CVMay 21, 2025

Towards Zero-Shot Differential Morphing Attack Detection with Multimodal Large Language Models

arXiv:2505.15332v14 citationsh-index: 26
Originality Incremental advance
AI Analysis

It addresses security vulnerabilities in biometric applications like passport systems, but the approach is incremental as it adapts existing LLMs to a new task.

This paper tackles the problem of detecting morphing attacks in biometric systems by applying multimodal large language models (LLMs) to differential morphing attack detection (D-MAD) for the first time with real data, showing that ChatGPT-4o outperforms Gemini in accuracy against GAN-based morphs but both models face challenges in difficult conditions.

Leveraging the power of multimodal large language models (LLMs) offers a promising approach to enhancing the accuracy and interpretability of morphing attack detection (MAD), especially in real-world biometric applications. This work introduces the use of LLMs for differential morphing attack detection (D-MAD). To the best of our knowledge, this is the first study to employ multimodal LLMs to D-MAD using real biometric data. To effectively utilize these models, we design Chain-of-Thought (CoT)-based prompts to reduce failure-to-answer rates and enhance the reasoning behind decisions. Our contributions include: (1) the first application of multimodal LLMs for D-MAD using real data subjects, (2) CoT-based prompt engineering to improve response reliability and explainability, (3) comprehensive qualitative and quantitative benchmarking of LLM performance using data from 54 individuals captured in passport enrollment scenarios, and (4) comparative analysis of two multimodal LLMs: ChatGPT-4o and Gemini providing insights into their morphing attack detection accuracy and decision transparency. Experimental results show that ChatGPT-4o outperforms Gemini in detection accuracy, especially against GAN-based morphs, though both models struggle under challenging conditions. While Gemini offers more consistent explanations, ChatGPT-4o is more resilient but prone to a higher failure-to-answer rate.

Foundations

The foundational work for this paper's niche, ranked by how specifically the neighbourhood builds on it — not by global fame.

Your Notes