Unified Physical-Digital Face Attack Detection
Not on the map. Why?
Abstract (arXiv)
Face Recognition (FR) systems can suffer from physical (i.e., print photo) and digital (i.e., DeepFake) attacks. However, previous related work rarely considers both situations at the same time. This implies the deployment of multiple models and thus more computational burden. The main reasons for this lack of an integrated model are caused by two factors: (1) The lack of a dataset including both physical and digital attacks with ID consistency which means the same ID covers the real face and all attack types; (2) Given the large intra-class variance between these two attacks, it is difficult to learn a compact feature space to detect both attacks simultaneously. To address these issues, we collect a Unified physical-digital Attack dataset, called UniAttackData. The dataset consists of 1,800 participations of 2 and 12 physical and digital attacks, respectively, resulting in a total of 29,706 videos. Then, we propose a Unified Attack Detection framework based on Vision-Language Models (VLMs), namely UniAttackDetection, which includes three main modules: the Teacher-Student Prompts (TSP) module, focused on acquiring unified and specific knowledge respectively; the Unified Knowledge Mining (UKM) module, designed to capture a comprehensive feature space; and the Sample-Level Prompt Interaction (SLPI) module, aimed at grasping sample-level semantics. These three modules seamlessly form a robust unified attack detection framework. Extensive experiments on UniAttackData and three other datasets demonstrate the superiority of our approach for unified face attack detection.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Builds on 44 of its 58 references that are in the map. First posted on arXiv 31 Jan 2024.
Builds on
44 of 58 references.
References · 44
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
- 2022MaPLe: Multi-modal Prompt Learningcited by 685
- 2020Face2Face: Real-time Face Capture and Reenactment of RGB Videoscited by 631
- 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 501
- 2020One-Shot Free-View Neural Talking-Head Synthesis for Video Conferencingcited by 438
32 more
- 2021Multi-attentional Deepfake Detectioncited by 339
- 2019On the Detection of Digital Face Manipulationcited by 259
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2018DeepFakes: a New Threat to Face Recognition? Assessment and Detectioncited by 208
- 2021WildDeepfake: A Challenging Real-World Dataset for Deepfake Detectioncited by 207
- 2022Depth-Aware Generative Adversarial Network for Talking Head Video Generationcited by 177
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2019STGAN: A Unified Selective Transfer Network for Arbitrary Image Attribute Editingcited by 119
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2019SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editingcited by 93
- 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2020CASIA-SURF CeFA: A Benchmark for Multi-modal Cross-ethnicity Face Anti-spoofingcited by 66
- 2019AdvFaces: Adversarial Face Synthesiscited by 59
- 2021AdvDrop: Adversarial Attack to DNNs by Dropping Informationcited by 55
- 2022FaceDancer: Pose- and Occlusion-Aware High Fidelity Face Swappingcited by 44
- 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
- 2023Instance-Aware Domain Generalization for Face Anti-Spoofingcited by 42
- 2021Unified Detection of Digital and Physical Face Attackscited by 31
- 2020Deep Models and Shortwave Infrared Information to Detect Face Presentation Attackscited by 29
- 2020Augmented Lagrangian Adversarial Attackscited by 28
- 2022Benchmarking Joint Face Spoofing and Forgery Detection with Visual and Physiological Cuescited by 24
- 2018Fast Geometrically-Perturbed Adversarial Facescited by 22
- 2023FM-ViT: Flexible Modal Vision Transformers for Face Anti-Spoofingcited by 22
- 2021SAFA: Structure Aware Face Animationcited by 20
- 2020Making Adversarial Examples More Transferable and Indistinguishablecited by 19
- 2021Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similaritycited by 18
- 2023MA-ViT: Modality-Agnostic Vision Transformers for Face Anti-Spoofingcited by 18
- 2019Swapped Face Detection using Deep Learning and Subjective Assessmentcited by 14
- 2023Surveillance Face Anti-spoofingcited by 12
Built on by
Citing papers per year: 2024: 4; 2025: 9; 2026: 4.
17 papers.
Sort:
By area:
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2025Mixture-of-Attack-Experts with Class Regularization for Unified Physical-Digital Face Attack Detectioncited by 5
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2024Unified Physical-Digital Attack Detection Challengecited by 3
- 2025FA^{3}-CLIP: Frequency-Aware Cues Fusion and Attack-Agnostic Prompt Learning for Unified Face Attack Detectioncited by 3
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
- 2025SUEDE:Shared Unified Experts for Physical-Digital Face Attack Detection Enhancementcited by 2
- 2025Think Twice before Adaptation: Improving Adaptability of DeepFake Detection via Online Test-Time Adaptationcited by 1
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofingcited by 1
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Methodcited by 0
- 2025Unified Face Matching and Physical-Digital Spoofing Attack Detectioncited by 0
5 more
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detectioncited by 0
- 2026Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimizationcited by 0
- 2026UniShield: Unified Face Attack Detection via KG-Informed Multimodal Reasoningcited by 0
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidancecited by 0
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detectioncited by 0
- 2026MS-MFAD : Multimodal large language models for Face Anti-spoofing Detection18 Aug 2026
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidance9 Jul 2026
- 2026UniShield: Unified Face Attack Detection via KG-Informed Multimodal Reasoning9 May 2026
- 2026Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimization27 Feb 2026
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detection6 Dec 2025
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofing20 Oct 2025
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
- 2025Think Twice before Adaptation: Improving Adaptability of DeepFake Detection via Online Test-Time Adaptation24 May 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025SUEDE:Shared Unified Experts for Physical-Digital Face Attack Detection Enhancement7 Apr 2025
- 2025Mixture-of-Attack-Experts with Class Regularization for Unified Physical-Digital Face Attack Detection1 Apr 2025
- 2025FA^{3}-CLIP: Frequency-Aware Cues Fusion and Attack-Agnostic Prompt Learning for Unified Face Attack Detection1 Apr 2025
5 more
- 2025Unified Face Matching and Physical-Digital Spoofing Attack Detection16 Jan 2025
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Method19 Aug 2024
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systems6 Jun 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024Unified Physical-Digital Attack Detection Challenge9 Apr 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2024Unified Physical-Digital Attack Detection Challengecited by 3
- 2025FA^{3}-CLIP: Frequency-Aware Cues Fusion and Attack-Agnostic Prompt Learning for Unified Face Attack Detectioncited by 3
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systemscited by 2
- 2025Think Twice before Adaptation: Improving Adaptability of DeepFake Detection via Online Test-Time Adaptationcited by 1
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofingcited by 1
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Methodcited by 0
- 2025Unified Face Matching and Physical-Digital Spoofing Attack Detectioncited by 0
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detectioncited by 0
- 2026Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimizationcited by 0
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidancecited by 0
- 2026Unified Face Attack Detection via Fine-Grained Semantic Guidance9 Jul 2026
- 2026Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimization27 Feb 2026
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detection6 Dec 2025
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofing20 Oct 2025
- 2025Think Twice before Adaptation: Improving Adaptability of DeepFake Detection via Online Test-Time Adaptation24 May 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025FA^{3}-CLIP: Frequency-Aware Cues Fusion and Attack-Agnostic Prompt Learning for Unified Face Attack Detection1 Apr 2025
- 2025Unified Face Matching and Physical-Digital Spoofing Attack Detection16 Jan 2025
- 2024A Unified Framework for Iris Anti-Spoofing: Introducing Iris Anti-Spoofing Cross-Domain-Testing Protocol and Masked-MoE Method19 Aug 2024
- 2024Principles of Designing Robust Remote Face Anti-Spoofing Systems6 Jun 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024Unified Physical-Digital Attack Detection Challenge9 Apr 2024
Similar, not cited
Close in wording, no citation either way
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
- 2024La-SoftMoE CLIP for Unified Physical-Digital Face Attack Detection
- 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofing
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
- 2024DiffFAS: Face Anti-Spoofing via Generative Diffusion Models