mlsanityData to 7 Oct 2026

Unified Physical-Digital Face Attack Detection

arXiv 2401.17699 ↗First posted 31 Jan 2024cs.CVcited by 17

Not on the map. Why?

Abstract (arXiv)

Face Recognition (FR) systems can suffer from physical (i.e., print photo) and digital (i.e., DeepFake) attacks. However, previous related work rarely considers both situations at the same time. This implies the deployment of multiple models and thus more computational burden. The main reasons for this lack of an integrated model are caused by two factors: (1) The lack of a dataset including both physical and digital attacks with ID consistency which means the same ID covers the real face and all attack types; (2) Given the large intra-class variance between these two attacks, it is difficult to learn a compact feature space to detect both attacks simultaneously. To address these issues, we collect a Unified physical-digital Attack dataset, called UniAttackData. The dataset consists of 1,800 participations of 2 and 12 physical and digital attacks, respectively, resulting in a total of 29,706 videos. Then, we propose a Unified Attack Detection framework based on Vision-Language Models (VLMs), namely UniAttackDetection, which includes three main modules: the Teacher-Student Prompts (TSP) module, focused on acquiring unified and specific knowledge respectively; the Unified Knowledge Mining (UKM) module, designed to capture a comprehensive feature space; and the Sample-Level Prompt Interaction (SLPI) module, aimed at grasping sample-level semantics. These three modules seamlessly form a robust unified attack detection framework. Extensive experiments on UniAttackData and three other datasets demonstrate the superiority of our approach for unified face attack detection.

Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Builds on 44 of its 58 references that are in the map. First posted on arXiv 31 Jan 2024.

Builds on

44 of 58 references.

References · 44

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
  7. 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
  8. 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
  9. 2022MaPLe: Multi-modal Prompt Learningcited by 685
  10. 2020Face2Face: Real-time Face Capture and Reenactment of RGB Videoscited by 631
  11. 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 501
  12. 2020One-Shot Free-View Neural Talking-Head Synthesis for Video Conferencingcited by 438
32 more
  1. 2021Multi-attentional Deepfake Detectioncited by 339
  2. 2019On the Detection of Digital Face Manipulationcited by 259
  3. 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
  4. 2018DeepFakes: a New Threat to Face Recognition? Assessment and Detectioncited by 208
  5. 2021WildDeepfake: A Challenging Real-World Dataset for Deepfake Detectioncited by 207
  6. 2022Depth-Aware Generative Adversarial Network for Talking Head Video Generationcited by 177
  7. 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
  8. 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
  9. 2019STGAN: A Unified Selective Transfer Network for Arbitrary Image Attribute Editingcited by 119
  10. 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
  11. 2019SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editingcited by 93
  12. 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
  13. 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
  14. 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
  15. 2020CASIA-SURF CeFA: A Benchmark for Multi-modal Cross-ethnicity Face Anti-spoofingcited by 66
  16. 2019AdvFaces: Adversarial Face Synthesiscited by 59
  17. 2021AdvDrop: Adversarial Attack to DNNs by Dropping Informationcited by 55
  18. 2022FaceDancer: Pose- and Occlusion-Aware High Fidelity Face Swappingcited by 44
  19. 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
  20. 2023Instance-Aware Domain Generalization for Face Anti-Spoofingcited by 42
  21. 2021Unified Detection of Digital and Physical Face Attackscited by 31
  22. 2020Deep Models and Shortwave Infrared Information to Detect Face Presentation Attackscited by 29
  23. 2020Augmented Lagrangian Adversarial Attackscited by 28
  24. 2022Benchmarking Joint Face Spoofing and Forgery Detection with Visual and Physiological Cuescited by 24
  25. 2018Fast Geometrically-Perturbed Adversarial Facescited by 22
  26. 2023FM-ViT: Flexible Modal Vision Transformers for Face Anti-Spoofingcited by 22
  27. 2021SAFA: Structure Aware Face Animationcited by 20
  28. 2020Making Adversarial Examples More Transferable and Indistinguishablecited by 19
  29. 2021Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similaritycited by 18
  30. 2023MA-ViT: Modality-Agnostic Vision Transformers for Face Anti-Spoofingcited by 18
  31. 2019Swapped Face Detection using Deep Learning and Subjective Assessmentcited by 14
  32. 2023Surveillance Face Anti-spoofingcited by 12

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 9; 2026: 4.

17 papers.

Sort:

By area:

  1. 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
  2. 2025Mixture-of-Attack-Experts with Class Regularization for Unified Physical-Digital Face Attack Detectioncited by 5
  3. 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
  4. 2024Unified Physical-Digital Attack Detection Challengecited by 3
  5. 2025FA^{3}-CLIP: Frequency-Aware Cues Fusion and Attack-Agnostic Prompt Learning for Unified Face Attack Detectioncited by 3
  6. 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
  7. 2025SUEDE:Shared Unified Experts for Physical-Digital Face Attack Detection Enhancementcited by 2
  8. 2025Think Twice before Adaptation: Improving Adaptability of DeepFake Detection via Online Test-Time Adaptationcited by 1
  9. 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
  10. 2025Optimizing DINOv2 with Registers for Face Anti-Spoofingcited by 1
  11. 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Methodcited by 0
  12. 2025Unified Face Matching and Physical-Digital Spoofing Attack Detectioncited by 0
5 more
  1. 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detectioncited by 0
  2. 2026Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimizationcited by 0
  3. 2026UniShield: Unified Face Attack Detection via KG-Informed Multimodal Reasoningcited by 0
  4. 2026Unified Face Attack Detection via Fine-Grained Semantic Guidancecited by 0
  5. 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detectioncited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
  2. 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detection
  3. 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model
  4. 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models
  5. 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection
  6. 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofing
  7. 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
  8. 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Models