mlsanityData to 7 Oct 2026

OODFace: Benchmarking Robustness of Face Recognition under Common Corruptions and Appearance Variations

arXiv 2412.02479 ↗First posted 3 Dec 2024cs.CV cs.AI cs.CRcited by 2

Not on the map. Why?

Abstract (arXiv)

With the rise of deep learning, facial recognition technology has seen extensive research and rapid development. Although facial recognition is considered a mature technology, we find that existing open-source models and commercial algorithms lack robustness in certain complex Out-of-Distribution (OOD) scenarios, raising concerns about the reliability of these systems. In this paper, we introduce OODFace, which explores the OOD challenges faced by facial recognition models from two perspectives: common corruptions and appearance variations. We systematically design 30 OOD scenarios across 9 major categories tailored for facial recognition. By simulating these challenges on public datasets, we establish three robustness benchmarks: LFW-C/V, CFP-FP-C/V, and YTF-C/V. We then conduct extensive experiments on 19 facial recognition models and 3 commercial APIs, along with extended physical experiments on face masks to assess their robustness. Next, we explore potential solutions from two perspectives: defense strategies and Vision-Language Models (VLMs). Based on the results, we draw several key insights, highlighting the vulnerability of facial recognition systems to OOD data and suggesting possible solutions. Additionally, we offer a unified toolkit that includes all corruption and variation types, easily extendable to other datasets. We hope that our benchmarks and findings can provide guidance for future improvements in facial recognition model robustness.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 41 of its 64 references that are in the map. First posted on arXiv 3 Dec 2024.

Builds on

41 of 64 references.

References · 41

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2023GPT-4 Technical Reportcited by 18,132
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2013Intriguing properties of neural networkscited by 5,114
  6. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
  7. 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
  8. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  9. 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
  10. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  11. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  12. 2022BEVFormer: Learning Bird's-Eye-View Representation from Multi-Camera Images via Spatiotemporal Transformerscited by 1,213
29 more
  1. 2017ShuffleNet: An Extremely Efficient Convolutional Neural Network for Mobile Devicescited by 1,194
  2. 2018ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Designcited by 1,132
  3. 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
  4. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
  5. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
  6. 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
  7. 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 621
  8. 2020GANSpace: Discovering Interpretable GAN Controlscited by 612
  9. 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
  10. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
  11. 2021Pivotal Tuning for Latent-based Editing of Real Imagescited by 427
  12. 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 390
  13. 2017Mitigating Adversarial Effects Through Randomizationcited by 382
  14. 2021Towards Real-World Blind Face Restoration with Generative Facial Priorcited by 347
  15. 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
  16. 2018Additive Margin Softmax for Face Verificationcited by 275
  17. 2018Generalisation in humans and deep neural networkscited by 237
  18. 2022Towards Robust Blind Face Restoration with Codebook Lookup Transformercited by 230
  19. 2016A study of the effect of JPG compression on adversarial imagescited by 196
  20. 2018MobileFaceNets: Efficient CNNs for Accurate Real-Time Face Verification on Mobile Devicescited by 180
  21. 2021ElasticFace: Elastic Margin Loss for Deep Face Recognitioncited by 143
  22. 2023Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Drivingcited by 112
  23. 2022Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptionscited by 78
  24. 2022Benchmarking and Analyzing Point Cloud Classification under Corruptionscited by 70
  25. 2021Image-to-image Translation via Hierarchical Style Disentanglementcited by 63
  26. 2024AI-Face: A Million-Scale Demographically Annotated AI-Generated Face Dataset and Fairness Benchmarkcited by 28
  27. 2023TransFace++: Rethinking the Face Recognition Paradigm with a Focus on Accuracy, Efficiency, and Securitycited by 22
  28. 2024TopoFR: A Closer Look at Topology Alignment on Face Recognitioncited by 13
  29. 2020RobFR: Benchmarking Adversarial Robustness on Face Recognitioncited by 10

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 1.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Benchmarking the Explanatory Quality of Open-Weight Vision-Language Models in Face Recognition
  2. 2024FaceCat: Enhancing Face Recognition Security with a Unified Diffusion Model
  3. 2025LVFace: Progressive Cluster Optimization for Large Vision Models in Face Recognition
  4. 2025Benchmarking Foundation Models for Zero-Shot Biometric Tasks
  5. 2026A Step Forward Towards Trustworthy Risk-Aware Facial Retrieval (RA-FR)
  6. 2022A Meta-Analysis of Distributionally-Robust Models
  7. 2025UIFace: Unleashing Inherent Model Capabilities to Enhance Intra-Class Diversity in Synthetic Face Recognition
  8. 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretraining