SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection

• URL: http://arxiv.org/abs/2603.15050v1
• Date: Mon, 16 Mar 2026 10:05:44 GMT
• Title: SRL-MAD: Structured Residual Latents for One-Class Morphing Attack Detection
• Abstract summary: We introduce SRL-MAD, a one-class single-image MAD that uses structured residual Fourier representations for open-set morphing attack detection.<n>We show that SRL-MAD consistently outperforms recent one-class and supervised MAD models.
• Score: 5.931399156681511
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Face morphing attacks represent a significant threat to biometric systems as they allow multiple identities to be combined into a single face. While supervised morphing attack detection (MAD) methods have shown promising performance, their reliance on attack-labeled data limits generalization to unseen morphing attacks. This has motivated increasing interest in one-class MAD, where models are trained exclusively on bona fide samples and are expected to detect unseen attacks as deviations from the normal facial structure. In this context, we introduce SRL-MAD, a one-class single-image MAD that uses structured residual Fourier representations for open-set morphing attack detection. Starting from a residual frequency map that suppresses image-specific spectral trends, we preserve the two-dimensional organization of the Fourier domain through a ring-based representation and replace azimuthal averaging with a learnable ring-wise spectral projection. To further encode domain knowledge about where morphing artifacts arise, we impose a frequency-informed inductive bias by organizing spectral evidence into low, mid, and high-frequency bands and learning cross-band interactions. These structured spectral features are mapped into a latent space designed for direct scoring, avoiding the reliance on reconstruction errors. Extensive evaluation on FERET-Morph, FRLL-Morph, and MorDIFF demonstrates that SRL-MAD consistently outperforms recent one-class and supervised MAD models. Overall, our results show that learning frequency-aware projections provides a more discriminative alternative to azimuthal spectral summarization for one-class morphing attack detection.

Related papers

• TIGA: Trajectory-Injected Generative Attack against Black-box AIGC Detectors [76.4118981404995]
  Trajectory-Injected Generative Attack (TIGA) is a source-image-free and training free framework that generates detector-evasive images.<n>TIGA steers the latent Denoising Diffusion Implicit Model (DDIM) trajectory so that adversarial properties emerge during generation.<n>TIGA achieves strong blackbox attack performance, transferability, and high robustness under common post-processing operations.
  arXiv  Detail & Related papers  (2026-07-28T15:51:39Z)
• FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detection [5.931399156681511]
  We introduce a region-aware frequency-based morph detection strategy that drastically improves over strong baseline methods.<n>Our approach achieves an average equal error rate (EER) of 1.85% on FRLL-Morph and ranks second on MAD22 with an average EER of 6.12%.
  arXiv  Detail & Related papers  (2026-01-28T14:38:51Z)
• ForensicsSAM: Toward Robust and Unified Image Forgery Detection and Localization Resisting to Adversarial Attack [56.0056378072843]
  We show that highly transferable adversarial images can be crafted solely via the upstream model.<n>We propose ForensicsSAM, a unified IFDL framework with built-in adversarial robustness.
  arXiv  Detail & Related papers  (2025-08-10T16:03:44Z)
• Generate Aligned Anomaly: Region-Guided Few-Shot Anomaly Image-Mask Pair Synthesis for Industrial Inspection [53.137651284042434]
  Anomaly inspection plays a vital role in industrial manufacturing, but the scarcity of anomaly samples limits the effectiveness of existing methods.<n>We propose Generate grained Anomaly (GAA), a region-guided, few-shot anomaly image-mask pair generation framework.<n>GAA generates realistic, diverse, and semantically aligned anomalies using only a small number of samples.
  arXiv  Detail & Related papers  (2025-07-13T12:56:59Z)
• Frequency Domain-Based Diffusion Model for Unpaired Image Dehazing [92.61216319417208]
  We propose a novel frequency domain-based diffusion model, named ours, for fully exploiting the beneficial knowledge in unpaired clear data.<n>Inspired by the strong generative ability shown by Diffusion Models (DMs), we tackle the dehazing task from the perspective of frequency domain reconstruction.
  arXiv  Detail & Related papers  (2025-07-02T01:22:46Z)
• Active Adversarial Noise Suppression for Image Forgery Localization [56.98050814363447]
  We introduce an Adversarial Noise Suppression Module (ANSM) that generate a defensive perturbation to suppress the attack effect of adversarial noise.<n>To our best knowledge, this is the first report of adversarial defense in image forgery localization tasks.
  arXiv  Detail & Related papers  (2025-06-15T14:53:27Z)
• SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning [8.554461485466936]
  SelfMAD is a novel self-supervised approach that simulates general morphing attack artifacts.<n>We demonstrate that SelfMAD significantly outperforms current state-of-the-art MADs.
  arXiv  Detail & Related papers  (2025-04-07T21:03:00Z)
• One-for-More: Continual Diffusion Model for Anomaly Detection [63.50488826645681]
  Anomaly detection methods utilize diffusion models to generate or reconstruct normal samples when given arbitrary anomaly images.<n>Our study found that the diffusion model suffers from severe faithfulness hallucination'' and catastrophic forgetting''<n>We propose a continual diffusion model that uses gradient projection to achieve stable continual learning.
  arXiv  Detail & Related papers  (2025-02-27T07:47:27Z)
• MLSD-GAN -- Generating Strong High Quality Face Morphing Attacks using Latent Semantic Disentanglement [6.747633314364796]
  Face-morphing attacks can be used to fool face recognition systems. We propose a new method for generating high-quality morphing attacks using StyleGAN disentanglement.
  arXiv  Detail & Related papers  (2024-04-19T07:26:30Z)
• Face Morphing Attack Detection with Denoising Diffusion Probabilistic Models [0.0]
  Morphed face images can be used to impersonate someone's identity for various malicious purposes. Existing MAD techniques rely on discriminative models that learn from examples of bona fide and morphed images. We propose a novel, diffusion-based MAD method that learns only from the characteristics of bona fide images.
  arXiv  Detail & Related papers  (2023-06-27T18:19:45Z)
• Fusion-based Few-Shot Morphing Attack Detection and Fingerprinting [37.161842673434705]
  Face recognition systems are vulnerable to morphing attacks. Most existing morphing attack detection methods require a large amount of training data and have only been tested on a few predefined attack models. We propose to extend MAD from supervised learning to few-shot learning and from binary detection to multiclass fingerprinting.
  arXiv  Detail & Related papers  (2022-10-27T14:46:53Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.