CVMay 14, 2025

FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models

arXiv:2505.09415v25 citationsh-index: 5Has Code
Originality Highly original
AI Analysis

This work addresses the need for explainable and robust face anti-spoofing systems to protect facial recognition technologies from attacks, representing a novel application of MLLMs rather than an incremental improvement.

The authors tackled the problem of face anti-spoofing (FAS) by proposing FaceShield, a multimodal large language model (MLLM) that determines face authenticity, identifies spoofing types, provides reasoning, and detects attack areas, achieving significant performance improvements over previous methods on benchmark datasets.

Face anti-spoofing (FAS) is crucial for protecting facial recognition systems from presentation attacks. Previous methods approached this task as a classification problem, lacking interpretability and reasoning behind the predicted results. Recently, multimodal large language models (MLLMs) have shown strong capabilities in perception, reasoning, and decision-making in visual tasks. However, there is currently no universal and comprehensive MLLM and dataset specifically designed for FAS task. To address this gap, we propose FaceShield, a MLLM for FAS, along with the corresponding pre-training and supervised fine-tuning (SFT) datasets, FaceShield-pre10K and FaceShield-sft45K. FaceShield is capable of determining the authenticity of faces, identifying types of spoofing attacks, providing reasoning for its judgments, and detecting attack areas. Specifically, we employ spoof-aware vision perception (SAVP) that incorporates both the original image and auxiliary information based on prior knowledge. We then use an prompt-guided vision token masking (PVTM) strategy to random mask vision tokens, thereby improving the model's generalization ability. We conducted extensive experiments on three benchmark datasets, demonstrating that FaceShield significantly outperforms previous deep learning models and general MLLMs on four FAS tasks, i.e., coarse-grained classification, fine-grained classification, reasoning, and attack localization. Our instruction datasets, protocols, and codes will be released at https://github.com/Why0912/FaceShield.

Foundations

The foundational work for this paper's niche, ranked by how specifically the neighbourhood builds on it — not by global fame.

Your Notes