mlsanityData to 14 Oct 2026

LADIMO: Face Morph Generation through Biometric Template Inversion with Latent Diffusion

arXiv 2410.07988 ↗First posted 10 Oct 2024cs.CVcited by 9

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Face morphing attacks pose a severe security threat to face recognition systems, enabling the morphed face image to be verified against multiple identities. To detect such manipulated images, the development of new face morphing methods becomes essential to increase the diversity of training datasets used for face morph detection. In this study, we present a representation-level face morphing approach, namely LADIMO, that performs morphing on two face recognition embeddings. Specifically, we train a Latent Diffusion Model to invert a biometric template - thus reconstructing the face image from an FRS latent representation. Our subsequent vulnerability analysis demonstrates the high morph attack potential in comparison to MIPGAN-II, an established GAN-based face morphing approach. Finally, we exploit the stochastic LADMIO model design in combination with our identity conditioning mechanism to create unlimited morphing attacks from a single face morph image pair. We show that each face morph variant has an individual attack success rate, enabling us to maximize the morph attack potential by applying a simple re-sampling strategy. Code and pre-trained models available here: https://github.com/dasec/LADIMO

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 15 of its 26 references that are in the map. First posted on arXiv 10 Oct 2024.

Builds on

15 of 26 references.

References · 15

  1. 2017Attention Is All You Needcited by 60,361
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  4. 2021Alias-Free Generative Adversarial Networkscited by 1,184
  5. 2015Deep Learning and the Information Bottleneck Principlecited by 802
  6. 2021Diffusion Autoencoders: Toward a Meaningful and Decodable Representationcited by 449
  7. 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
  8. 2021MagFace: A Universal Representation for Face Recognition and Quality Assessmentcited by 334
  9. 2020CurricularFace: Adaptive Curriculum Learning Loss for Deep Face Recognitioncited by 321
  10. 2020Face Morphing Attack Generation & Detection: A Comprehensive Surveycited by 64
  11. 2023MorDIFF: Recognition Vulnerability and Attack Detectability of Face Morphing Attacks Created by Diffusion Autoencoderscited by 44
  12. 2022Morphing Attack Potentialcited by 15
3 more
  1. 2023Leveraging Diffusion For Strong and High Quality Face Morphing Attackscited by 14
  2. 2024Approximating Optimal Morphing Attacks using Template Inversioncited by 2
  3. 2023Multi-Channel Cross Modal Detection of Synthetic Face Imagescited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 5.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion
  2. 2023Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models
  3. 2024MorCode: Face Morphing Attack Generation using Generative Codebooks
  4. 2025LoRA-Enhanced Vision Transformer for Single Image based Morphing Attack Detection via Knowledge Distillation from EfficientNet
  5. 2024Evaluating the Effectiveness of Attack-Agnostic Features for Morphing Attack Detection
  6. 2025WaFusion: A Wavelet-Enhanced Diffusion Framework for Face Morph Generation
  7. 2023SDeMorph: Towards Better Facial De-morphing from Single Morph
  8. 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model