FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detection
Not on the map. Why?
Abstract (arXiv)
Although face recognition systems have seen a massive performance enhancement in recent years, they are still targeted by threats such as presentation attacks, leading to the need for generalizable presentation attack detection (PAD) algorithms. Current PAD solutions suffer from two main problems: low generalization to unknown cenarios and large training data requirements. Foundation models (FM) are pre-trained on extensive datasets, achieving remarkable results when generalizing to unseen domains and allowing for efficient task-specific adaption even when little training data are available. In this work, we recognize the potential of FMs to address common PAD problems and tackle the PAD task with an adapted FM for the first time. The FM under consideration is adapted with LoRA weights while simultaneously training a classification header. The resultant architecture, FoundPAD, is highly generalizable to unseen domains, achieving competitive results in several settings under different data availability scenarios and even when using synthetic training data. To encourage reproducibility and facilitate further research in PAD, we publicly release the implementation of FoundPAD at https://github.com/gurayozgur/FoundPAD .
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 44 of its 65 references that are in the map. First posted on arXiv 6 Jan 2025.
Builds on
44 of 65 references.
References · 44
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Segment Anythingcited by 8,158
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2024SAM 2: Segment Anything in Images and Videoscited by 2,784
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
- 2017Adversarial Discriminative Domain Adaptationcited by 1,309
- 2020Training Generative Adversarial Networks with Limited Datacited by 1,184
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2022AdaptFormer: Adapting Vision Transformers for Scalable Visual Recognitioncited by 714
32 more
- 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 658
- 2022Vision Transformer Adapter for Dense Predictionscited by 564
- 2023A Rank Stabilization Scaling Factor for Fine-Tuning with LoRAcited by 231
- 2019Fixing the train-test resolution discrepancycited by 209
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2021ElasticFace: Elastic Margin Loss for Deep Face Recognitioncited by 143
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
- 2020Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learningcited by 93
- 2019Regularized Fine-grained Meta Face Anti-spoofingcited by 86
- 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
- 2021CR-FIQA: Face Image Quality Assessment by Learning Sample Relative Classifiabilitycited by 68
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
- 2020Revisiting Pixel-Wise Supervision for Face Anti-Spoofingcited by 45
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
- 2023SAM Meets Robotic Surgery: An Empirical Study on Generalization, Robustness and Adaptationcited by 30
- 2023SAM Meets Robotic Surgery: An Empirical Study in Robustness Perspectivecited by 24
- 2024FRoundation: Are Foundation Models Ready for Face Recognition?cited by 22
- 2021Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detectioncited by 20
- 2019Domain Agnostic Feature Learning for Image and Video Based Face Anti-spoofingcited by 19
- 2021Learnable Multi-level Frequency Decomposition and Hierarchical Attention Mechanism for Generalized Face Presentation Attack Detectioncited by 18
- 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
- 2022ViTransPAD: Video Transformer using convolution and self-attention for Face Presentation Attack Detectioncited by 14
- 2024Iris-SAM: Iris Segmentation Using a Foundation Modelcited by 8
- 2024Learning to Adapt Foundation Model DINOv2 for Capsule Endoscopy Diagnosiscited by 8
- 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statisticscited by 7
- 2021Unsupervised Compound Domain Adaptation for Face Anti-Spoofingcited by 6
- 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Datacited by 5
Built on by
Citing papers per year: 2025: 7; 2026: 7.
14 papers.
Sort:
By area:
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognitioncited by 8
- 2025Can Foundation Models Generalise the Presentation Attack Detection Capabilities on ID Cards?cited by 2
- 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregationcited by 2
- 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detectioncited by 1
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systemscited by 0
- 2025Trade-offs in Cross-Domain Generalization of Foundation Model Fine-Tuned for Biometric Applicationscited by 0
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detectioncited by 0
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detection20 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detection20 Apr 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection11 Nov 2025
- 2025Trade-offs in Cross-Domain Generalization of Foundation Model Fine-Tuned for Biometric Applications18 Sep 2025
- 2025Detecting Text Manipulation in Images using Vision Language Models12 Sep 2025
- 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregation12 Aug 2025
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems21 Jul 2025
- 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systemscited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2025Detecting Text Manipulation in Images using Vision Language Models12 Sep 2025
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems21 Jul 2025
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognitioncited by 8
- 2025Can Foundation Models Generalise the Presentation Attack Detection Capabilities on ID Cards?cited by 2
- 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregationcited by 2
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detectioncited by 1
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2025Trade-offs in Cross-Domain Generalization of Foundation Model Fine-Tuned for Biometric Applicationscited by 0
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detectioncited by 0
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detectioncited by 0
- 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detection20 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection1 Jul 2026
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detection20 Apr 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection11 Nov 2025
- 2025Trade-offs in Cross-Domain Generalization of Foundation Model Fine-Tuned for Biometric Applications18 Sep 2025
- 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregation12 Aug 2025
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognition4 Jul 2025
- 2025Can Foundation Models Generalise the Presentation Attack Detection Capabilities on ID Cards?5 Jun 2025