DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Advancing face morphing attack techniques is crucial to anticipate evolving threats and develop robust defensive mechanisms for identity verification systems. This work introduces DCMorph, a dual-stream diffusion-based morphing framework that simultaneously operates at both identity conditioning and latent space levels. Unlike image-level methods suffering from blending artifacts or GAN-based approaches with limited reconstruction fidelity, DCMorph leverages identity-conditioned latent diffusion models through two mechanisms: (1) decoupled cross-attention interpolation that injects identity-specific features from both source faces into the denoising process, enabling explicit dual-identity conditioning absent in existing diffusion-based methods, and (2) DDIM inversion with spherical interpolation between inverted latent representations from both source faces, providing geometrically consistent initial latent representation that preserves structural attributes. Vulnerability analyses across four state-of-the-art face recognition systems demonstrate that DCMorph achieves the highest attack success rates compared to existing methods at both operational thresholds, while remaining challenging to detect by current morphing attack detection solutions.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 34 of its 50 references that are in the map. First posted on arXiv 23 Apr 2026.
Builds on
34 of 50 references.
Closest ancestors · 1
Same direction, newest first
Other references · 33
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,464
- 2021Diffusion Autoencoders: Toward a Meaningful and Decodable Representationcited by 449
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
- 2020CurricularFace: Adaptive Curriculum Learning Loss for Deep Face Recognitioncited by 321
- 2021ElasticFace: Elastic Margin Loss for Deep Face Recognitioncited by 144
- 2023DCFace: Synthetic Face Generation with Dual Condition Diffusion Modelcited by 116
21 more
- 2023IDiff-Face: Synthetic-based Face Recognition through Fizzy Identity-Conditioned Diffusion Modelscited by 72
- 2022Privacy-friendly Synthetic Data for the Development of Face Morphing Attack Detectorscited by 47
- 2020Can GAN Generated Morphs Threaten Face Recognition Systems Equally as Landmark Based Morphs? -- Vulnerability and Detectioncited by 46
- 2023MorDIFF: Recognition Vulnerability and Attack Detectability of Face Morphing Attacks Created by Diffusion Autoencoderscited by 44
- 2024Spherical Linear Interpolation and Text-Anchoring for Zero-shot Composed Image Retrievalcited by 44
- 2023Norm-guided latent space exploration for text-to-image generationcited by 43
- 2021MixFaceNets: Extremely Efficient Face Recognition Networkscited by 36
- 2022SYN-MAD 2022: Competition on Face Morphing Attack Detection Based on Privacy-aware Synthetic Training Datacited by 30
- 2024On Discrete Prompt Optimization for Diffusion Modelscited by 29
- 2021ReGenMorph: Visibly Realistic GAN Generated Face Morphing Attacks by Attack Re-generationcited by 21
- 2024ID3: Identity-Preserving-yet-Diversified Diffusion Models for Synthetic Face Recognitioncited by 18
- 2022Unsupervised Face Morphing Attack Detection via Self-paced Anomaly Detectioncited by 16
- 2023Leveraging Diffusion For Strong and High Quality Face Morphing Attackscited by 14
- 2024Facial Demorphing via Identity Preserving Image Decompositioncited by 8
- 2024MorCode: Face Morphing Attack Generation using Generative Codebookscited by 6
- 2024dc-GAN: Dual-Conditioned GAN for Face Demorphing From a Single Morphcited by 6
- 20223D Face Morphing Attacks: Generation, Vulnerability and Detectioncited by 5
- 2025UIFace: Unleashing Inherent Model Capabilities to Enhance Intra-Class Diversity in Synthetic Face Recognitioncited by 3
- 2025NegFaceDiff: The Power of Negative Context in Identity-Conditioned Diffusion for Synthetic Face Generationcited by 3
- 2025MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregationcited by 2
- 20243D Face Morphing Attack Generation using Non-Rigid Registrationcited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025StableMorph: High-Quality Face Morph Generation with Stable Diffusion
- 2024LADIMO: Face Morph Generation through Biometric Template Inversion with Latent Diffusion
- 2026MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks
- 2023SDeMorph: Towards Better Facial De-morphing from Single Morph
- 2026Enhancing Single-Image Facial Demorphing using Multimodal Large Language Models
- 2023Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models
- 2026Diff-ID: Identity Consistent Facial Image Generation and Morphing via Diffusion Models
- 2025DLADiff: A Dual-Layer Defense Framework against Fine-Tuning and Zero-Shot Customization of Diffusion Models