In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Gonzalez-Soler, Lazaro Janier, Salwowski, Maciej, Busch, Christoph
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916853017739264
author Gonzalez-Soler, Lazaro Janier
Salwowski, Maciej
Busch, Christoph
author_facet Gonzalez-Soler, Lazaro Janier
Salwowski, Maciej
Busch, Christoph
contents Recent advances in biometric systems have significantly improved the detection and prevention of fraudulent activities. However, as detection methods improve, attack techniques become increasingly sophisticated. Attacks on face recognition systems can be broadly divided into physical and digital approaches. Traditionally, deep learning models have been the primary defence against such attacks. While these models perform exceptionally well in scenarios for which they have been trained, they often struggle to adapt to different types of attacks or varying environmental conditions. These subsystems require substantial amounts of training data to achieve reliable performance, yet biometric data collection faces significant challenges, including privacy concerns and the logistical difficulties of capturing diverse attack scenarios under controlled conditions. This work investigates the application of Vision Language Models (VLM) and proposes an in-context learning framework for detecting physical presentation attacks and digital morphing attacks in biometric systems. Focusing on open-source models, the first systematic framework for the quantitative evaluation of VLMs in security-critical scenarios through in-context learning techniques is established. The experimental evaluation conducted on freely available databases demonstrates that the proposed subsystem achieves competitive performance for physical and digital attack detection, outperforming some of the traditional CNNs without resource-intensive training. The experimental results validate the proposed framework as a promising tool for improving generalisation in attack detection.
format Preprint
id arxiv_https___arxiv_org_abs_2507_15285
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
Gonzalez-Soler, Lazaro Janier
Salwowski, Maciej
Busch, Christoph
Computer Vision and Pattern Recognition
Recent advances in biometric systems have significantly improved the detection and prevention of fraudulent activities. However, as detection methods improve, attack techniques become increasingly sophisticated. Attacks on face recognition systems can be broadly divided into physical and digital approaches. Traditionally, deep learning models have been the primary defence against such attacks. While these models perform exceptionally well in scenarios for which they have been trained, they often struggle to adapt to different types of attacks or varying environmental conditions. These subsystems require substantial amounts of training data to achieve reliable performance, yet biometric data collection faces significant challenges, including privacy concerns and the logistical difficulties of capturing diverse attack scenarios under controlled conditions. This work investigates the application of Vision Language Models (VLM) and proposes an in-context learning framework for detecting physical presentation attacks and digital morphing attacks in biometric systems. Focusing on open-source models, the first systematic framework for the quantitative evaluation of VLMs in security-critical scenarios through in-context learning techniques is established. The experimental evaluation conducted on freely available databases demonstrates that the proposed subsystem achieves competitive performance for physical and digital attack detection, outperforming some of the traditional CNNs without resource-intensive training. The experimental results validate the proposed framework as a promising tool for improving generalisation in attack detection.
title In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems
topic Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2507.15285