mlsanityData to 7 Oct 2026

FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detection

arXiv 2501.02892 ↗First posted 6 Jan 2025cs.CVcited by 14

Not on the map. Why?

Abstract (arXiv)

Although face recognition systems have seen a massive performance enhancement in recent years, they are still targeted by threats such as presentation attacks, leading to the need for generalizable presentation attack detection (PAD) algorithms. Current PAD solutions suffer from two main problems: low generalization to unknown cenarios and large training data requirements. Foundation models (FM) are pre-trained on extensive datasets, achieving remarkable results when generalizing to unseen domains and allowing for efficient task-specific adaption even when little training data are available. In this work, we recognize the potential of FMs to address common PAD problems and tackle the PAD task with an adapted FM for the first time. The FM under consideration is adapted with LoRA weights while simultaneously training a classification header. The resultant architecture, FoundPAD, is highly generalizable to unseen domains, achieving competitive results in several settings under different data availability scenarios and even when using synthetic training data. To encourage reproducibility and facilitate further research in PAD, we publicly release the implementation of FoundPAD at https://github.com/gurayozgur/FoundPAD .

Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 44 of its 65 references that are in the map. First posted on arXiv 6 Jan 2025.

Builds on

44 of 65 references.

References · 44

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  4. 2023Segment Anythingcited by 8,158
  5. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
  6. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  7. 2024SAM 2: Segment Anything in Images and Videoscited by 2,784
  8. 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
  9. 2017Adversarial Discriminative Domain Adaptationcited by 1,309
  10. 2020Training Generative Adversarial Networks with Limited Datacited by 1,184
  11. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
  12. 2022AdaptFormer: Adapting Vision Transformers for Scalable Visual Recognitioncited by 714
32 more
  1. 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 658
  2. 2022Vision Transformer Adapter for Dense Predictionscited by 564
  3. 2023A Rank Stabilization Scaling Factor for Fine-Tuning with LoRAcited by 231
  4. 2019Fixing the train-test resolution discrepancycited by 209
  5. 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
  6. 2021ElasticFace: Elastic Margin Loss for Deep Face Recognitioncited by 143
  7. 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
  8. 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
  9. 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
  10. 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
  11. 2020Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learningcited by 93
  12. 2019Regularized Fine-grained Meta Face Anti-spoofingcited by 86
  13. 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
  14. 2021CR-FIQA: Face Image Quality Assessment by Learning Sample Relative Classifiabilitycited by 68
  15. 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
  16. 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
  17. 2020Revisiting Pixel-Wise Supervision for Face Anti-Spoofingcited by 45
  18. 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
  19. 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
  20. 2023SAM Meets Robotic Surgery: An Empirical Study on Generalization, Robustness and Adaptationcited by 30
  21. 2023SAM Meets Robotic Surgery: An Empirical Study in Robustness Perspectivecited by 24
  22. 2024FRoundation: Are Foundation Models Ready for Face Recognition?cited by 22
  23. 2021Real Masks and Spoof Faces: On the Masked Face Presentation Attack Detectioncited by 20
  24. 2019Domain Agnostic Feature Learning for Image and Video Based Face Anti-spoofingcited by 19
  25. 2021Learnable Multi-level Frequency Decomposition and Hierarchical Attention Mechanism for Generalized Face Presentation Attack Detectioncited by 18
  26. 2023SynthASpoof: Developing Face Presentation Attack Detection Based on Privacy-friendly Synthetic Datacited by 17
  27. 2022ViTransPAD: Video Transformer using convolution and self-attention for Face Presentation Attack Detectioncited by 14
  28. 2024Iris-SAM: Iris Segmentation Using a Foundation Modelcited by 8
  29. 2024Learning to Adapt Foundation Model DINOv2 for Capsule Endoscopy Diagnosiscited by 8
  30. 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statisticscited by 7
  31. 2021Unsupervised Compound Domain Adaptation for Face Anti-Spoofingcited by 6
  32. 2023SynFacePAD 2023: Competition on Face Presentation Attack Detection Based on Privacy-aware Synthetic Training Datacited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 7; 2026: 7.

14 papers.

Sort:

By area:

  1. 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognitioncited by 8
  2. 2025Can Foundation Models Generalise the Presentation Attack Detection Capabilities on ID Cards?cited by 2
  3. 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregationcited by 2
  4. 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
  5. 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detectioncited by 1
  6. 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
  7. 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systemscited by 0
  8. 2025Trade-offs in Cross-Domain Generalization of Foundation Model Fine-Tuned for Biometric Applicationscited by 0
  9. 2025Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detectioncited by 0
  10. 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
  11. 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detectioncited by 0
  12. 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
2 more
  1. 2026Tomatoes, Potatoes, and Onions: Questioning the Need for Faces in Face Presentation Attack Detectioncited by 0
  2. 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0