Optimal Transport-Guided Source-Free Adaptation for Face Anti-Spoofing
Not on the map. Why?
Abstract (arXiv)
Developing a face anti-spoofing model that meets the security requirements of clients worldwide is challenging due to the domain gap between training datasets and diverse end-user test data. Moreover, for security and privacy reasons, it is undesirable for clients to share a large amount of their face data with service providers. In this work, we introduce a novel method in which the face anti-spoofing model can be adapted by the client itself to a target domain at test time using only a small sample of data while keeping model parameters and training data inaccessible to the client. Specifically, we develop a prototype-based base model and an optimal transport-guided adaptor that enables adaptation in either a lightweight training or training-free fashion, without updating base model's parameters. Furthermore, we propose geodesic mixup, an optimal transport-based synthesis method that generates augmented training data along the geodesic path between source prototypes and target data distribution. This allows training a lightweight classifier to effectively adapt to target-specific characteristics while retaining essential knowledge learned from the source domain. In cross-domain and cross-attack settings, compared with recent methods, our method achieves average relative improvements of 19.17% in HTER and 8.58% in AUC, respectively.
Key facts. Cited by 5 papers in the map (data through 13 Oct 2026). Builds on 56 of its 98 references that are in the map. First posted on arXiv 29 Mar 2025.
Builds on
56 of 98 references.
References · 56
- 2014Adam: A Method for Stochastic Optimizationcited by 37,093
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,588
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,170
- 2017Prototypical Networks for Few-shot Learningcited by 3,011
- 2020Supervised Contrastive Learningcited by 2,811
- 2013Sinkhorn Distances: Lightspeed Computation of Optimal Transportation Distancescited by 2,295
- 2017Improved Training of Wasserstein GANscited by 2,226
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,627
- 2020Do We Really Need to Access the Source Data? Source Hypothesis Transfer for Unsupervised Domain Adaptationcited by 846
- 2019Adversarial Training for Free!cited by 641
- 2015Optimal Transport for Domain Adaptationcited by 460
- 2021Tip-Adapter: Training-free CLIP-Adapter for Better Vision-Language Modelingcited by 430
38 more
- 2020SplitFed: When Federated Learning Meets Split Learningcited by 310
- 2017Joint Distribution Optimal Transportation for Domain Adaptationcited by 281
- 2019Adversarial Domain Adaptation with Domain Mixupcited by 250
- 2019Sliced Wasserstein Discrepancy for Unsupervised Domain Adaptationcited by 235
- 2020Improve Unsupervised Domain Adaptation with Mixup Trainingcited by 185
- 2020Learning Self-Consistency for Deepfake Detectioncited by 179
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2021Supervised Contrastive Replay: Revisiting the Nearest Class Mean Classifier in Online Class-Incremental Continual Learningcited by 140
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotationscited by 109
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 105
- 2020Domain Adaptation without Source Datacited by 88
- 2019Regularized Fine-grained Meta Face Anti-spoofingcited by 86
- 2015face anti-spoofing based on color texture analysiscited by 82
- 2019Deep Tree Learning for Zero-shot Face Anti-Spoofingcited by 73
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2021A Prototype-Oriented Framework for Unsupervised Domain Adaptationcited by 62
- 2024LP++: A Surprisingly Strong Linear Probe for Few-Shot CLIPcited by 60
- 2013Regularized Discrete Optimal Transportcited by 54
- 2019Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Too Much Accuracycited by 49
- 2021Self-Domain Adaptation for Face Anti-Spoofingcited by 49
- 2021Adaptive Normalized Representation Learning for Generalizable Face Anti-Spoofingcited by 49
- 2021Dual Reweighting Domain Generalization for Face Presentation Attack Detectioncited by 47
- 2023Rethinking Domain Generalization for Face Anti-spoofing: Separability and Alignmentcited by 47
- 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
- 2023Instance-Aware Domain Generalization for Face Anti-Spoofingcited by 42
- 2021A linearized framework and a new benchmark for model selection for fine-tuningcited by 41
- 2019d-SNE: Domain Adaptation using Stochastic Neighborhood Embeddingcited by 40
- 2022Multi-domain Learning for Updating Face Anti-spoofing Modelscited by 39
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
- 2022Generative Domain Adaptation for Face Anti-Spoofingcited by 33
- 2022Adaptive Mixture of Experts Learning for Generalizable Face Anti-Spoofingcited by 28
- 2024Gradient Alignment for Cross-Domain Face Anti-Spoofingcited by 26
- 2019Normalized Wasserstein Distance for Mixture Distributions with Applications in Adversarial Learning and Domain Adaptationcited by 23
- 2024Test-Time Domain Generalization for Face Anti-Spoofingcited by 20
- 2019Domain Agnostic Feature Learning for Image and Video Based Face Anti-spoofingcited by 19
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detectioncited by 0
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofingcited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026Primitive-Driven Compositional Forensic Visual Prompting for Open-World Face Anti-Spoofing18 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2025Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detection6 Dec 2025