Benchmarking Foundation Models for Zero-Shot Biometric Tasks
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
The advent of foundation models, particularly Vision-Language Models (VLMs) and Multi-modal Large Language Models (MLLMs), has redefined the frontiers of artificial intelligence, enabling remarkable generalization across diverse tasks with minimal or no supervision. Yet, their potential in biometric recognition and analysis remains relatively underexplored. In this work, we introduce a comprehensive benchmark that evaluates the zero-shot and few-shot performance of state-of-the-art publicly available VLMs and MLLMs across six biometric tasks spanning the face and iris modalities: face verification, soft biometric attribute prediction (gender and race), iris recognition, presentation attack detection (PAD), and face manipulation detection (morphs and deepfakes). A total of 41 VLMs were used in this evaluation. Experiments show that embeddings from these foundation models can be used for diverse biometric tasks with varying degrees of success. For example, in the case of face verification, a True Match Rate (TMR) of 96.77 percent was obtained at a False Match Rate (FMR) of 1 percent on the Labeled Face in the Wild (LFW) dataset, without any fine-tuning. In the case of iris recognition, the TMR at 1 percent FMR on the IITD-R-Full dataset was 97.55 percent without any fine-tuning. Further, we show that applying a simple classifier head to these embeddings can help perform DeepFake detection for faces, Presentation Attack Detection (PAD) for irides, and extract soft biometric attributes like gender and ethnicity from faces with reasonably high accuracy. This work reiterates the potential of pretrained models in achieving the long-term vision of Artificial General Intelligence.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 69 of its 111 references that are in the map. First posted on arXiv 30 May 2025.
Builds on
69 of 111 references.
Closest ancestors · 2
Same direction, newest first
- 2025Towards Zero-Shot Differential Morphing Attack Detection with Multimodal Large Language Models21 May
- 2024ChatGPT Meets Iris Biometrics9 Aug
Other references · 67
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2023GPT-4 Technical Reportcited by 18,396
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
38 more
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2023Segment Anythingcited by 8,234
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2024GPT-4o System Cardcited by 4,588
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,516
- 2025InternVL3: Exploring Advanced Training and Test-Time Recipes for Open-Source Multimodal Modelscited by 1,834
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,470
- 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,362
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,173
- 2019OK-VQA: A Visual Question Answering Benchmark Requiring External Knowledgecited by 1,121
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
- 2023Kosmos-2: Grounding Multimodal Large Language Models to the Worldcited by 1,089
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 971
- 2024Chameleon: Mixed-Modal Early-Fusion Foundation Modelscited by 927
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
- 2021GLaM: Efficient Scaling of Language Models with Mixture-of-Expertscited by 897
- 2023Graph of Thoughts: Solving Elaborate Problems with Large Language Modelscited by 886
- 2024DeepSeekMoE: Towards Ultimate Expert Specialization in Mixture-of-Experts Language Modelscited by 867
- 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 858
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 839
- 2024DeepSeek-VL: Towards Real-World Vision-Language Understandingcited by 733
- 2020Face2Face: Real-time Face Capture and Reenactment of RGB Videoscited by 632
- 2024DeepSeek-VL2: Mixture-of-Experts Vision-Language Models for Advanced Multimodal Understandingcited by 572
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
50 most cited of 67 All 67 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 11.
14 papers.
Sort:
By area:
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognitioncited by 8
- 2026Evaluating Multimodal Large Language Models for Heterogeneous Face Recognitioncited by 3
- 2026MLLM-based Textual Explanations for Face Comparisoncited by 2
- 2025SpectraIrisPAD: Leveraging Vision Foundation Models for Spectrally Conditioned Multispectral Iris Presentation Attack Detectioncited by 1
- 2025FPBench: A Comprehensive Benchmark of Multimodal Large Language Models for Fingerprint Analysiscited by 1
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Modelscited by 1
- 2026Compatibility of Face Embeddings Across Deep Neural Networkscited by 1
- 2026Generalist Multimodal LLMs Gain Biometric Expertise via Human Saliencecited by 0
- 2026VISER: Visually-Informed System for Enhanced Robustness in Iris Presentation Attack Detectioncited by 0
- 2026A Systematic Failure Analysis of Vision Foundation Models for Open Set Iris Presentation Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Modelscited by 0
- 2026Benchmarking CLIP for Zero-Shot Face and Periocular Gender Estimation5 Oct 2026
- 2026Benchmarking the Explanatory Quality of Open-Weight Vision-Language Models in Face Recognition18 Sep 2026
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Models31 Aug 2026
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026A Systematic Failure Analysis of Vision Foundation Models for Open Set Iris Presentation Attack Detection18 May 2026
- 2026Compatibility of Face Embeddings Across Deep Neural Networks8 Apr 2026
- 2026VISER: Visually-Informed System for Enhanced Robustness in Iris Presentation Attack Detection18 Mar 2026
- 2026Generalist Multimodal LLMs Gain Biometric Expertise via Human Salience17 Mar 2026
- 2026MLLM-based Textual Explanations for Face Comparison17 Mar 2026
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models17 Feb 2026
- 2026Evaluating Multimodal Large Language Models for Heterogeneous Face Recognition21 Jan 2026
- 2025FPBench: A Comprehensive Benchmark of Multimodal Large Language Models for Fingerprint Analysis19 Dec 2025
- 2026Evaluating Multimodal Large Language Models for Heterogeneous Face Recognitioncited by 3
- 2026MLLM-based Textual Explanations for Face Comparisoncited by 2
- 2025FPBench: A Comprehensive Benchmark of Multimodal Large Language Models for Fingerprint Analysiscited by 1
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Modelscited by 1
- 2026Generalist Multimodal LLMs Gain Biometric Expertise via Human Saliencecited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Benchmarking the Explanatory Quality of Open-Weight Vision-Language Models in Face Recognitioncited by 0
- 2026Benchmarking the Explanatory Quality of Open-Weight Vision-Language Models in Face Recognition18 Sep 2026
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026Generalist Multimodal LLMs Gain Biometric Expertise via Human Salience17 Mar 2026
- 2026MLLM-based Textual Explanations for Face Comparison17 Mar 2026
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models17 Feb 2026
- 2026Evaluating Multimodal Large Language Models for Heterogeneous Face Recognition21 Jan 2026
- 2025FPBench: A Comprehensive Benchmark of Multimodal Large Language Models for Fingerprint Analysis19 Dec 2025
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognitioncited by 8
- 2025SpectraIrisPAD: Leveraging Vision Foundation Models for Spectrally Conditioned Multispectral Iris Presentation Attack Detectioncited by 1
- 2026Compatibility of Face Embeddings Across Deep Neural Networkscited by 1
- 2026VISER: Visually-Informed System for Enhanced Robustness in Iris Presentation Attack Detectioncited by 0
- 2026A Systematic Failure Analysis of Vision Foundation Models for Open Set Iris Presentation Attack Detectioncited by 0
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Modelscited by 0
- 2026Benchmarking CLIP for Zero-Shot Face and Periocular Gender Estimationcited by 0
- 2026Benchmarking CLIP for Zero-Shot Face and Periocular Gender Estimation5 Oct 2026
- 2026Unmasking Face Embeddings: Reading, Rendering and Naming with Foundation Models31 Aug 2026
- 2026A Systematic Failure Analysis of Vision Foundation Models for Open Set Iris Presentation Attack Detection18 May 2026
- 2026Compatibility of Face Embeddings Across Deep Neural Networks8 Apr 2026
- 2026VISER: Visually-Informed System for Enhanced Robustness in Iris Presentation Attack Detection18 Mar 2026
- 2025SpectraIrisPAD: Leveraging Vision Foundation Models for Spectrally Conditioned Multispectral Iris Presentation Attack Detection5 Dec 2025
- 2025Foundation versus Domain-specific Models: Performance Comparison, Fusion, and Explainability in Face Recognition4 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2025Benchmarking Multimodal Large Language Models for Face Recognition
- 2026Exploring Vision-Language Models for Online Signature Verification: A Zero-Shot Capability Study
- 2025In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
- 2026Employing Vision-Language Models for Face Image Quality Assessment
- 2025DemoBias: An Empirical Study to Trace Demographic Biases in Vision Foundation Models
- 2026Demographic Fairness in Multimodal LLMs: A Benchmark of Gender and Ethnicity Bias in Face Verification
- 2025Safe-LLaVA: A Privacy-Preserving Vision-Language Dataset and Benchmark for Biometric Safety
- 2026Underrepresented in Foundation Model Pretraining Data? A One-Shot Probe