Face Liveness Detection and Anti-Spoofing

A face matcher asks whether a captured face resembles an enrolled image. Presentation attack detection, or PAD, asks a different question: whether something presented at the capture device is an attack rather than a bona fide presentation. A printed portrait, another device showing a face video, a mask and appearance-altering material can create different visual cues. ISO/IEC 30107-1 defines the PAD framework but does not prescribe one sensor or claim that PAD establishes a person's identity. A successful liveness check therefore does not replace identity matching or secure capture. Some systems analyze an ordinary image or video passively. They may examine texture, reflections, depth cues or inconsistent motion. Others ask for a changing action or use additional sensing such as depth or infrared, depending on the device. A fixed blink request can sometimes be imitated by a replay; a randomized challenge raises the work for an attacker but can slow users or create accessibility problems. Security also depends on whether the application can trust that the camera stream came from the intended device. A convincing injected stream may bypass defenses aimed only at objects held in front of a lens. NIST's passive software PAD evaluation tested multiple attack types on conventional imagery and found substantial variation among algorithms. Performance on one attack instrument cannot be generalized to all unseen masks, displays or capture conditions. Test representative attacks and bona fide users under lighting, camera quality, skin-tone and accessibility conditions expected in deployment. Report attack presentations incorrectly accepted alongside genuine presentations incorrectly rejected, with thresholds and test sets disclosed. If the score is uncertain, step-up verification or a human review can be safer than treating a single frame as conclusive. PAD reduces one route to impersonation; it is not a complete fraud, privacy or identity-proofing program. Limit retention of face images, give a usable fallback and monitor new attack methods without claiming that a model can certify every image is authentic.