SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning
Not on the map. Why?
Abstract (arXiv)
With the continuous advancement of generative models, face morphing attacks have become a significant challenge for existing face verification systems due to their potential use in identity fraud and other malicious activities. Contemporary Morphing Attack Detection (MAD) approaches frequently rely on supervised, discriminative models trained on examples of bona fide and morphed images. These models typically perform well with morphs generated with techniques seen during training, but often lead to sub-optimal performance when subjected to novel unseen morphing techniques. While unsupervised models have been shown to perform better in terms of generalizability, they typically result in higher error rates, as they struggle to effectively capture features of subtle artifacts. To address these shortcomings, we present SelfMAD, a novel self-supervised approach that simulates general morphing attack artifacts, allowing classifiers to learn generic and robust decision boundaries without overfitting to the specific artifacts induced by particular face morphing methods. Through extensive experiments on widely used datasets, we demonstrate that SelfMAD significantly outperforms current state-of-the-art MADs, reducing the detection error by more than 64% in terms of EER when compared to the strongest unsupervised competitor, and by more than 66%, when compared to the best performing discriminative MAD model, tested in cross-morph settings. The source code for SelfMAD is available at https://github.com/LeonTodorov/SelfMAD.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 37 of its 70 references that are in the map. First posted on arXiv 7 Apr 2025.
Builds on
37 of 70 references.
References · 37
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2021SegFormer: Simple and Efficient Design for Semantic Segmentation with Transformerscited by 2,940
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,417
- 2021CutPaste: Self-Supervised Learning for Anomaly Detection and Localizationcited by 531
- 2021DRAEM -- A discriminatively trained reconstruction embedding for surface anomaly detectioncited by 514
- 2019Face X-ray for More General Face Forgery Detectioncited by 470
- 2022Detecting Deepfakes with Self-Blended Imagescited by 338
- 2018Exposing DeepFake Videos By Detecting Face Warping Artifactscited by 319
- 2020A Self-supervised Approach for Adversarial Robustnesscited by 180
- 2023Intriguing properties of synthetic images: from generative adversarial networks to diffusion modelscited by 123
- 2023DiffMorpher: Unleashing the Capability of Diffusion Models for Image Morphingcited by 67
- 2020Face Morphing Attack Generation & Detection: A Comprehensive Surveycited by 64
25 more
- 2022SeeABLE: Soft Discrepancies and Bounded Contrastive Learning for Exposing Deepfakescited by 49
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2020Can GAN Generated Morphs Threaten Face Recognition Systems Equally as Landmark Based Morphs? -- Vulnerability and Detectioncited by 46
- 2023MorDIFF: Recognition Vulnerability and Attack Detectability of Face Morphing Attacks Created by Diffusion Autoencoderscited by 44
- 2020Vulnerability Analysis of Face Morphing Attacks from Landmarks and Generative Adversarial Networkscited by 36
- 2021MixFaceNets: Extremely Efficient Face Recognition Networkscited by 36
- 2022SYN-MAD 2022: Competition on Face Morphing Attack Detection Based on Privacy-aware Synthetic Training Datacited by 30
- 2021PW-MAD: Pixel-wise Supervision for Generalized Face Morphing Attack Detectioncited by 29
- 2022Self-Supervised Anomaly Detection in Computer Vision and Beyond: A Survey and Outlookcited by 24
- 2020Anomaly Detection-Based Unknown Face Presentation Attack Detectioncited by 20
- 2017Strengths and Weaknesses of Deep Learning Models for Face Recognition Against Image Degradationscited by 19
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
- 2020FaceGuard: A Self-Supervised Defense Against Adversarial Face Imagescited by 15
- 2023Leveraging Diffusion For Strong and High Quality Face Morphing Attackscited by 14
- 2023Face Morphing Attack Detection with Denoising Diffusion Probabilistic Modelscited by 12
- 2018Reflection Analysis for Face Morphing Attack Detectioncited by 11
- 2021Differential Anomaly Detection for Facial Imagescited by 11
- 2024Greedy-DiM: Greedy Algorithms for Unreasonably Effective Face Morphscited by 10
- 2023Unveiling the Two-Faced Truth: Disentangling Morphed Identities for Face Morphing Detectioncited by 9
- 2022Face Morphing Attacks and Face Image Quality: The Effect of Morphing and the Unsupervised Attack Detection by Qualitycited by 8
- 2024Towards the Detection of AI-Synthesized Human Face Imagescited by 8
- 2024MorCode: Face Morphing Attack Generation using Generative Codebookscited by 6
- 2022General GAN-generated image detection by data augmentation in fingerprint domaincited by 5
- 2024Deepfake Detection without Deepfakes: Generalization via Synthetic Frequency Patterns Injectioncited by 5
- 2024Self-Supervised Representation Learning for Adversarial Attack Detectioncited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 6.
7 papers.
- 2025Is It Really You? Exploring Biometric Verification Scenarios in Photorealistic Talking-Head Avatar Videoscited by 3
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Modelscited by 1
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detectioncited by 0
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detectioncited by 0
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detectioncited by 0
- 2026XSA-MAD: Cross-modal Semantic Alignment for Morphing Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026XSA-MAD: Cross-modal Semantic Alignment for Morphing Attack Detection14 Aug 2026
- 2026DifFoundMAD: Foundation Models meet Differential Morphing Attack Detection20 Apr 2026
- 2026R-FLoRA: Residual-Statistic-Gated Low-Rank Adaptation for Single-Image Face Morphing Attack Detection19 Apr 2026
- 2026SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection16 Mar 2026
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models17 Feb 2026
- 2025Is It Really You? Exploring Biometric Verification Scenarios in Photorealistic Talking-Head Avatar Videos1 Aug 2025