DiffFAS: Face Anti-Spoofing via Generative Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Face anti-spoofing (FAS) plays a vital role in preventing face recognition (FR) systems from presentation attacks. Nowadays, FAS systems face the challenge of domain shift, impacting the generalization performance of existing FAS methods. In this paper, we rethink about the inherence of domain shift and deconstruct it into two factors: image style and image quality. Quality influences the purity of the presentation of spoof information, while style affects the manner in which spoof information is presented. Based on our analysis, we propose DiffFAS framework, which quantifies quality as prior information input into the network to counter image quality shift, and performs diffusion-based high-fidelity cross-domain and cross-attack types generation to counter image style shift. DiffFAS transforms easily collectible live faces into high-fidelity attack faces with precise labels while maintaining consistency between live and spoof face identities, which can also alleviate the scarcity of labeled data with novel type attacks faced by nowadays FAS system. We demonstrate the effectiveness of our framework on challenging cross-domain and cross-attack FAS datasets, achieving the state-of-the-art performance. Available at https://github.com/murphytju/DiffFAS.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 30 of its 46 references that are in the map. First posted on arXiv 13 Sep 2024.
Builds on
30 of 46 references.
References · 30
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022Generative Adversarial Networkscited by 5,603
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
- 2021MobileViT: Light-weight, General-purpose, and Mobile-friendly Vision Transformercited by 636
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 390
- 2023FreeU: Free Lunch in Diffusion U-Netcited by 195
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
18 more
- 2023DCFace: Synthetic Face Generation with Dual Condition Diffusion Modelcited by 116
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2019Dynamic Instance Normalization for Arbitrary Style Transfercited by 83
- 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
- 2019Biometric Face Presentation Attack Detection with Multi-Channel Convolutional Neural Networkcited by 78
- 2019Deep Pixel-wise Binary Supervision for Face Presentation Attack Detectioncited by 76
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 64
- 2020On Disentangling Spoof Trace for Generic Face Anti-Spoofingcited by 62
- 2018Face De-Spoofing: Anti-Spoofing via Noise Modelingcited by 60
- 2021Dual Reweighting Domain Generalization for Face Presentation Attack Detectioncited by 47
- 2023Rethinking Domain Generalization for Face Anti-spoofing: Separability and Alignmentcited by 47
- 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
- 2021Detection and Continual Learning of Novel Face Presentation Attackscited by 33
- 2021Dual Spoof Disentanglement Generation for Face Anti-spoofing with Depth Uncertainty Learningcited by 20
- 2021Consistency Regularization for Deep Face Anti-Spoofingcited by 10
Built on by
Citing papers per year: 2025: 6; 2026: 1.
7 papers.
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Modelscited by 6
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofingcited by 3
- 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Imagescited by 1
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuningcited by 1
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofingcited by 1
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitionscited by 0
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofingcited by 0
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2025Multi-View Slot Attention Using Paraphrased Texts for Face Anti-Spoofing8 Sep 2025
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing16 Jul 2025
- 2025Multi-Modal Face Anti-Spoofing via Cross-Modal Feature Transitions8 Jul 2025
- 2025Exploring Task-Solving Paradigm for Generalized Cross-Domain Face Anti-Spoofing via Reinforcement Fine-Tuning27 Jun 2025
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models14 May 2025
- 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Images6 May 2025
Similar, not cited
Close in wording, no citation either way
- 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
- 2024Modeling Spoof Noise by De-spoofing Diffusion and its Application in Face Anti-spoofing
- 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model
- 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretraining
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidance
- 2026Benchmarking Vision Foundation Models for Domain-Generalizable Face Anti-Spoofing
- 2025SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models
- 2026Diff-ID: Identity Consistent Facial Image Generation and Morphing via Diffusion Models