mlsanityData to 14 Oct 2026

Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection

arXiv 2505.03610 ↗First posted 6 May 2025cs.CVcited by 2

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

3D mask presentation attack detection is crucial for protecting face recognition systems against the rising threat of 3D mask attacks. While most existing methods utilize multimodal features or remote photoplethysmography (rPPG) signals to distinguish between real faces and 3D masks, they face significant challenges, such as the high costs associated with multimodal sensors and limited generalization ability. Detection-related text descriptions offer concise, universal information and are cost-effective to obtain. However, the potential of vision-language multimodal features for 3D mask presentation attack detection remains unexplored. In this paper, we propose a novel knowledge-based prompt learning framework to explore the strong generalization capability of vision-language models for 3D mask presentation attack detection. Specifically, our approach incorporates entities and triples from knowledge graphs into the prompt learning process, generating fine-grained, task-specific explicit prompts that effectively harness the knowledge embedded in pre-trained vision-language models. Furthermore, considering different input images may emphasize distinct knowledge graph elements, we introduce a visual-specific knowledge filter based on an attention mechanism to refine relevant elements according to the visual context. Additionally, we leverage causal graph theory insights into the prompt learning process to further enhance the generalization ability of our method. During training, a spurious correlation elimination paradigm is employed, which removes category-irrelevant local image patches using guidance from knowledge-based text features, fostering the learning of generalized causal prompts that align with category-relevant local patches. Experimental results demonstrate that the proposed method achieves state-of-the-art intra- and cross-scenario detection performance on benchmark datasets.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 34 of its 85 references that are in the map. First posted on arXiv 6 May 2025.

Builds on

34 of 85 references.

References · 34

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2021Learning to Prompt for Vision-Language Modelscited by 2,281
  4. 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,234
  5. 2022Conditional Prompt Learning for Vision-Language Modelscited by 1,433
  6. 2016ConceptNet 5.5: An Open Multilingual Graph of General Knowledgecited by 1,067
  7. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 903
  8. 2023Vision-Language Models for Vision Tasks: A Surveycited by 839
  9. 2022MaPLe: Multi-modal Prompt Learningcited by 687
  10. 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 274
  11. 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
  12. 2022Unified Vision and Language Prompt Learningcited by 148
22 more
  1. 2015face anti-spoofing based on color texture analysiscited by 82
  2. 2019Biometric Face Presentation Attack Detection with Multi-Channel Convolutional Neural Networkcited by 79
  3. 2020CASIA-SURF CeFA: A Benchmark for Multi-modal Cross-ethnicity Face Anti-spoofingcited by 66
  4. 2021Deep Learning for Face Anti-Spoofing: A Surveycited by 65
  5. 2019CASIA-SURF: A Large-scale Multi-modal Benchmark for Face Anti-spoofingcited by 61
  6. 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
  7. 2020On the Effectiveness of Vision Transformers for Zero-shot Face Anti-Spoofingcited by 44
  8. 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
  9. 2021TransRPPG: Remote Photoplethysmography Transformer for 3D Mask Face Presentation Attack Detectioncited by 41
  10. 2022Multi-domain Learning for Updating Face Anti-spoofing Modelscited by 39
  11. 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
  12. 2022Adaptive Transformers for Robust Few-shot Cross-domain Face Anti-spoofingcited by 38
  13. 2023Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognitioncited by 33
  14. 2020Deep Models and Shortwave Infrared Information to Detect Face Presentation Attackscited by 29
  15. 2022Flexible-Modal Face Anti-Spoofing: A Benchmarkcited by 21
  16. 2019FeatherNets: Convolutional Neural Networks as Light as Feather for Face Anti-spoofingcited by 14
  17. 2023Visual Prompt Flexible-Modal Face Anti-Spoofingcited by 9
  18. 2020PipeNet: Selective Modal Pipeline of Fusion Network for Multi-Modal Face Anti-Spoofingcited by 7
  19. 2024Generalized Face Anti-spoofing via Finer Domain Partition and Disentangling Liveness-irrelevant Factorscited by 6
  20. 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofingcited by 2
  21. 2023Mask Attack Detection Using Vascular-weighted Motion-robust rPPG Signalscited by 1
  22. 2023Flow-Attention-based Spatio-Temporal Aggregation Network for 3D Mask Detectioncited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection
  2. 2025Steering Vision-Language Pre-trained Models for Incremental Face Presentation Attack Detection
  3. 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
  4. 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Images
  5. 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
  6. 2025Exploring ChatGPT for Face Presentation Attack Detection in Zero and Few-Shot in-Context Learning
  7. 2024Semantic Shield: Defending Vision-Language Models Against Backdooring and Poisoning via Fine-grained Knowledge Alignment
  8. 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models