MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks

• URL: http://arxiv.org/abs/2607.25092v1
• Date: Mon, 27 Jul 2026 21:30:49 GMT
• Title: MorphUNet: Alpha-Controlled Biometric Transport for Diffusion-Based Face Morphing Attacks
• Abstract summary: MorphUNet is a diffusion morphing framework formulating two-parent generation as alpha-controlled biometric transport.<n>It is the first diffusion-based morphing framework using trainable parent-separated dual cross-attention.<n>It achieves the best Morphing Attack Potential (MAP) when at least three of six systems are fooled by one morph.
• Score: 42.651660700496606
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: Face morphing attacks create synthetic images verifiable against multiple identities, threatening border control and identity verification systems. We introduce MorphUNet, a diffusion morphing framework formulating two-parent generation as alpha-controlled biometric transport: each parent is decomposed into CLIP appearance and ArcFace identity evidence, aligned into a CLIP-compatible token space, with the two contributors preserved as separate identity-aware token banks. To our knowledge, MorphUNet is the first diffusion-based morphing framework using trainable parent-separated dual cross-attention inside the denoising U-Net: a Biometric Transport Layer carrying parent-specific identity evidence through denoising, attending to each parent separately before combining residuals via the morphing parameter alpha. DDIM-inverted latent interpolation gives a coherent denoising start, while weaker-parent-guided selection favours morphs maximising the lower parent-similarity score, reducing collapse toward one contributor. We evaluate MorphUNet against three state-of-the-art baselines (StableMorph, MIPGAN-II, and MorDIFF) on FEI and FRLL using six recognition systems, and propose CFD-based unseen-identity stress testing across gender and ethnicity pairing, demographic shifts, and parent-similarity extremes. MorphUNet achieves the best Morphing Attack Potential (MAP) when at least three of six systems are fooled by one morph, reaching 0.919 on FEI and 0.886 on FRLL, and obtains the best FID on both datasets (35.19 FEI, 44.86 FRLL). It also gives the highest APCER at 5% BPCER in the same-dataset setting, and remains highly difficult to detect under cross-dataset transfer, with APCER 0.996 on FEI and 0.946 on FRLL. The full evaluation analyses MAP, MAD, per-system vulnerability, identity balance, image quality, top/bottom-similarity stress tests, and CFD unseen-identity robustness.

Related papers

• A Combined Feature-Based Framework for Disguise and Spoofing Detection in Face Recognition Systems [0.0]
  Face recognition systems face two distinct, commonly-separated failure modes: spoofing and disguise.<n>This paper proposes and compares five combined feature-extraction and classification pipelines that address both problems within a single framework.<n>The methods were trained on 115 subjects drawn from the FEI, Disguised Faces Database, and NUAA databases.
  arXiv  Detail & Related papers  (2026-08-09T06:40:34Z)
• DNA: Dual-stage Native Attribution for Generated Image Source Tracing [75.65470221927096]
  Existing proactive methods rely on watermark embedding or model modification.<n>DNA is a coarse-to-fine framework that follows this hierarchy without additional neural-network training.<n>Experiments show that DNA achieves 89.11% end-to-end attribution accuracy.
  arXiv  Detail & Related papers  (2026-07-15T10:27:52Z)
• PLGSA-Transformer: Periocular Landmark-Guided Attention with Occlusion-Adaptive Cosine Thresholding for Cross-Modal Masked and Unmasked Face Recognition [0.0]
  This paper proposes PLGSA-Transformer, a cross-modal face matching framework with three contributions.<n>PLGSA-Transformer achieves 97.22% pair verification accuracy with ROC AUC 1.0000, surpassing VGG-16-based MUFM.
  arXiv  Detail & Related papers  (2026-07-03T19:48:17Z)
• DCMorph: Face Morphing via Dual-Stream Cross-Attention Diffusion [18.93461399363413]
  DCMorph is a dual-stream diffusion-based morphing framework that simultaneously operates at both identity conditioning and latent space levels.<n>Vulnerability analyses across four state-of-the-art face recognition systems demonstrate that DCMorph achieves the highest attack success rates.
  arXiv  Detail & Related papers  (2026-04-23T12:46:07Z)
• FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detection [5.931399156681511]
  We introduce a region-aware frequency-based morph detection strategy that drastically improves over strong baseline methods.<n>Our approach achieves an average equal error rate (EER) of 1.85% on FRLL-Morph and ranks second on MAD22 with an average EER of 6.12%.
  arXiv  Detail & Related papers  (2026-01-28T14:38:51Z)
• Agent4FaceForgery: Multi-Agent LLM Framework for Realistic Face Forgery Detection [108.5042835056188]
  This work introduces Agent4FaceForgery to address two fundamental problems.<n>How to capture the diverse intents and iterative processes of human forgery creation.<n>How to model the complex, often adversarial, text-image interactions that accompany forgeries in social media.
  arXiv  Detail & Related papers  (2025-09-16T01:05:01Z)
• ID$^3$: Identity-Preserving-yet-Diversified Diffusion Models for Synthetic Face Recognition [60.15830516741776]
  Synthetic face recognition (SFR) aims to generate datasets that mimic the distribution of real face data. We introduce a diffusion-fueled SFR model termed $textID3$. $textID3$ employs an ID-preserving loss to generate diverse yet identity-consistent facial appearances.
  arXiv  Detail & Related papers  (2024-09-26T06:46:40Z)
• SDeMorph: Towards Better Facial De-morphing from Single Morph [0.0]
  Face Recognition Systems (FRS) are vulnerable to morph attacks. Current Morph Attack Detection (MAD) can detect the morph but are unable to recover the identities used to create the morph. We propose SDeMorph, a novel de-morphing method that is reference-free and recovers the identities of bona fides.
  arXiv  Detail & Related papers  (2023-08-22T13:46:12Z)
• DVG-Face: Dual Variational Generation for Heterogeneous Face Recognition [85.94331736287765]
  We formulate HFR as a dual generation problem, and tackle it via a novel Dual Variational Generation (DVG-Face) framework. We integrate abundant identity information of large-scale visible data into the joint distribution. Massive new diverse paired heterogeneous images with the same identity can be generated from noises.
  arXiv  Detail & Related papers  (2020-09-20T09:48:24Z)
• On the Influence of Ageing on Face Morph Attacks: Vulnerability and Detection [12.936155415524937]
  Face Recognition Systems (FRS) are widely deployed in border control applications. The face morphing process uses the images from multiple data subjects and performs an image blending operation to generate a morphed image of high quality. The generated morphed image exhibits similar visual characteristics corresponding to the biometric characteristics of the data subjects that contributed to the composite image.
  arXiv  Detail & Related papers  (2020-07-06T12:32:41Z)
• Face Anti-Spoofing with Human Material Perception [76.4844593082362]
  Face anti-spoofing (FAS) plays a vital role in securing the face recognition systems from presentation attacks. We rephrase face anti-spoofing as a material recognition problem and combine it with classical human material perception. We propose the Bilateral Convolutional Networks (BCN), which is able to capture intrinsic material-based patterns.
  arXiv  Detail & Related papers  (2020-07-04T18:25:53Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.