In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Recent advances in biometric systems have significantly improved the detection and prevention of fraudulent activities. However, as detection methods improve, attack techniques become increasingly sophisticated. Attacks on face recognition systems can be broadly divided into physical and digital approaches. Traditionally, deep learning models have been the primary defence against such attacks. While these models perform exceptionally well in scenarios for which they have been trained, they often struggle to adapt to different types of attacks or varying environmental conditions. These subsystems require substantial amounts of training data to achieve reliable performance, yet biometric data collection faces significant challenges, including privacy concerns and the logistical difficulties of capturing diverse attack scenarios under controlled conditions. This work investigates the application of Vision Language Models (VLM) and proposes an in-context learning framework for detecting physical presentation attacks and digital morphing attacks in biometric systems. Focusing on open-source models, the first systematic framework for the quantitative evaluation of VLMs in security-critical scenarios through in-context learning techniques is established. The experimental evaluation conducted on freely available databases demonstrates that the proposed subsystem achieves competitive performance for physical and digital attack detection, outperforming some of the traditional CNNs without resource-intensive training. The experimental results validate the proposed framework as a promising tool for improving generalisation in attack detection.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 46 of its 86 references that are in the map. First posted on arXiv 21 Jul 2025.
Builds on
46 of 86 references.
Closest ancestors · 2
Same direction, newest first
- 2024ChatGPT Meets Iris Biometrics9 Aug
- 2024SHIELD : An Evaluation Benchmark for Face Spoofing and Forgery Detection with Multimodal Large Language Models6 Feb
Other references · 44
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,652
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
- 2024Are We on the Right Way for Evaluating Large Vision-Language Models?cited by 914
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 903
32 more
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 839
- 2023OCRBench: On the Hidden Mystery of OCR in Large Multimodal Modelscited by 476
- 2024VLMEvalKit: An Open-Source Toolkit for Evaluating Large Multi-Modality Modelscited by 455
- 2014Caffe: Convolutional Architecture for Fast Feature Embeddingcited by 288
- 2024Ovis: Structural Embedding Alignment for Multimodal Large Language Modelcited by 169
- 2024Mini-InternVL: A Flexible-Transfer Pocket Multimodal Model with 5% Parameters and 90% Performancecited by 94
- 2014Learn Convolutional Neural Network for Face Anti-Spoofingcited by 80
- 2019Deep Pixel-wise Binary Supervision for Face Presentation Attack Detectioncited by 76
- 2020Face Morphing Attack Generation & Detection: A Comprehensive Surveycited by 64
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2020Deep Face Representations for Differential Morphing Attack Detectioncited by 46
- 2020On the Effectiveness of Vision Transformers for Zero-shot Face Anti-Spoofingcited by 44
- 2021Contrastive Context-Aware Learning for 3D High-Fidelity Mask Face Presentation Attack Detectioncited by 43
- 2020Morphing Attack Detection -- Database, Evaluation Platform and Benchmarkingcited by 38
- 2024How Good is ChatGPT at Face Biometrics? A First Look into Recognition, Soft Biometrics, and Explainabilitycited by 34
- 2025FaceXBench: Evaluating Multimodal LLMs on Face Understandingcited by 24
- 2024ChatGPT and biometrics: an assessment of face recognition, gender detection, and age estimation capabilitiescited by 21
- 2021Learnable Multi-level Frequency Decomposition and Hierarchical Attention Mechanism for Generalized Face Presentation Attack Detectioncited by 18
- 2019Robust Morph-Detection at Automated Border Control Gate using Deep Decomposed 3D Shape and Diffuse Reflectancecited by 15
- 2025FoundPAD: Foundation Models Reloaded for Face Presentation Attack Detectioncited by 14
- 2025MADation: Face Morphing Attack Detection with Foundation Modelscited by 14
- 2025Generalized Single-Image-Based Morphing Attack Detection Using Deep Representations from Vision Transformercited by 14
- 2022One-Class Knowledge Distillation for Face Presentation Attack Detectioncited by 13
- 2025Exploring ChatGPT for Face Presentation Attack Detection in Zero and Few-Shot in-Context Learningcited by 12
- 2021Differential Anomaly Detection for Facial Imagescited by 11
- 2021On the Generalisation Capabilities of Fisher Vector based Face Presentation Attack Detectioncited by 8
- 2025Mimicking or Reasoning: Rethinking Multi-Modal In-Context Learning in Vision-Language Modelscited by 8
- 2023Face Presentation Attack Detection by Excavating Causal Clues and Adapting Embedding Statisticscited by 7
- 2023Multispectral Imaging for Differential Face Morphing Attack Detection: A Preliminary Studycited by 5
- 2024Aligning Actions and Walking to LLM-Generated Textual Descriptionscited by 3
- 2020MixNet for Generalized Face Presentation Attack Detectioncited by 2
- 2024Generating Automatically Print/Scan Textures for Morphing Attack Detection Applicationscited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
- 2025Benchmarking Foundation Models for Zero-Shot Biometric Tasks
- 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models
- 2026Benchmarking the Explanatory Quality of Open-Weight Vision-Language Models in Face Recognition
- 2025When Data Manipulation Meets Attack Goals: An In-depth Survey of Attacks for VLMs
- 2024Unified Physical-Digital Face Attack Detection
- 2026Backdoor Learning in Language Models and Vision-Language Models
- 2025Learning Knowledge-based Prompts for Robust 3D Mask Presentation Attack Detection