25
- 2021Feature Generation and Hypothesis Verification for Reliable Face Anti-Spoofingcited by 23
- 2021Does language help generalization in vision models?cited by 19
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2023: 1; 2024: 16; 2025: 19; 2026: 9.
45 papers.
Sort:
By area:
- 2024SHIELD : An Evaluation Benchmark for Face Spoofing and Forgery Detection with Multimodal Large Language Modelscited by 39
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2024FSFM: A Generalizable Face Security Foundation Model via Self-Supervised Facial Representation Learningcited by 21
- 2024DeCLIP: Decoding CLIP representations for deepfake localizationcited by 17
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detectioncited by 14
- 2025Exploring ChatGPT for Face Presentation Attack Detection in Zero and Few-Shot in-Context Learningcited by 12
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detectioncited by 8
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineeringcited by 7
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Modelscited by 6
- 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretrainingcited by 5
33 more
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2025Harnessing Chain-of-Thought Reasoning in Multimodal Large Language Models for Face Anti-Spoofingcited by 5
- 2024Generalized Face Liveness Detection via De-fake Face Generatorcited by 4
- 2025DADM: Dual Alignment of Domain and Modality for Face Anti-spoofingcited by 4
- 2025Empowering Morphing Attack Detection using Interpretable Image-Text Foundation Modelcited by 4
- 2026Benchmarking Vision Foundation Models for Domain-Generalizable Face Anti-Spoofingcited by 4
- 2024Hyp-OC: Hyperbolic One Class Classification for Face Anti-Spoofingcited by 3
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofingcited by 2
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
- 2024Multi-Granularity Language-Guided Training for Multi-Object Trackingcited by 2
- 2024Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systemscited by 2
- 2025STAR: A Foundation Model-driven Framework for Robust Task Planning and Failure Recovery in Robotic Systemscited by 2
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Imagescited by 1
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuningcited by 1
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofingcited by 1
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2025Investigating self-supervised representations for audio-visual deepfake detectioncited by 1
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detectioncited by 1
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Modelcited by 0
- 2024Advancing Cross-Domain Generalizability in Face Anti-Spoofing: Insights, Design, and Metricscited by 0
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Methodcited by 0
- 2024Spoof Trace Discovery for Deep Learning Based Explainable Face Anti-Spoofingcited by 0
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitionscited by 0
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detectioncited by 0
- 2026Domain-generalizable Face Anti-Spoofing with Patch-based Multi-tasking and Artifact Pattern Conversioncited by 0
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofingcited by 0
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detectioncited by 0
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofingcited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detection18 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofing23 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026Benchmarking Vision Foundation Models for Domain-Generalizable Face Anti-Spoofing21 Apr 2026
- 2026Domain-generalizable Face Anti-Spoofing with Patch-based Multi-tasking and Artifact Pattern Conversion10 Apr 2026
- 2025Investigating self-supervised representations for audio-visual deepfake detection21 Nov 2025
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection11 Nov 2025
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
33 more
- 2025Empowering Morphing Attack Detection using Interpretable Image-Text Foundation Model13 Aug 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofing5 Jul 2025
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuning27 Jun 2025
- 2025Harnessing Chain-of-Thought Reasoning in Multimodal Large Language Models for Face Anti-Spoofing2 Jun 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models14 May 2025
- 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Images6 May 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineering6 Apr 2025
- 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretraining25 Mar 2025
- 2025STAR: A Foundation Model-driven Framework for Robust Task Planning and Failure Recovery in Robotic Systems8 Mar 2025
- 2025DADM: Dual Alignment of Domain and Modality for Face Anti-spoofing1 Mar 2025
- 2025Exploring ChatGPT for Face Presentation Attack Detection in Zero and Few-Shot in-Context Learning15 Jan 2025
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detection6 Jan 2025
- 2024Spoof Trace Discovery for Deep Learning Based Explainable Face Anti-Spoofing23 Dec 2024
- 2024FSFM: A Generalizable Face Security Foundation Model via Self-Supervised Facial Representation Learning16 Dec 2024
- 2024DeCLIP: Decoding CLIP representations for deepfake localization12 Sep 2024
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesis4 Sep 2024
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detection23 Aug 2024
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Method19 Aug 2024
- 2024Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems11 Jul 2024
- 2024Advancing Cross-Domain Generalizability in Face Anti-Spoofing: Insights, Design, and Metrics18 Jun 2024
- 2024Multi-Granularity Language-Guided Training for Multi-Object Tracking7 Jun 2024
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systems6 Jun 2024
- 2024Hyp-OC: Hyperbolic One Class Classification for Face Anti-Spoofing22 Apr 2024
- 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model14 Apr 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofing21 Mar 2024
- 2024SHIELD : An Evaluation Benchmark for Face Spoofing and Forgery Detection with Multimodal Large Language Models6 Feb 2024
- 2024Generalized Face Liveness Detection via De-fake Face Generator17 Jan 2024
- 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofing30 Nov 2023
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Modelscited by 6
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detectioncited by 2
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detection18 Aug 2026
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models14 May 2025
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection6 May 2025
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2024FSFM: A Generalizable Face Security Foundation Model via Self-Supervised Facial Representation Learningcited by 21
- 2024DeCLIP: Decoding CLIP representations for deepfake localizationcited by 17
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detectioncited by 14
- 2025Exploring ChatGPT for Face Presentation Attack Detection in Zero and Few-Shot in-Context Learningcited by 12
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2025Domain Generalization for Face Anti-spoofing via Content-aware Composite Prompt Engineeringcited by 7
- 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretrainingcited by 5
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2024Generalized Face Liveness Detection via De-fake Face Generatorcited by 4
- 2025DADM: Dual Alignment of Domain and Modality for Face Anti-spoofingcited by 4
12 most cited of 35 All 35 (JSON)
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofing23 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026Benchmarking Vision Foundation Models for Domain-Generalizable Face Anti-Spoofing21 Apr 2026
- 2026Domain-generalizable Face Anti-Spoofing with Patch-based Multi-tasking and Artifact Pattern Conversion10 Apr 2026
- 2025Investigating self-supervised representations for audio-visual deepfake detection21 Nov 2025
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection11 Nov 2025
- 2025Empowering Morphing Attack Detection using Interpretable Image-Text Foundation Model13 Aug 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Group-wise Scaling and Orthogonal Decomposition for Domain-Invariant Feature Extraction in Face Anti-Spoofing5 Jul 2025
12 newest of 35 All 35 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Interpretable Face Anti-Spoofing: Enhancing Generalization with Multimodal Large Language Models
- 2026From Intuition to Investigation: A Tool-Augmented Reasoning MLLM Framework for Generalizable Face Anti-Spoofing
- 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detection
- 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Models
- 2026FAS-R1: A Unified Multi-Task MLLM for Reasoning Face Anti-Spoofing
- 2025PA-FAS: Towards Interpretable and Generalizable Multimodal Face Anti-Spoofing via Path-Augmented Reinforcement Learning
- 2026ViT-FREE: Efficient Face Recognition via Early Exiting and Synthetic Adaptation
- 2022Adaptive Mixture of Experts Learning for Generalizable Face Anti-Spoofing