Abstract: Existing face anti-spoofing (FAS) methods have primarily focused on close-set or cross-domain settings with a few pre-defined presentation attacks (PAs). However, with the continual ...