Benchmarking Vision Foundation Models for Domain-Generalizable Face Anti-Spoofing
Not on the map. Why?
Abstract (arXiv)
Face Anti-Spoofing (FAS) remains challenging due to the requirement for robust domain generalization across unseen environments. While recent trends leverage Vision-Language Models (VLMs) for semantic supervision, these multimodal approaches often demand prohibitive computational resources and exhibit high inference latency. Furthermore, their efficacy is inherently limited by the quality of the underlying visual features. This paper revisits the potential of vision-only foundation models to establish a highly efficient and robust baseline for FAS. We conduct a systematic benchmarking of 15 pre-trained models, such as supervised CNNs, supervised ViTs, and self-supervised ViTs, under severe cross-domain scenarios including the MICO and Limited Source Domains (LSD) protocols. Our comprehensive analysis reveals that self-supervised vision models, particularly DINOv2 with Registers, significantly suppress attention artifacts and capture critical, fine-grained spoofing cues. Combined with Face Anti-Spoofing Data Augmentation (FAS-Aug), Patch-wise Data Augmentation (PDA) and Attention-weighted Patch Loss (APL), our proposed vision-only baseline achieves state-of-the-art performance in the MICO protocol. This baseline outperforms existing methods under the data-constrained LSD protocol while maintaining superior computational efficiency. This work provides a definitive vision-only baseline for FAS, demonstrating that optimized self-supervised vision transformers can serve as a backbone for both vision-only and future multimodal FAS systems. The project page is available at: https://gsisaoki.github.io/FAS-VFMbenchmark-CVPRW2026/ .
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 34 of its 56 references that are in the map. First posted on arXiv 21 Apr 2026.
Builds on
34 of 56 references.
References · 34
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2023Segment Anythingcited by 8,158
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2022A ConvNet for the 2020scited by 3,545
- 2022data2vec: A General Framework for Self-supervised Learning in Speech, Vision and Languagecited by 718
- 2021MobileViT: Light-weight, General-purpose, and Mobile-friendly Vision Transformercited by 636
- 2022EfficientFormer: Vision Transformers at MobileNet Speedcited by 240
22 more
- 2020Searching Central Difference Convolutional Networks for Face Anti-Spoofingcited by 173
- 2018Learning Deep Models for Face Anti-Spoofing: Binary or Auxiliary Supervisioncited by 167
- 2020Single-Side Domain Generalization for Face Anti-Spoofingcited by 139
- 2020NAS-FAS: Static-Dynamic Central Difference Network Search for Face Anti-Spoofingcited by 104
- 2017L2-constrained Softmax Loss for Discriminative Face Verificationcited by 96
- 2020Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learningcited by 93
- 2022Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofingcited by 73
- 2022PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognitioncited by 67
- 2021Adaptive Normalized Representation Learning for Generalizable Face Anti-Spoofingcited by 49
- 2021Dual Reweighting Domain Generalization for Face Presentation Attack Detectioncited by 47
- 2023Rethinking Domain Generalization for Face Anti-spoofing: Separability and Alignmentcited by 47
- 2021Generalizable Representation Learning for Mixture Domain Face Anti-Spoofingcited by 46
- 2023FLIP: Cross-domain Face Anti-spoofing with Language Guidancecited by 45
- 2023Instance-Aware Domain Generalization for Face Anti-Spoofingcited by 42
- 2024CFPL-FAS: Class Free Prompt Learning for Generalizable Face Anti-spoofingcited by 39
- 2024Gradient Alignment for Cross-Domain Face Anti-Spoofingcited by 26
- 2024Towards Data-Centric Face Anti-Spoofing: Improving Cross-domain Generalization via Physics-based Data Synthesiscited by 16
- 2025Interpretable Face Anti-Spoofing: Enhancing Generalization with Multimodal Large Language Modelscited by 11
- 2018Exploiting temporal and depth information for multi-frame face anti-spoofingcited by 10
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2023Fine-Grained Annotation for Face Anti-Spoofingcited by 4
- 2025Optimizing DINOv2 with Registers for Face Anti-Spoofingcited by 1
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmarkcited by 1
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofingcited by 0
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detectioncited by 0
- 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection30 Aug 2026
- 2026LoRA-based Adaptation Alone Is Not Enough: Understanding the Limits of Foundation Models for Face Presentation Attack Detection10 Aug 2026
- 2026Foundation Models for Face Presentation Attack Detection: A Unified Linear-Probing Benchmark29 Jul 2026
- 2026DINO-VPT: Hierarchical Visual Prompt Tuning for Joint Physical-Digital Face Anti-Spoofing23 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2025FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models
- 2025InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing
- 2025SLIP: Spoof-Aware One-Class Face Anti-Spoofing with Language Image Pretraining
- 2026FAS-R1: A Unified Multi-Task MLLM for Reasoning Face Anti-Spoofing
- 2026From Intuition to Investigation: A Tool-Augmented Reasoning MLLM Framework for Generalizable Face Anti-Spoofing
- 2025Learning Unknown Spoof Prompts for Generalized Face Anti-Spoofing Using Only Real Face Images
- 2023TeG-DG: Textually Guided Domain Generalization for Face Anti-Spoofing
- 2025Harnessing Chain-of-Thought Reasoning in Multimodal Large Language Models for Face Anti-Spoofing