Pith. sign in

REVIEW 2 cited by

DP-Image: Differential Privacy for Image Data in Feature Space

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2103.07073 v2 pith:MD57IZJT submitted 2021-03-12 cs.CR cs.CV

classification cs.CRcs.CV
keywords privacyimagesdp-imagedifferentialfeatureimagedataspace
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

The excessive use of images in social networks, government databases, and industrial applications has posed great privacy risks and raised serious concerns from the public. Even though differential privacy (DP) is a widely accepted criterion that can provide a provable privacy guarantee, the application of DP on unstructured data such as images is not trivial due to the lack of a clear qualification on the meaningful difference between any two images. In this paper, for the first time, we introduce a novel notion of image-aware differential privacy, referred to as DP-image, that can protect user's personal information in images, from both human and AI adversaries. The DP-Image definition is formulated as an extended version of traditional differential privacy, considering the distance measurements between feature space vectors of images. Then we propose a mechanism to achieve DP-Image by adding noise to an image feature vector. Finally, we conduct experiments with a case study on face image privacy. Our results show that the proposed DP-Image method provides excellent DP protection on images, with a controllable distortion to faces.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. PASS: Private Attributes Protection with Stochastic Data Substitution

    cs.LG 2025-06 conditional novelty 7.0 of 10

    PASS learns a stochastic substitution mapping that drives private-attribute inference to chance level across images, audio, and sensor data while keeping useful attributes mostly intact.

  2. End-to-End Differential Privacy in Training Deep Neural Network Classifiers

    cs.LG 2026-07 conditional novelty 6.0 of 10

    Perturbing softmax outputs with the Dirichlet mechanism during training yields input-private, label-public classifiers that beat prior differentially private training accuracy on five image benchmarks.

Pith tools