# Deep Data Hiding for ICAO-Compliant Face Images: A Survey

arXiv: https://arxiv.org/abs/2508.19324 · HTML: https://mlsanity.com/paper/2508.19324/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- Builds on 25 of its 87 references that are in the map.
- First posted on arXiv 26 Aug 2025.

## Builds on (most cited first, 25 of 25)

- [The Unreasonable Effectiveness of Deep Features as a Perceptual Metric](https://mlsanity.com/paper/1801.03924/) (2018)
- [HiDDeN: Hiding Data With Deep Networks](https://mlsanity.com/paper/1807.09937/) (2018)
- [Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding](https://mlsanity.com/paper/2009.03015/) (2020)
- [EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection](https://mlsanity.com/paper/2312.08883/) (2023)
- [MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression](https://mlsanity.com/paper/2108.08211/) (2021)
- [SteganoGAN: High Capacity Image Steganography with GANs](https://mlsanity.com/paper/1901.03892/) (2019)
- [CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes](https://mlsanity.com/paper/2105.10872/) (2021)
- [CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography](https://mlsanity.com/paper/2305.16936/) (2023)
- [FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Tracking](https://mlsanity.com/paper/2009.09869/) (2020)
- [SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection](https://mlsanity.com/paper/2305.06321/) (2023)
- [Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography](https://mlsanity.com/paper/2107.09287/) (2021)
- [Invisible Steganography via Generative Adversarial Networks](https://mlsanity.com/paper/1807.08571/) (2018)
- [LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks](https://mlsanity.com/paper/2411.17209/) (2024)
- [FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes](https://mlsanity.com/paper/2204.01960/) (2022)
- [DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Models](https://mlsanity.com/paper/2407.10459/) (2024)
- [Introduction to Presentation Attack Detection in Face Biometrics and Recent Advances](https://mlsanity.com/paper/2111.11794/) (2021)
- [ONOT: a High-Quality ICAO-compliant Synthetic Mugshot Dataset](https://mlsanity.com/paper/2404.11236/) (2024)
- [Hybrid blind robust image watermarking technique based on DFT-DCT and Arnold transform](https://mlsanity.com/paper/1911.00753/) (2019)
- [3D Face Reconstruction: the Road to Forensics](https://mlsanity.com/paper/2309.11357/) (2023)
- [Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking](https://mlsanity.com/paper/2410.01906/) (2024)
- [Certifiably Robust Image Watermark](https://mlsanity.com/paper/2407.04086/) (2024)
- [Effective Message Hiding with Order-Preserving Mechanisms](https://mlsanity.com/paper/2402.19160/) (2024)
- [A Risk Estimation Study of Native Code Vulnerabilities in Android Applications](https://mlsanity.com/paper/2406.02011/) (2024)
- [Cover-separable Fixed Neural Network Steganography via Deep Generative Models](https://mlsanity.com/paper/2407.11405/) (2024)
- [Fragile Watermarking for Image Certification Using Deep Steganographic Embedding](https://mlsanity.com/paper/2504.13759/) (2025)

## Built on by (most cited first, 1 of 1)

- [A Valid Watermark Is Not a Valid Identity: Spatial-Spectral Adversarial Face Evasion with Watermark Preservation](https://mlsanity.com/paper/2610.20278/) (2026)

## Abstract (arXiv)

ICAO-compliant facial images, initially designed for secure biometric passports, are increasingly becoming central to identity verification in a wide range of application contexts, including border control, digital travel credentials, and financial services. While their standardization enables global interoperability, it also facilitates practices such as morphing and deepfakes, which can be exploited for harmful purposes like identity theft and illegal sharing of identity documents. Traditional countermeasures like Presentation Attack Detection (PAD) are limited to real-time capture and offer no post-capture protection. This survey paper investigates digital watermarking and steganography as complementary solutions that embed tamper-evident signals directly into the image, enabling persistent verification without compromising ICAO compliance. We provide the first comprehensive analysis of state-of-the-art techniques to evaluate the potential and drawbacks of the underlying approaches concerning the applications involving ICAO-compliant images and their suitability under standard constraints. We highlight key trade-offs, offering guidance for secure deployment in real-world identity systems.