English
Related papers

Related papers: Towards Prompt-robust Face Privacy Protection via …

200 papers

Talking-head generation has advanced rapidly with diffusion-based generative models, but training usually depends on centralized face-video and speech datasets, raising major privacy concerns. The problem is more acute for personalized…

Cryptography and Security · Computer Science 2026-04-10 Soumya Mazumdar , Vineet Kumar Rakesh , Tapas Samanta

Latent diffusion models can be used as a powerful augmentation method to artificially extend datasets for enhanced training. To the human eye, these augmented images look very different to the originals. Previous work has suggested to use…

Computer Vision and Pattern Recognition · Computer Science 2025-04-09 Julian Lorenz , Katja Ludwig , Valentin Haug , Rainer Lienhart

Security concerns surrounding text-to-image diffusion models have driven researchers to unlearn inappropriate concepts through fine-tuning. Recent fine-tuning methods typically align the prediction distributions of unsafe prompts with those…

Machine Learning · Computer Science 2025-01-03 Mengnan Zhao , Lihe Zhang , Xingyi Yang , Tianhang Zheng , Baocai Yin

Face anti-spoofing (FAS) plays a vital role in preventing face recognition (FR) systems from presentation attacks. Nowadays, FAS systems face the challenge of domain shift, impacting the generalization performance of existing FAS methods.…

Computer Vision and Pattern Recognition · Computer Science 2024-09-16 Xinxu Ge , Xin Liu , Zitong Yu , Jingang Shi , Chun Qi , Jie Li , Heikki Kälviäinen

Recent works reveal that adversarial augmentation benefits the generalization of neural networks (NNs) if used in an appropriate manner. In this paper, we introduce Temporal Adversarial Augmentation (TA), a novel video augmentation…

Computer Vision and Pattern Recognition · Computer Science 2023-05-16 Jinhao Duan , Quanfu Fan , Hao Cheng , Xiaoshuang Shi , Kaidi Xu

Many computer vision systems require users to upload image features to the cloud for processing and storage. These features can be exploited to recover sensitive information about the scene or subjects, e.g., by reconstructing the…

Computer Vision and Pattern Recognition · Computer Science 2021-03-31 Mihai Dusmanu , Johannes L. Schönberger , Sudipta N. Sinha , Marc Pollefeys

In an era where personal photos are easily leaked and collected, face de-identification is a crucial method for protecting identity privacy. However, current face de-identification techniques face challenges in preserving attribute details…

Computer Vision and Pattern Recognition · Computer Science 2025-05-02 Mingrui Zhu , Dongxin Chen , Xin Wei , Nannan Wang , Xinbo Gao

Vision Language Models (VLMs) have shown remarkable capabilities in multimodal understanding, yet their susceptibility to perturbations poses a significant threat to their reliability in real-world applications. Despite often being…

Computer Vision and Pattern Recognition · Computer Science 2025-06-05 Jia Fu , Yongtao Wu , Yihang Chen , Kunyu Peng , Xiao Zhang , Volkan Cevher , Sepideh Pashami , Anders Holst

Most existing Face Forgery Detection (FFD) models assume access to raw face images. In practice, under a client-server framework, private facial data may be intercepted during transmission or leaked by untrusted servers. Previous privacy…

Computer Vision and Pattern Recognition · Computer Science 2026-03-04 Guoqing Ma , Xun Lin , Hui Ma , Ajian Liu , Yizhong Liu , Wenzhong Tang , Shan Yu , Chenqi Kong , Yi Yu

The rapid advancement of generative artificial intelligence has enabled the creation of highly realistic fake facial images, posing serious threats to personal privacy and the integrity of online information. Existing deepfake detection…

Computer Vision and Pattern Recognition · Computer Science 2025-12-29 Huanhuan Yuan , Yang Ping , Zhengqin Xu , Junyi Cao , Shuai Jia , Chao Ma

Face recognition (FR) models can be easily fooled by adversarial examples, which are crafted by adding imperceptible perturbations on benign face images. The existence of adversarial face examples poses a great threat to the security of…

Computer Vision and Pattern Recognition · Computer Science 2023-07-20 Fengfan Zhou , Hefei Ling , Yuxuan Shi , Jiazhong Chen , Zongyi Li , Ping Li

Personalized AI applications such as DreamBooth enable the generation of customized content from user images, but also raise significant privacy concerns, particularly the risk of facial identity leakage. Recent defense mechanisms like…

Computer Vision and Pattern Recognition · Computer Science 2025-11-14 Zhen Chen , Yi Zhang , Xiangyu Yin , Chengxuan Qin , Xingyu Zhao , Xiaowei Huang , Wenjie Ruan

Deep learning models are vulnerable to adversarial examples and make incomprehensible mistakes, which puts a threat on their real-world deployment. Combined with the idea of adversarial training, preprocessing-based defenses are popular and…

Computer Vision and Pattern Recognition · Computer Science 2021-10-18 Tao Bai , Jun Zhao , Lanqing Guo , Bihan Wen

The increasing reliance on diffusion models for generating synthetic images has amplified concerns about the unauthorized use of personal data, particularly facial images, in model training. In this paper, we introduce a novel identity…

Computer Vision and Pattern Recognition · Computer Science 2024-10-15 Jayneel Vora , Aditya Krishnan , Nader Bouacida , Prabhu RV Shankar , Prasant Mohapatra

The diffusion-based adversarial purification methods attempt to drown adversarial perturbations into a part of isotropic noise through the forward process, and then recover the clean images through the reverse process. Due to the lack of…

Computer Vision and Pattern Recognition · Computer Science 2025-12-09 Gaozheng Pei , Ke Ma , Yingfei Sun , Qianqian Xu , Qingming Huang

Recently, some research show that deep neural networks are vulnerable to the adversarial attacks, the well-trainned samples or patches could be used to trick the neural network detector or human visual perception. However, these adversarial…

Computer Vision and Pattern Recognition · Computer Science 2023-12-29 Xianyi Chen , Fazhan Liu , Dong Jiang , Kai Yan

Deep Neural Networks have been shown to be vulnerable to adversarial images. Conventional attacks strive for indistinguishable adversarial images with strictly restricted perturbations. Recently, researchers have moved to explore…

Computer Vision and Pattern Recognition · Computer Science 2023-06-19 Zhengyu Zhao , Zhuoran Liu , Martha Larson

Adversarial fine-tuning methods enhance adversarial robustness via fine-tuning the pre-trained model in an adversarial training manner. However, we identify that some specific latent features of adversarial samples are confused by…

Computer Vision and Pattern Recognition · Computer Science 2024-12-11 Nuoyan Zhou , Dawei Zhou , Decheng Liu , Nannan Wang , Xinbo Gao

In-context diffusion models allow users to modify images with remarkable ease and realism. However, the same power raises serious privacy concerns: personal images can be easily manipulated for identity impersonation, misinformation, or…

Computer Vision and Pattern Recognition · Computer Science 2025-12-22 Linghui Shen , Mingyue Cui , Xingyi Yang

The rapid advancement of diffusion models and personalization techniques has made it possible to recreate individual portraits from just a few publicly available images. While such capabilities empower various creative applications, they…

Computer Vision and Pattern Recognition · Computer Science 2026-05-29 Guanyu Wang , Kailong Wang , Yihao Huang , Mingyi Zhou , Geguang Pu , Li Li