Pith. sign in

REVIEW 3 major objections 5 minor 144 references

Image Privacy Protection: A Survey

T0 review · 3 major / 5 minor · reviewed 2026-08-11 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read A survey maps all image privacy methods onto three domains: pixels, visual content, or features.

desk verdict A useful re-framing of image privacy protection, but the 'any scheme fits' positioning claim is undercut by the paper's own taxonomy assignments. read the letter →

arxiv 2412.15228 v1 pith:TRBEGSCN submitted 2024-12-05 cs.CR

Wenying Wen , Ziye Yuan , Yushu Zhang , Tao Wang , Xiangli Xiao , Ruoyu Zhao , Yuming Fang This is my paper · ORCID
classification cs.CR
keywords imageprivacyprotectionprivacy-sensitivedomainsdata-levelcontent-levelfeature-levelsurveyadversarialperturbationthumbnail-preservingencryption
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This survey tries to establish that the right way to organize the entire field of image privacy protection is by what part of an image is sensitive, rather than by scenario (social networks, surveillance) or by specific target (faces, medical lesions). It defines the privacy-sensitive domain as the region of the image that needs protection and argues that every protection scheme acts on one of three such domains: the pixel domain, the visual content domain, or the feature domain. On this basis it builds a three-level framework—data-level, content-level, and feature-level protection—and claims that any image privacy protection solution can find an appropriate place within it. If the framework holds, researchers and users can compare methods across different scenarios and privacy goals using a single coordinate system.

What carries the argument

The central object is the privacy-sensitive domain, defined as the region of an image that needs protection, which the paper splits into the pixel domain, the visual content domain, and the feature domain. This trichotomy does the work of a coordinate system: it claims to jointly determine the protection level (data, content, or feature) and the visual usability of the output (none, general, or high). The framework also assigns each level a secondary division—robustness versus non-robustness for data-level, local versus global objectives for content-level, and significant versus non-significant change for feature-level—so that a given scheme is located by its sensitive domain and then by its reversibility and change characteristics.

What would settle it

Exhibit a published image privacy protection scheme whose privacy-sensitive domain is neither pixels, visual content, nor features—for instance a method that protects only image metadata or only the social-graph context around an image—and show that the framework cannot place it without stretching the definition of a domain; alternatively, show a single scheme that the paper itself must assign to two different levels, which would demonstrate the trichotomy is not uniquely defined.

Watch

Extended reading notes

Core claim

The paper's central claim is that the privacy-sensitive domain is the correct core classification dimension for image privacy protection. The privacy-sensitive domain is defined as the privacy region in an image that needs protection, covering all parts that involve sensitive information, and it is categorized into three types: the pixel domain, the visual content domain, and the feature domain. These map onto three protection levels: data-level protection, which manipulates every pixel value and treats the whole image as one indivisible sensitive entity, giving no visual usability; content-level protection, which modifies selected sensitive areas (faces, license plates, buildings) while keeping the image generally usable; and feature-level protection, which alters high-level features so that machines cannot recognize them while the image stays visually natural for humans. The paper supports the framework by reviewing roughly 140 representative solutions, classifying each into the appropriate level, and stating that the framework encompasses all privacy-sensitive domains so that any image privacy protection scheme can find its classification within it.

Load-bearing premise

The framework's claim to cover any image privacy protection scheme rests on the reviewed corpus fairly representing the whole field, but the paper gives no search strategy, time window, or inclusion/exclusion criteria, and some major branches (for example differential privacy applied to images) do not appear in the review.

Editorial extensions

If this is right

  • If the framework is correct, a reader can take any existing image privacy method, locate which of the three privacy-sensitive domains it acts on, and immediately read off the expected visual usability and the broad class of techniques involved.
  • Cross-scenario comparison becomes possible: a face-masking method from social-network research and a face-encryption method from surveillance research would both sit in the content-level category, allowing researchers to transfer techniques and evaluation insights between scenarios.
  • The framework exposes gaps: because the three levels have different usability profiles, a user who needs low visual disturbance must work at the feature level, which imposes the requirement of adversarial-machine resistance.
  • The paper's own forward-looking challenges—dynamic revocable privacy, user-understandable privacy, and privacy under multimodal learning—follow from the framework's assumption that privacy objectives are fixed, predefined, and image-local rather than user-defined, time-varying, or cross-modal.
  • The survey's design principles for each level (visual invisibility, general visual usability, high visual usability; adjustable versus fixed sensitive domains; human versus machine adversaries) give new schemes a checklist for what properties they should exhibit in their level.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • A testable consequence the paper leaves implicit is that any two schemes classified in the same cell of the framework should be interchangeable in practice for a given privacy objective; one could construct a benchmark that swaps, say, content-level reversible schemes across face, license-plate, and medical-image tasks to see whether the taxonomy predicts transferability.
  • The framework focuses on the image as the unit of analysis; an extension the paper does not pursue would be to treat the privacy-sensitive domain as a continuous spectrum (e.g., partial-pixel, partial-feature hybrid schemes) rather than three discrete bins, since some modern methods combine encryption and adversarial perturbation in one pipeline.
  • The classification of encryption under both data-level (Section 3.2.1) and content-level (Section 4.2.4) suggests that the same underlying technique can be aimed at different sensitive domains depending on whether it encrypts all pixels or only selected regions—an ambiguity that a future refinement could resolve by defining the domain as what the scheme actually obscures from a specified adversary
  • If the framework were combined with a quantitative usability measure, the paper's three-level hierarchy could be turned into a design rule: choose the coarsest domain that still satisfies the adversary model, because moving from data-level to content-level to feature-level monotonically increases visual usability while narrowing the scope of what is protected.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 5 minor

Summary. The paper surveys image privacy protection techniques and organizes them by a proposed 'privacy-sensitive domain' construct, dividing methods into data-level (whole-image pixel treatment), content-level (targeted modification of visually sensitive regions), and feature-level (protection against machine extraction). It claims that this trichotomy yields a comprehensive framework and a positioning system in which any image privacy solution can be classified, and it applies the framework to roughly 140 papers. The survey also discusses design principles and future directions such as dynamic revocable protection and privacy under multimodal learning.

Significance. If the framework's classification were well-defined, the survey would provide a useful cross-scenario view of image privacy protection, complementing existing scenario-specific and objective-specific surveys. The paper's strengths include the breadth of recent literature covered, explicit tabular summaries of methods, and a clear discussion of visual-usability trade-offs. However, the central contribution is a taxonomy, and for a taxonomy the uniqueness and exhaustiveness of the classification is the standard of correctness. The observed inconsistencies make the current version unable to support the 'positioning system' claim.

major comments (3)
  1. [§2.2, §3.2.1, §4.2.4] The central claim (Section 2.2, contribution 3 in Section 1.4) is that every image privacy protection solution can find its appropriate classification in the data/content/feature trichotomy. This requires the privacy-sensitive-domain criterion to be a well-defined, deterministic partition of methods. The paper does not supply such a partition. Encryption is classified as data-level when it covers the whole image (Section 3.2.1, refs [17]-[26]) and as content-level when it covers only selected regions (Section 4.2.4, refs [49]-[56]); the stated difference is 'does not involve comprehensively encrypting the entire image... encrypting only select pixels,' i.e., scope and visual usability, not the domain being protected. Similarly, adversarial perturbation appears as a data-level irreversibility scheme (Section 3.4.2, refs [44]-[45]) and as the core feature-level approach (Section 5.2.1). Face pixelation simultaneously modifies pixels, changes visible content, and suppresses face-recognition features, and no rule is given for choosing a primary domain in such cases. The exhaustiveness/uniqueness claim is therefore unsupported as stated.
  2. [Abstract; §1.4] The survey calls itself systematic (abstract) but provides no search strategy, time window, or inclusion/exclusion criteria for the reviewed corpus. The selection appears strongly skewed toward the authors' own research: the TPE line [66]-[77] is reviewed at length, and the authors' works appear as [40], [68]-[77], [90], [94], [104], [116], [118], [119], among others, while major branches such as differential privacy for image release and image-specific federated learning are absent. Because the framework's universal claim ('any image privacy protection solution') depends on the reviewed corpus being representative, the missing documentation of the selection process is a load-bearing gap.
  3. [§1.1, §2.2, §6.3] The framework claims to cover various privacy objectives (§2.2), and Section 1.1 defines contextual privacy as one of the three core privacy categories. Yet the taxonomy includes no category for methods that target cross-modal inference, and the only substantive treatment of such threats appears in the challenges section (§6.3). The data-level design principles assert that full encryption prevents contextual correlation (§3.5), but no reviewed method is analyzed from this angle. This gap is distinct from the non-uniqueness problem: even a well-defined trichotomy would not cover the stated objective set.
minor comments (5)
  1. [§3.1, §4.1, §5.1] The word 'abilitys' is used in Sections 3.1, 4.1, and 5.1; it should read 'abilities'.
  2. [Abstract; §2] The abstract says the review is 'based on privacy protection goals', but Section 2 uses 'privacy-sensitive domain' as the core classification dimension; these two framings should be reconciled.
  3. [§2.1] The definition of 'privacy-sensitive domain' as 'the privacy region in an image' is narrower than its use as a method-level classification; the relationship between the region and the method should be clarified.
  4. [Header] The header claims an ACM format of August 2018 and © 2018, while the manuscript and references are from 2024; the template date should be corrected.
  5. [Tables 3, 5, 6] The notation in Tables 3 and 5-6 ('#', 'G #', blank cells) is difficult to parse; a legend with explicit check marks and clearly defined abbreviations would make the tables usable as evidence.

Circularity Check

0 steps flagged · score 0.0 of 10

No circular derivation: the survey's taxonomy is definitional and the review is self-contained; double assignments are consistency issues, not circularity.

full rationale

The paper is a survey; there are no equations, fitted parameters, or derived predictions whose outputs could coincide with inputs. The central claim is that the 'privacy-sensitive domain' trichotomy (pixel, visual content, feature) supports a framework in which 'any image privacy protection solution can find its appropriate classification' (Sections 2.1-2.2). This is a definitional taxonomy, not a derived result: the categories are stipulated, and the reviewed methods are then placed into them. Because no empirical quantity is predicted from the framework, there is no self-definitional reduction. The framework's exhaustiveness is asserted rather than proven, and the paper's own assignments are not fully consistent (encryption appears at both data-level §3.2.1 and content-level §4.2.4; adversarial perturbation at both data-level §3.4.2 and feature-level §5.2.1). That is a boundary/consistency problem relevant to correctness, but it is not circular reasoning. The heavy self-citation (TPE line [68]-[77], and items [40], [90], [94], [104], [116], [118], [119]) documents the authors' own published algorithms; these works are externally published and independently accessible, and no load-bearing argument in the survey rests solely on the authority of those citations. The cited 'latest review' [144] is from the same group but is used only as a pointer for future discussion, not to justify the framework. No uniqueness theorem or ansatz is imported from self-citations. Therefore the paper contains no significant circularity; score 0.

Assumptions & free parameters 0 free parameters · 4 assumptions · 1 invented entities

The framework rests on three unproven organizational premises: the borrowed contextual/observable/machine privacy taxonomy (Section 1.1), the exhaustiveness and exclusivity of the pixel/content/feature domain trichotomy (Section 2.1), and the suitability of reversibility and robustness as the cross-cutting comparison axes (Sections 3.1, 4.1, 5.1). The paper contributes no free parameters or empirical measurements; the single invented analytical construct is 'privacy-sensitive domain,' which has no external falsifiable handle and is validated only by the survey's own coverage claims.

assumptions (4)
  • domain assumption Privacy decomposes into contextual, observable, and machine privacy (following Liu et al. [8])
    Adopted in Section 1.1 as the conceptual foundation; the framework's three protection levels are implicitly mapped onto this taxonomy, so a wrong decomposition weakens the framework's foundations.
  • ad hoc to paper Every image privacy protection scheme operates in one (or more) of three exhaustive privacy-sensitive domains: pixel, visual content, and feature
    Defined in Section 2.1 as the core classification dimension; no independent evidence is given that the trichotomy is exhaustive or exclusive, and the paper's own dual placement of encryption (Sections 3.2.1 and 4.2.4) suggests the domains overlap.
  • domain assumption Reversibility and robustness are the appropriate cross-cutting attributes for comparing schemes at every level
    Used in Sections 3.1, 4.1, and 5.1 to split each category; alternative axes (utility, threat model, computational cost) are mentioned in Section 6 but not integrated.
  • ad hoc to paper The reviewed corpus of roughly 140 papers is representative of the full field
    No search or inclusion methodology is stated anywhere in Sections 3-5; the selection is presented as 'representative solutions' without justification, and major branches (differential privacy, federated learning) are absent.
invented entities (1)
  • privacy-sensitive domain
    purpose: The core classification attribute that assigns any image privacy protection scheme to data-level, content-level, or feature-level protection
    An analytical construct defined in Section 2.1 with no external falsifiable handle; its validity is judged only by the survey's internal coverage claims, so it functions as an invented lens rather than an observed quantity.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Image Privacy Protection: A Survey." pith.science (2026). https://pith.science/paper/TRBEGSCN

@misc{pith2026241215228,
  author       = {Pith},
  title        = {Pith review of: Image Privacy Protection: A Survey},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/TRBEGSCN}},
  note         = {Machine review of arXiv:2412.15228}
}
read the original abstract

Images serve as a crucial medium for communication, presenting information in a visually engaging format that facilitates rapid comprehension of key points. Meanwhile, during transmission and storage, they contain significant sensitive information. If not managed properly, this information may be vulnerable to exploitation for personal gain, potentially infringing on privacy rights and other legal entitlements. Consequently, researchers continue to propose some approaches for preserving image privacy and publish reviews that provide comprehensive and methodical summaries of these approaches. However, existing reviews tend to categorize either by specific scenarios, or by specific privacy objectives. This classification somewhat restricts the reader's ability to grasp a holistic view of image privacy protection and poses challenges in developing a total understanding of the subject that transcends different scenarios and privacy objectives. Instead of examining image privacy protection from a single aspect, it is more desirable to consider user needs for a comprehensive understanding. To fill this gap, we conduct a systematic review of image privacy protection approaches based on privacy protection goals. Specifically, we define the attribute known as privacy sensitive domains and use it as the core classification dimension to construct a comprehensive framework for image privacy protection that encompasses various scenarios and privacy objectives. This framework offers a deep understanding of the multi-layered aspects of image privacy, categorizing its protection into three primary levels: data-level, content-level, and feature-level. For each category, we analyze the main approaches and features of image privacy protection and systematically review representative solutions. Finally, we discuss the challenges and future directions of image privacy protection.

Figures

Figures reproduced from arXiv: 2412.15228 by the authors.

Figure 1
Figure 1. Differences in privacy requirements among different individuals. [PITH_FULL_IMAGE:figures/full_fig_p005_1.png] view at source ↗
Figure 2
Figure 2. Different categories of image privacy protection. [PITH_FULL_IMAGE:figures/full_fig_p006_2.png] view at source ↗
Figure 3
Figure 3. A framework of image privacy protection. [PITH_FULL_IMAGE:figures/full_fig_p007_3.png] view at source ↗
Figures from the paper (3 more)
Figure 4
Figure 4. Figure 4: Overview of the data-level image privacy protection. [PITH_FULL_IMAGE:figures/full_fig_p008_4.png]
Figure 5
Figure 5. Figure 5: Overview of the content-level image privacy protection. [PITH_FULL_IMAGE:figures/full_fig_p014_5.png]
Figure 6
Figure 6. Figure 6: Overview of the feature-level image privacy protection. [PITH_FULL_IMAGE:figures/full_fig_p021_6.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

144 extracted references · 75 canonical work pages

  1. [68]

    Tpe2: Three-pixel exact thumbnail-preserving image encryption

    Ruoyu Zhao, Yushu Zhang, Xiangli Xiao, Xi Ye, and Rushi Lan. Tpe2: Three-pixel exact thumbnail-preserving image encryption. Signal Processing, 183:108019, 2021

    2021

  2. [77]

    TPE-DF: Thumbnail preserving encryption via dual-2DCS fusion

    Wenying Wen, Qiyu Jiang, Haigang Huang, Yushu Zhang, and Yuming Fang. TPE-DF: Thumbnail preserving encryption via dual-2DCS fusion. IEEE Signal Processing Letters , 31:1039–1043, 2024

    work page 2024

  3. [40]

    Once-for-all: Efficient visual face privacy protection via person-specific veils

    Zixuan Yang, Yushu Zhang, Tao Wang, Zhongyun Hua, Zhihua Xia, and Jian Weng. Once-for-all: Efficient visual face privacy protection via person-specific veils. In Proceedings of the 32nd ACM International Conference on Multimedia , pages 7705–7713, 2024

    2024

  4. [90]

    PPM-SEM: A privacy-preserving mechanism for sharing electronic patient records and medical images in telemedicine.IEEE Transactions on Multimedia, 26:5795–5806, 2024

    Wenying Wen, Ziye Yuan, Shuren Qi, Yushu Zhang, and Yuming Fang. PPM-SEM: A privacy-preserving mechanism for sharing electronic patient records and medical images in telemedicine.IEEE Transactions on Multimedia, 26:5795–5806, 2024

    work page 2024

  5. [94]

    PRO-Face C: Privacy-preserving recognition of obfuscated face via feature compensation

    Lin Yuan, Wu Chen, Xiao Pu, Yan Zhang, Hongbo Li, Yushu Zhang, Xinbo Gao, and Touradj Ebrahimi. PRO-Face C: Privacy-preserving recognition of obfuscated face via feature compensation. IEEE Transactions on Information Forensics and Security, 19:4930–4944, 2024

    work page 2024

  6. [104]

    RAPP: Reversible privacy preservation for various face attributes

    Yushu Zhang, Tao Wang, Ruoyu Zhao, Wenying Wen, and Youwen Zhu. RAPP: Reversible privacy preservation for various face attributes. IEEE Transactions on Information Forensics and Security , 18:3074–3087, 2023

    work page 2023

  7. [116]

    Identifiable face privacy protection via virtual identity transformation

    Tao Wang, Yushu Zhang, Ruoyu Zhao, Wenying Wen, and Rushi Lan. Identifiable face privacy protection via virtual identity transformation. IEEE Signal Processing Letters , 30:773–777, 2023

    work page 2023

  8. [118]

    Reversible gender privacy enhancement via adversarial perturbations

    Yiyi Xie, Yuqian Zhou, Tao Wang, Wenying Wen, Shuang Yi, and Yushu Zhang. Reversible gender privacy enhancement via adversarial perturbations. Neural Networks, 172(C), 2024

    work page 2024

  9. [119]

    RAE-VWP: A reversible adversarial example- based privacy and copyright protection method of medical images for internet of medical things

    Zhen Chen, Xiuli Chai, Zhihua Gan, Binjie Wang, and Yushu Zhang. RAE-VWP: A reversible adversarial example- based privacy and copyright protection method of medical images for internet of medical things. IEEE Internet of Things Journal, 11(11):20757–20768, 2024

    work page 2024

  10. [144]

    Visual content privacy protection: A survey

    Ruoyu Zhao, Yushu Zhang, Tao Wang, Wenying Wen, Yong Xiang, and Xiaochun Cao. Visual content privacy protection: A survey. arXiv preprint arXiv:2303.16552, 2023. J. ACM, Vol. 37, No. 4, Article 111. Publication date: August 2018

    arXiv 2023

  11. [17]

    Medical image encryption based on josephus scrambling and dynamic cross-diffusion for patient privacy security

    Zezong Zhang, Jianeng Tang, Feng Zhang, Tingting Huang, and Mingsheng Lu. Medical image encryption based on josephus scrambling and dynamic cross-diffusion for patient privacy security. IEEE Transactions on Circuits and Systems for Video Technology, 34(10):9250–9263, 2024

    2024

  12. [26]

    Jpeg image encryption with DC rotation and undivided RSV-based AC group permutation

    Yuan Yuan, Hongjie He, Yaolin Yang, Hadi Amirpour, Christian Timmerer, and Fan Chen. Jpeg image encryption with DC rotation and undivided RSV-based AC group permutation. IEEE Transactions on Multimedia , 2023. doi: 10.1109/TMM.2023.3336236

    arXiv 2023

  13. [49]

    Pico: Privacy through invertible cryptographic obscuration

    Terrance Edward Boult. Pico: Privacy through invertible cryptographic obscuration. InComputer Vision for Interactive and Intelligent Environment (CVIIE’05) , pages 27–38, 2005

    2005

  14. [56]

    Reversible privacy-preserving recognition

    Zhengxin You, Sheng Li, Zhenxing Qian, and Xinpeng Zhang. Reversible privacy-preserving recognition. In 2021 IEEE International Conference on Multimedia and Expo (ICME) , pages 1–6, 2021

    2021

  15. [44]

    Recoverable privacy-preserving image classification through noise-like adversarial examples

    Jun Liu, Jiantao Zhou, Jinyu Tian, and Weiwei Sun. Recoverable privacy-preserving image classification through noise-like adversarial examples. ACM Transactions on Multimedia Computing, Communications and Applications , 20(7):1–27, 2024

    2024

  16. [45]

    Hiding visual information via obfuscating adversarial perturbations

    Zhigang Su, Dawei Zhou, Nannan Wang, Decheng Liu, Zhen Wang, and Xinbo Gao. Hiding visual information via obfuscating adversarial perturbations. In Proceedings of the IEEE/CVF International Conference on Computer Vision , pages 4356–4366, 2023

    2023

  17. [66]

    Thumbnail-preserving encryption for JPEG

    Charles V Wright, Wu-chi Feng, and Feng Liu. Thumbnail-preserving encryption for JPEG. In Proceedings of the 3rd ACM Workshop on Information Hiding and Multimedia Security , pages 141–146, 2015

    2015

Show all 144 references
  1. [1]

    Metaphysics, volume 1

    Aristotle. Metaphysics, volume 1. 1933. J. ACM, Vol. 37, No. 4, Article 111. Publication date: August 2018. 111:30 Wen et al

    1933

  2. [2]

    Aesthetics and emotions in images

    Dhiraj Joshi, Ritendra Datta, Elena Fedorovskaya, Quang-Tuan Luong, James Z Wang, Jia Li, and Jiebo Luo. Aesthetics and emotions in images. IEEE Signal Processing Magazine , 28(5):94–115, 2011

    2011

  3. [3]

    Research update: Conveying meaning in written texts

    Martha L King and Victor M Rentel. Research update: Conveying meaning in written texts. Language Arts, 58(6):721– 728, 1981

    1981

  4. [4]

    Infographics: The power of visual storytelling

    Jason Lankow, Josh Ritchie, and Ross Crooks. Infographics: The power of visual storytelling . John Wiley & Sons, 2012

    2012

  5. [5]

    Ways of seeing

    John Berger. Ways of seeing. Penguin uK, 2008

    2008

  6. [6]

    What people look at in multimodal online dating profiles: How pictorial and textual cues affect impression formation.Communication Research, 49(6):863– 890, 2022

    Tess Van der Zanden, Maria BJ Mos, Alexander P Schouten, and Emiel J Krahmer. What people look at in multimodal online dating profiles: How pictorial and textual cues affect impression formation.Communication Research, 49(6):863– 890, 2022

    2022

  7. [7]

    A review of WBAN intelligent system connections for remote control of patients with COVID-19

    Suhad Ibraheem Kadhem, Intisar AM Al Sayed, Thuria Saad Znad, Jamal Fadhil Tawfeq, Ahmed Dheyaa Radhi, Hassan Muwafaq Gheni, and Israa Al-Barazanchi. A review of WBAN intelligent system connections for remote control of patients with COVID-19. In The International Conference o...

    2022

  8. [8]

    Privacy intelligence: A survey on image privacy in online social networks

    Chi Liu, Tianqing Zhu, Jun Zhang, and Wanlei Zhou. Privacy intelligence: A survey on image privacy in online social networks. ACM Computing Surveys (CSUR), 55(8):1–35, 2022

    2022

  9. [9]

    Cloud-assisted speech and face recognition framework for health monitoring

    M Shamim Hossain and Ghulam Muhammad. Cloud-assisted speech and face recognition framework for health monitoring. Mobile Networks and Applications, 20:391–399, 2015

    2015

  10. [10]

    Deep neural networks are more accurate than humans at detecting sexual orientation from facial images

    Yilun Wang and Michal Kosinski. Deep neural networks are more accurate than humans at detecting sexual orientation from facial images. Journal of Personality and Social Psychology , 114(2):246, 2018

    2018

  11. [11]

    A review of privacy decision-making mechanisms in online social networks

    José Alemany, E Del Val, and Ana García-Fornes. A review of privacy decision-making mechanisms in online social networks. ACM Computing Surveys (CSUR), 55(2):1–32, 2022

    2022

  12. [12]

    Visual privacy protection methods: A survey

    José Ramón Padilla-López, Alexandros Andre Chaaraoui, and Francisco Flórez-Revuelta. Visual privacy protection methods: A survey. Expert Systems with Applications, 42(9):4177–4195, 2015

    2015

  13. [13]

    Security and privacy protection in visual sensor networks: A survey

    Thomas Winkler and Bernhard Rinner. Security and privacy protection in visual sensor networks: A survey. ACM Computing Surveys (CSUR), 47(1):1–42, 2014

    2014

  14. [14]

    Presentation-level privacy protection techniques for automated face recognition—a survey

    Md Rezwan Hasan, Richard Guest, and Farzin Deravi. Presentation-level privacy protection techniques for automated face recognition—a survey. ACM Computing Surveys (CSUR), 55(13s):1–27, 2023

    2023

  15. [15]

    Privacy–enhancing face biometrics: A comprehensive survey

    Blaž Meden, Peter Rot, Philipp Terhörst, Naser Damer, Arjan Kuijper, Walter J Scheirer, Arun Ross, Peter Peer, and Vitomir Štruc. Privacy–enhancing face biometrics: A comprehensive survey. IEEE Transactions on Information Forensics and Security, 16:4147–4183, 2021

    2021

  16. [16]

    Secure, privacy-preserving and federated machine learning in medical imaging

    Georgios A Kaissis, Marcus R Makowski, Daniel Rückert, and Rickmer F Braren. Secure, privacy-preserving and federated machine learning in medical imaging. Nature Machine Intelligence, 2(6):305–311, 2020

    2020

  17. [18]

    A novel biometric inspired robust security framework for medical images

    Satendra Pal Singh and Gaurav Bhatnagar. A novel biometric inspired robust security framework for medical images. IEEE Transactions on Knowledge and Data Engineering , 33(3):810–823, 2019

    2019

  18. [19]

    Efficient privacy-preserving forensic method for camera model identification

    Yanli Chen, Tong Qiao, Florent Retraint, and Gengran Hu. Efficient privacy-preserving forensic method for camera model identification. IEEE Transactions on Information Forensics and Security , 17:2378–2393, 2022

    2022

  19. [20]

    Cfb-then-ecb mode-based image encryption for an efficient correction of noisy encrypted images

    Pauline Puteaux and William Puech. Cfb-then-ecb mode-based image encryption for an efficient correction of noisy encrypted images. IEEE Transactions on Circuits and Systems for Video Technology , 31(9):3338–3351, 2020

    2020

  20. [21]

    Double parameters fractal sorting matrix and its application in image encryption

    Yongjin Xian, Xingyuan Wang, and Lin Teng. Double parameters fractal sorting matrix and its application in image encryption. IEEE Transactions on Circuits and Systems for Video Technology , 32(6):4028–4037, 2021

    2021

  21. [22]

    Irreducible fractal structures for moran type theorems

    MA Sánchez-Granero and M Fernández-Martínez. Irreducible fractal structures for moran type theorems. Chaos, Solitons & Fractals, 119:29–36, 2019

    2019

  22. [23]

    A novel image encryption algorithm based on exponent-cosine chaotic mapping

    Sicong Liu, Chunbiao Li, and Yongxing LI. A novel image encryption algorithm based on exponent-cosine chaotic mapping. Journal of Electronics Information Technology , 44(5):1754–1762, 2022

    2022

  23. [24]

    Image encryption algorithm based on the matrix semi-tensor product with a compound secret key produced by a boolean network

    Xingyuan Wang and Suo Gao. Image encryption algorithm based on the matrix semi-tensor product with a compound secret key produced by a boolean network. Information Sciences, 539:195–214, 2020

    2020

  24. [25]

    Exploiting flexible and secure cryptographic technique for multi-dimensional image based on graph data structure and three-input majority gate

    Yuwen Sha, Jun Mou, Santo Banerjee, and Yushu Zhang. Exploiting flexible and secure cryptographic technique for multi-dimensional image based on graph data structure and three-input majority gate. IEEE Transactions on Industrial Informatics, 20(3):3835–3846, 2024

    2024

  25. [27]

    Robust coding of encrypted images via 2D compressed sensing.IEEE Transactions on Multimedia, 23:2656–2671, 2020

    Bo Zhang, Di Xiao, and Yong Xiang. Robust coding of encrypted images via 2D compressed sensing.IEEE Transactions on Multimedia, 23:2656–2671, 2020. J. ACM, Vol. 37, No. 4, Article 111. Publication date: August 2018. Image Privacy Protection: A Survey 111:31

    2020

  26. [28]

    Multilevel privacy preservation scheme based on compressed sensing

    Jia Liang, Di Xiao, Hui Huang, and Min Li. Multilevel privacy preservation scheme based on compressed sensing. IEEE Transactions on Industrial Informatics , 19(6):7435–7444, 2022

    2022

  27. [29]

    Exploiting semi-tensor product compressed sensing and hybrid cloud for secure medical image transmission

    Xiuli Chai, Jiangyu Fu, Zhihua Gan, Yang Lu, Yushu Zhang, and Daojun Han. Exploiting semi-tensor product compressed sensing and hybrid cloud for secure medical image transmission. IEEE Internet of Things Journal , 10(8):7380–7392, 2022

    2022

  28. [30]

    Image robust encryption algorithm based on scrambled block compressive sensing

    lan Wang, Di Xiao, Fei Wang, and Xi Shi. Image robust encryption algorithm based on scrambled block compressive sensing. Journal of Cryptologic Research , 9(2):267–283, 2022

    2022

  29. [31]

    Exploiting four-dimensional chaotic systems with dissipation and optimized logical operations for secure image compression and encryption

    Mengxin Gong, Xiuli Chai, Yang Lu, and Yushu Zhang. Exploiting four-dimensional chaotic systems with dissipation and optimized logical operations for secure image compression and encryption. IEEE Transactions on Circuits and Systems for Video Technology, 34(8):7628–7642, 2024

    2024

  30. [32]

    Color-gray multi-image hybrid compression-encryption scheme based on BP neural network and knight tour

    Xinyu Gao, Jun Mou, Santo Banerjee, and Yushu Zhang. Color-gray multi-image hybrid compression-encryption scheme based on BP neural network and knight tour. IEEE Transactions on Cybernetics , 53(8):5037–5047, 2023

    2023

  31. [33]

    A customized deep network based encryption- then-lossy-compression scheme of color images achieving arbitrary compression ratios

    Chuntao Wang, Juan Hu, Shan Bian, Jiangqun Ni, and Xinpeng Zhang. A customized deep network based encryption- then-lossy-compression scheme of color images achieving arbitrary compression ratios. IEEE Transactions on Circuits and Systems for Video Technology , 33(8):4322–4336, 2023

    2023

  32. [34]

    Multiple image encryption of high robustness in gyrator transform domain

    Feng Wang, Zhuhong Shao, Yunfei Wang, Qijun Yao, and Xilin Liu. Multiple image encryption of high robustness in gyrator transform domain. Journal of Image and Graphics , 25(7):1366–1379, 2020

    2020

  33. [35]

    Jpeg image encryption with adaptive DC coefficient prediction and RS pair permutation

    Chuan Qin, Jinchuan Hu, Fengyong Li, Zhenxing Qian, and Xinpeng Zhang. Jpeg image encryption with adaptive DC coefficient prediction and RS pair permutation. IEEE Transactions on Multimedia , 25:2528–2542, 2022

    2022

  34. [36]

    Evit: Privacy-preserving image retrieval via encrypted vision transformer in cloud computing

    Qihua Feng, Peiya Li, Zhixun Lu, Chaozhuo Li, Zefang Wang, Zhiquan Liu, Chunhui Duan, Feiran Huang, Jian Weng, et al. Evit: Privacy-preserving image retrieval via encrypted vision transformer in cloud computing. IEEE Transactions on Circuits and Systems for Video Technology , ...

    2024

  35. [37]

    An accurate and privacy-preserving retrieval scheme over outsourced medical images

    Dan Zhu, Hui Zhu, Xiangyu Wang, Rongxing Lu, and Dengguo Feng. An accurate and privacy-preserving retrieval scheme over outsourced medical images. IEEE Transactions on Services Computing , 16(2):913–926, 2022

    2022

  36. [38]

    A secure image outsourcing using privacy-preserved local color layout descriptor in cloud environment

    J Anju and R Shreelekshmi. A secure image outsourcing using privacy-preserved local color layout descriptor in cloud environment. IEEE Transactions on Services Computing , 17(2):378–391, 2024

    2024

  37. [39]

    Avpmir: Adaptive verifiable privacy- preserving medical image retrieval

    Dong Li, Qingguo Lü, Xiaofeng Liao, Tao Xiang, Jiahui Wu, and Junqing Le. Avpmir: Adaptive verifiable privacy- preserving medical image retrieval. IEEE Transactions on Dependable and Secure Computing , 21(5):4637–4651, 2024

    2024

  38. [41]

    DeepEDN: A deep-learning-based image encryption and decryption network for internet of medical things

    Yi Ding, Guozheng Wu, Dajiang Chen, Ning Zhang, Linpeng Gong, Mingsheng Cao, and Zhiguang Qin. DeepEDN: A deep-learning-based image encryption and decryption network for internet of medical things. IEEE Internet of Things Journal, 8(3):1504–1518, 2020

    2020

  39. [42]

    MP-Net: A multi-center privacy-preserving network for medical image segmentation

    Enjun Zhu, Haiyu Feng, Long Chen, Yongqiang Lai, and Senchun Chai. MP-Net: A multi-center privacy-preserving network for medical image segmentation. IEEE Transactions on Medical Imaging , 43(7):2718–2729, 2024

    2024

  40. [43]

    DAPter: Preventing user data abuse in deep learning inference services

    Hao Wu, Xuejin Tian, Yuhang Gong, Xing Su, Minghao Li, and Fengyuan Xu. DAPter: Preventing user data abuse in deep learning inference services. In Proceedings of the Web Conference 2021 , pages 1017–1028, 2021. doi: 10.1145/3442381.3449907

    2021

  41. [46]

    Enforcing privacy preservation on edge cameras using lightweight video frame scrambling

    Alem Fitwi, Yu Chen, and Sencun Zhu. Enforcing privacy preservation on edge cameras using lightweight video frame scrambling. IEEE Transactions on Services Computing , 16(1):276–287, 2021

    2021

  42. [47]

    Reversible privacy protection with the capability of antiforensics

    Liyun Dou, Zichi Wang, Zhenxing Qian, and Guorui Feng. Reversible privacy protection with the capability of antiforensics. Security and Communication Networks , 2021(1), 2021

    2021

  43. [48]

    Image encryption via complementary embedding algorithm and new spatiotemporal chaotic system

    Pengbo Liu, Xingyuan Wang, and Yining Su. Image encryption via complementary embedding algorithm and new spatiotemporal chaotic system. IEEE Transactions on Circuits and Systems for Video Technology , 33(5):2506–2519, 2022

    2022

  44. [50]

    Content and privacy protection in JPEG images by reversible visual transformation

    Xin Cao, Yuxuan Huang, Hao-Tian Wu, and Yiu-ming Cheung. Content and privacy protection in JPEG images by reversible visual transformation. Applied Sciences, 10(19):6776, 2020

    2020

  45. [51]

    Aseppi: Robust privacy protection against De-Anonymization attacks

    Natacha Ruchaud and Jean-Luc Dugelay. Aseppi: Robust privacy protection against De-Anonymization attacks. In 2017 IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) , pages 1352–1359, 2017. doi: J. ACM, Vol. 37, No. 4, Article 111. Publication date: A...

    2017 doi

  46. [52]

    Multi-level privacy protection for social media based on 2D compressive sensing

    Xiaofei He, Lixiang Li, Fenghua Tong, and Haipeng Peng. Multi-level privacy protection for social media based on 2D compressive sensing. IEEE Internet of Things Journal , 11(4):6878–6892, 2024

    2024

  47. [53]

    Image privacy protection with secure JPEG transmorphing

    Lin Yuan and Touradj Ebrahimi. Image privacy protection with secure JPEG transmorphing. IET Signal Processing, 11(9):1031–1038, 2017

    2017

  48. [54]

    Image transmorphing with JPEG

    Lin Yuan and Touradj Ebrahimi. Image transmorphing with JPEG. In 2015 IEEE International Conference on Image Processing (ICIP), pages 3956–3960, 2015

    2015

  49. [55]

    Privacy-preserving photo sharing based on a secure JPEG

    Lin Yuan, Pavel Korshunov, and Touradj Ebrahimi. Privacy-preserving photo sharing based on a secure JPEG. In 2015 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) , pages 185–190, 2015

    2015

  50. [57]

    iprivacy: Image privacy protection by identifying sensitive objects via deep multi-task learning

    Jun Yu, Baopeng Zhang, Zhengzhong Kuang, Dan Lin, and Jianping Fan. iprivacy: Image privacy protection by identifying sensitive objects via deep multi-task learning. IEEE Transactions on Information Forensics and Security , 12(5):1005–1016, 2016

    2016

  51. [58]

    ZoomP3: Privacy-preserving publishing of online video conference recordings

    Yuanyi Sun, Sencun Zhu, and Yu Chen. ZoomP3: Privacy-preserving publishing of online video conference recordings. Proceedings on Privacy Enhancing Technologies , 2022:630–649, 2022

    2022

  52. [59]

    Personal privacy protection via irrelevant faces tracking and pixelation in video live streaming

    Jizhe Zhou and Chi-Man Pun. Personal privacy protection via irrelevant faces tracking and pixelation in video live streaming. IEEE Transactions on Information Forensics and Security , 16:1088–1103, 2020

    2020

  53. [60]

    Connecting pixels to privacy and utility: Automatic redaction of private information in images

    Tribhuvanesh Orekondy, Mario Fritz, and Bernt Schiele. Connecting pixels to privacy and utility: Automatic redaction of private information in images. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), June 2018

    2018

  54. [61]

    Dartblur: Privacy preservation with detection artifact suppression

    Baowei Jiang, Bing Bai, Haozhe Lin, Yu Wang, Yuchen Guo, and Lu Fang. Dartblur: Privacy preservation with detection artifact suppression. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages 16479–16488, 2023

    2023

  55. [62]

    Adaptive image anonymization in the context of image classification with neural networks

    Nadiya Shvai, Arcadi Llanza Carmona, and Amir Nakib. Adaptive image anonymization in the context of image classification with neural networks. In Proceedings of the IEEE/CVF International Conference on Computer Vision , pages 5074–5083, 2023

    2023

  56. [63]

    do you know you are tracked by photos that you didn’t take

    Joshua Morris, Sara Newman, Kannappan Palaniappan, Jianping Fan, and Dan Lin. “do you know you are tracked by photos that you didn’t take”: Large-scale location-aware multi-party image privacy protection. IEEE Transactions on Dependable and Secure Computing , 20(1):301–312, 2021

    2021

  57. [64]

    A digital mask to safeguard patient privacy

    Yahan Yang, Junfeng Lyu, Ruixin Wang, Quan Wen, Lanqin Zhao, Wenben Chen, Shaowei Bi, Jie Meng, Keli Mao, Yu Xiao, et al. A digital mask to safeguard patient privacy. Nature Medicine, 28(9):1883–1892, 2022

    2022

  58. [65]

    I know that person: Generative full body and face de-identification of people in images

    Karla Brkic, Ivan Sikiric, Tomislav Hrkac, and Zoran Kalafatic. I know that person: Generative full body and face de-identification of people in images. In 2017 IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW), pages 1319–1328, 2017

    2017

  59. [67]

    Balancing image privacy and usability with thumbnail-preserving encryption

    Kimia Tajik, Akshith Gunasekaran, Rhea Dutta, Brandon Ellis, Rakesh B Bobba, Mike Rosulek, Charles V Wright, and Wu-chi Feng. Balancing image privacy and usability with thumbnail-preserving encryption. In Network and Distributed System Security Symposium . doi: 10.14722/ndss.2...

  60. [69]

    Heterogeneous and customized cost-efficient reversible image degradation for green IoT

    Ruoyu Zhao, Yushu Zhang, Rushi Lan, Zhongyun Hua, and Yong Xiang. Heterogeneous and customized cost-efficient reversible image degradation for green IoT. IEEE Internet of Things Journal , 10(3):2630–2645, 2022

    2022

  61. [70]

    Primitively visually meaningful image encryption: A new paradigm

    Ruoyu Zhao, Yushu Zhang, Yu Nan, Wenying Wen, Xiuli Chai, and Rushi Lan. Primitively visually meaningful image encryption: A new paradigm. Information Sciences, 613:628–648, 2022

    2022

  62. [71]

    A reversible framework for efficient and secure visual privacy protection

    Yushu Zhang, Xi Ye, Xiangli Xiao, Tao Xiang, Hongwei Li, and Xiaochun Cao. A reversible framework for efficient and secure visual privacy protection. IEEE Transactions on Information Forensics and Security , 18:3334–3349, 2023

    2023

  63. [72]

    Usability enhanced thumbnail-preserving encryption based on data hiding for JPEG images

    Xi Ye, Yushu Zhang, Xiangli Xiao, Shuang Yi, and Rushi Lan. Usability enhanced thumbnail-preserving encryption based on data hiding for JPEG images. IEEE Signal Processing Letters , 30:793–797, 2023

    2023

  64. [73]

    TPE-ADE: Thumbnail-preserving encryption based on adaptive deviation embedding for JPEG images

    Xiuli Chai, Yakun Ma, Yinjing Wang, Zhihua Gan, and Yushu Zhang. TPE-ADE: Thumbnail-preserving encryption based on adaptive deviation embedding for JPEG images. IEEE Transactions on Multimedia , 26:6102–6116, 2024

    2024

  65. [74]

    Privacy-preserving TPE-based JPEG image retrieval in cloud-assisted internet of things

    Yakun Ma, Xiuli Chai, Zhihua Gan, and Yushu Zhang. Privacy-preserving TPE-based JPEG image retrieval in cloud-assisted internet of things. IEEE Internet of Things Journal , 11(3):4842–4856, 2024

    2024

  66. [75]

    HF-TPE: High-fidelity thumbnail- preserving encryption

    Yushu Zhang, Ruoyu Zhao, Xiangli Xiao, Rushi Lan, Zhe Liu, and Xinpeng Zhang. HF-TPE: High-fidelity thumbnail- preserving encryption. IEEE Transactions on Circuits and Systems for Video Technology , 32(3):947–961, 2021. J. ACM, Vol. 37, No. 4, Article 111. Publication date: Au...

    2021

  67. [76]

    F-TPE: Flexible thumbnail-preserving encryption based on multi-pixel sum-preserving encryption

    Yushu Zhang, Wentao Zhou, Ruoyu Zhao, Xinpeng Zhang, and Xiaochun Cao. F-TPE: Flexible thumbnail-preserving encryption based on multi-pixel sum-preserving encryption. IEEE Transactions on Multimedia , 25:5877–5891, 2022

    2022

  68. [78]

    Securereid: Privacy-preserving anonymization for person re-identification

    Mang Ye, Wei Shen, Junwu Zhang, Yao Yang, and Bo Du. Securereid: Privacy-preserving anonymization for person re-identification. IEEE Transactions on Information Forensics and Security , 19:2840–2853, 2024

    2024

  69. [79]

    Large-capacity image steganography based on invertible neural networks

    Shao-Ping Lu, Rong Wang, Tao Zhong, and Paul L Rosin. Large-capacity image steganography based on invertible neural networks. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages 10816–10825, 2021

    2021

  70. [80]

    Hiding images into images with real-world robustness

    Qichao Ying, Hang Zhou, Xianhan Zeng, Haisheng Xu, Zhenxing Qian, and Xinpeng Zhang. Hiding images into images with real-world robustness. In 2022 IEEE International Conference on Image Processing (ICIP) , pages 111–115, 2022

    2022

  71. [81]

    DeepMIH: Deep invertible network for multiple image hiding

    Zhenyu Guan, Junpeng Jing, Xin Deng, Mai Xu, Lai Jiang, Zhou Zhang, and Yipeng Li. DeepMIH: Deep invertible network for multiple image hiding. IEEE Transactions on Pattern Analysis and Machine Intelligence , 45(1):372–390, 2022

    2022

  72. [82]

    Exploiting fine-grained DCT representations for hiding image-level messages within JPEG images

    Junxue Yang and Xin Liao. Exploiting fine-grained DCT representations for hiding image-level messages within JPEG images. In Proceedings of the 31st ACM International Conference on Multimedia , pages 7373–7382, 2023

    2023

  73. [83]

    Purified and unified steganographic network

    Guobiao Li, Sheng Li, Zicong Luo, Zhenxing Qian, and Xinpeng Zhang. Purified and unified steganographic network. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages 27569–27578, 2024

    2024

  74. [84]

    Learning invisible markers for hidden codes in offline-to-online photography

    Jun Jia, Zhongpai Gao, Dandan Zhu, Xiongkuo Min, Guangtao Zhai, and Xiaokang Yang. Learning invisible markers for hidden codes in offline-to-online photography. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 2273–2282, 2022

    2022

  75. [85]

    Invertible image obfuscation for facial privacy protection via secure flow.IEEE Transactions on Circuits and Systems for Video Technology, 34(7):6077–6091, 2024

    Lin Yuan, Kai Liang, Xiao Pu, Yan Zhang, Jiaxu Leng, Tao Wu, Nannan Wang, and Xinbo Gao. Invertible image obfuscation for facial privacy protection via secure flow.IEEE Transactions on Circuits and Systems for Video Technology, 34(7):6077–6091, 2024

    2024

  76. [86]

    PECAM: Privacy-enhanced video streaming and analytics via securely-reversible transformation

    Hao Wu, Xuejin Tian, Minghao Li, Yunxin Liu, Ganesh Ananthanarayanan, Fengyuan Xu, and Sheng Zhong. PECAM: Privacy-enhanced video streaming and analytics via securely-reversible transformation. In Proceedings of the 27th Annual International Conference on Mobile Computing and ...

    2021

  77. [87]

    Unpaired image-to-image translation using cycle- consistent adversarial networks

    Jun-Yan Zhu, Taesung Park, Phillip Isola, and Alexei A Efros. Unpaired image-to-image translation using cycle- consistent adversarial networks. In Proceedings of the IEEE International Conference on Computer Vision , pages 2223–2232, 2017

    2017

  78. [88]

    A reliable and reversible image privacy protection based on false colors

    Serdar Çiftçi, Ahmet Oğuz Akyüz, and Touradj Ebrahimi. A reliable and reversible image privacy protection based on false colors. IEEE Transactions on Multimedia , 20(1):68–81, 2017

    2017

  79. [89]

    Reversible image visual transformation for privacy and content protection

    Hao-Tian Wu, Ruoyan Jia, Jean-Luc Dugelay, and Junhui He. Reversible image visual transformation for privacy and content protection. Multimedia Tools and Applications, 80:30863–30877, 2021

    2021

  80. [91]

    IMIH: Imperceptible medical image hiding for secure healthcare

    Ping Ping, Pan Wei, Deyin Fu, Bobiao Guo, Olano Teah Bloh, and Feng Xu. IMIH: Imperceptible medical image hiding for secure healthcare. IEEE Transactions on Dependable and Secure Computing , 21(5):4652–4667, 2024

    2024

  81. [92]

    HideMIA: Hidden wavelet mining for privacy-enhancing medical image analysis

    Xun Lin, Yi Yu, Zitong Yu, Ruohan Meng, Jiale Zhou, Ajian Liu, Yizhong Liu, Shuai Wang, Wenzhong Tang, Zhen Lei, and Alex Kot. HideMIA: Hidden wavelet mining for privacy-enhancing medical image analysis. In Proceedings of the 32nd ACM International Conference on Multimedia , p...

    2024

  82. [93]

    Privacy-preserving human activity recognition from extreme low resolution

    Michael Ryoo, Brandon Rothrock, Charles Fleming, and Hyun Jong Yang. Privacy-preserving human activity recognition from extreme low resolution. In Proceedings of the AAAI Conference on Artificial Intelligence , volume 31, 2017

    2017

  83. [95]

    Visual privacy protection in mobile image recognition using protective perturbation

    Mengmei Ye, Zhongze Tang, Huy Phan, Yi Xie, Bo Yuan, and Sheng Wei. Visual privacy protection in mobile image recognition using protective perturbation. In Proceedings of the 13th ACM Multimedia Systems Conference , pages 164–176, 2022

    2022

  84. [96]

    Cartooning for enhanced privacy in lifelogging and streaming videos

    Rakibul Hasan, Patrick Shaffer, David Crandall, Eman T Apu Kapadia, et al. Cartooning for enhanced privacy in lifelogging and streaming videos. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition Workshops, pages 29–38, 2017

    2017

  85. [97]

    Adaptive cartooning for privacy protection in camera networks

    Adám Erdélyi, Tibor Barát, Patrick Valet, Thomas Winkler, and Bernhard Rinner. Adaptive cartooning for privacy protection in camera networks. In 2014 11th IEEE international conference on advanced video and signal based J. ACM, Vol. 37, No. 4, Article 111. Publication date: Au...

    2014

  86. [98]

    Block-wise image transformation with secret key for adversarially robust defense

    MaungMaung AprilPyone and Hitoshi Kiya. Block-wise image transformation with secret key for adversarially robust defense. IEEE Transactions on Information Forensics and Security , 16:2709–2723, 2021

    2021

  87. [99]

    Universal adversarial per- turbations

    Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard. Universal adversarial per- turbations. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , pages 1765–1773, 2017

    2017

  88. [100]

    Personalized and invertible face de-identification by disentangled identity information manipulation

    Jingyi Cao, Bo Liu, Yunqian Wen, Rong Xie, and Li Song. Personalized and invertible face de-identification by disentangled identity information manipulation. In Proceedings of the IEEE/CVF International Conference on Computer Vision, pages 3334–3342, 2021

    2021

  89. [101]

    A multi-factor combinations enhanced reversible privacy protection system for facial images

    Yi-Lun Pan, Jun-Cheng Chen, and Ja-Ling Wu. A multi-factor combinations enhanced reversible privacy protection system for facial images. In 2021 IEEE International Conference on Multimedia and Expo (ICME) , pages 1–6, 2021

    2021

  90. [102]

    The UU-Net: Reversible face de-identification for visual surveillance video footage

    Hugo Proença. The UU-Net: Reversible face de-identification for visual surveillance video footage. IEEE Transactions on Circuits and Systems for Video Technology , 32(2):496–509, 2021

    2021

  91. [103]

    Riddle: Reversible and diversified de-identification with latent encryptor

    Dongze Li, Wei Wang, Kang Zhao, Jing Dong, and Tieniu Tan. Riddle: Reversible and diversified de-identification with latent encryptor. 2023

    2023

  92. [105]

    Diff-privacy: Diffusion-based face privacy protection

    Xiao He, Mingrui Zhu, Dongxin Chen, Nannan Wang, and Xinbo Gao. Diff-privacy: Diffusion-based face privacy protection. IEEE Transactions on Circuits and Systems for Video Technology , 2024. doi: 10.1109/TCSVT.2024.3449290

    2024

  93. [106]

    IdentityMask: Deep motion flow guided reversible face video de-identification

    Yunqian Wen, Bo Liu, Jingyi Cao, Rong Xie, Li Song, and Zhu Li. IdentityMask: Deep motion flow guided reversible face video de-identification. IEEE Transactions on Circuits and Systems for Video Technology , 32(12):8353–8367, 2022

    2022

  94. [107]

    Achieving privacy-preserving multi-view consistency with advanced 3D-aware face de-identification

    Jingyi Cao, Bo Liu, Yunqian Wen, Rong Xie, and Li Song. Achieving privacy-preserving multi-view consistency with advanced 3D-aware face de-identification. In Proceedings of the 5th ACM International Conference on Multimedia in Asia, pages 1–7, 2023

    2023

  95. [108]

    Divide and conquer: A two-step method for high quality face de-identification with model explainability

    Yunqian Wen, Bo Liu, Jingyi Cao, Rong Xie, and Li Song. Divide and conquer: A two-step method for high quality face de-identification with model explainability. In Proceedings of the IEEE/CVF International Conference on Computer Vision, pages 5148–5157, 2023

    2023

  96. [109]

    Anonymousnet: Natural face de-identification with measurable privacy

    Tao Li and Lei Lin. Anonymousnet: Natural face de-identification with measurable privacy. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , pages 56–65, 2019

    2019

  97. [110]

    Deepfool: A simple and accurate method to fool deep neural networks

    Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, and Pascal Frossard. Deepfool: A simple and accurate method to fool deep neural networks. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , pages 2574–2582, 2016

    2016

  98. [111]

    Ciagan: Conditional identity anonymization generative adversar- ial networks

    Maxim Maximov, Ismail Elezi, and Laura Leal-Taixé. Ciagan: Conditional identity anonymization generative adversar- ial networks. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages 5447–5456, 2020

    2020

  99. [112]

    SF-GAN: Face de-identification method without losing facial attribute information

    Yongxiang Li, Qianwen Lu, Qingchuan Tao, Xingbo Zhao, and Yanmei Yu. SF-GAN: Face de-identification method without losing facial attribute information. IEEE Signal Processing Letters , 28:1345–1349, 2021

    2021

  100. [113]

    Perceptual indistinguishability-net (pi-net): Facial image obfuscation with manipulable semantics

    Jia-Wei Chen, Li-Ju Chen, Chia-Mu Yu, and Chun-Shien Lu. Perceptual indistinguishability-net (pi-net): Facial image obfuscation with manipulable semantics. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 6478–6487, 2021

    2021

  101. [114]

    PrivacyNet: Semi-adversarial networks for multi-attribute face privacy

    Vahid Mirjalili, Sebastian Raschka, and Arun Ross. PrivacyNet: Semi-adversarial networks for multi-attribute face privacy. IEEE Transactions on Image Processing , 29:9400–9412, 2020

    2020

  102. [115]

    Infoscrub: Towards attribute privacy by targeted obfuscation

    Hui-Po Wang, Tribhuvanesh Orekondy, and Mario Fritz. Infoscrub: Towards attribute privacy by targeted obfuscation. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages 3281–3289, 2021

    2021

  103. [117]

    Privacy-Net: An adversarial approach for identity-obfuscated segmentation of medical images

    Bach Ngoc Kim, Jose Dolz, Pierre-Marc Jodoin, and Christian Desrosiers. Privacy-Net: An adversarial approach for identity-obfuscated segmentation of medical images. IEEE Transactions on Medical Imaging , 40(7):1737–1749, 2021

    2021

  104. [120]

    Adversarial thumbnail-preserving transformation for facial images based on GAN

    Wentao Zhou, Yushu Zhang, Ruoyu Zhao, Shuang Yi, and Rushi Lan. Adversarial thumbnail-preserving transformation for facial images based on GAN. IEEE Signal Processing Letters , 30:1147–1151, 2023. J. ACM, Vol. 37, No. 4, Article 111. Publication date: August 2018. Image Privac...

    2023

  105. [121]

    Self-Recoverable Adversarial Examples: A new effective protection mechanism in social networks

    Jiawei Zhang, Jinwei Wang, Hao Wang, and Xiangyang Luo. Self-Recoverable Adversarial Examples: A new effective protection mechanism in social networks. IEEE Transactions on Circuits and Systems for Video Technology , 33(2):562– 574, 2022

    2022

  106. [122]

    Towards face encryption by generating adversarial identity masks

    Xiao Yang, Yinpeng Dong, Tianyu Pang, Hang Su, Jun Zhu, Yuefeng Chen, and Hui Xue. Towards face encryption by generating adversarial identity masks. In Proceedings of the IEEE/CVF International Conference on Computer Vision , pages 3897–3907, 2021

    2021

  107. [123]

    Opom: Customized invisible cloak towards face privacy protection

    Yaoyao Zhong and Weihong Deng. Opom: Customized invisible cloak towards face privacy protection. IEEE Transactions on Pattern Analysis and Machine Intelligence , 45(3):3590–3603, 2022

    2022

  108. [124]

    Enhancing generalization of invisible facial privacy cloak via gradient accumulation

    Xuannan Liu, Yaoyao Zhong, Weihong Deng, Hongzhi Shi, Xingchen Cui, Yunfeng Yin, and Dongchao Wen. Enhancing generalization of invisible facial privacy cloak via gradient accumulation. In ICASSP 2024-2024 IEEE International Conference on Acoustics, Speech and Signal Processing...

    2024

  109. [125]

    The best protection is attack: Fooling scene text recognition with minimal pixels

    Yikun Xu, Pengwen Dai, Zekun Li, Hongjun Wang, and Xiaochun Cao. The best protection is attack: Fooling scene text recognition with minimal pixels. IEEE Transactions on Information Forensics and Security , 18:1580–1595, 2023

    2023

  110. [126]

    Protecting image privacy through adversarial perturbation

    Baoyu Liang, Chao Tong, Chao Lang, Qinglong Wang, Joel JP C Rodrigues, and Sergei Kozlov. Protecting image privacy through adversarial perturbation. Multimedia Tools and Applications, 81(24):34759–34774, 2022

    2022

  111. [127]

    Adversarial face de-identification

    Efstathios Chatzikyriakidis, Christos Papaioannidis, and Ioannis Pitas. Adversarial face de-identification. In 2019 IEEE International conference on image processing (ICIP) , pages 684–688, 2019

    2019

  112. [128]

    Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition

    Valeriia Cherepanova, Micah Goldblum, Harrison Foley, Shiyuan Duan, John Dickerson, Gavin Taylor, and Tom Goldstein. Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition. InInternational Conference on Learning Representations , 2021. doi...

    2021 doi arXiv

  113. [129]

    Anonymizing k-facial attributes via adversarial perturbations

    Saheb Chhabra, Richa Singh, Mayank Vatsa, and Gaurav Gupta. Anonymizing k-facial attributes via adversarial perturbations. page 656–662, 2018

    2018

  114. [130]

    Live face de-identification in video

    Oran Gafni, Lior Wolf, and Yaniv Taigman. Live face de-identification in video. In Proceedings of the IEEE/CVF International Conference on Computer Vision , pages 9378–9387, 2019

    2019

  115. [131]

    Scene privacy protection

    Chau Yi Li, Ali Shahin Shamsabadi, Ricardo Sanchez-Matilla, Riccardo Mazzon, and Andrea Cavallaro. Scene privacy protection. In ICASSP 2019-2019 IEEE International Conference on Acoustics, Speech and Signal Processing , pages 2502–2506, 2019

    2019

  116. [132]

    Minimum noticeable difference-based adversarial privacy preserving image generation

    Wen Sun, Jian Jin, and Weisi Lin. Minimum noticeable difference-based adversarial privacy preserving image generation. IEEE Transactions on Circuits and Systems for Video Technology , 33(3):1069–1081, 2022

    2022

  117. [133]

    Adv-watermark: A novel watermark perturbation for adversarial examples

    Xiaojun Jia, Xingxing Wei, Xiaochun Cao, and Xiaoguang Han. Adv-watermark: A novel watermark perturbation for adversarial examples. In Proceedings of the 28th ACM International Conference on Multimedia , pages 1579–1587, 2020

    2020

  118. [134]

    DF-RAP: A robust adversarial perturbation for defending against deepfakes in real-world social network scenarios

    Zuomin Qu, Zuping Xi, Wei Lu, Xiangyang Luo, Qian Wang, and Bin Li. DF-RAP: A robust adversarial perturbation for defending against deepfakes in real-world social network scenarios. IEEE Transactions on Information Forensics and Security, 19:3943–3957, 2024

    2024

  119. [135]

    LocGuard: A location privacy defender for image sharing

    Wanlun Ma, Derui Wang, Chao Chen, Sheng Wen, Gaolei Fei, and Yang Xiang. LocGuard: A location privacy defender for image sharing. IEEE Transactions on Dependable and Secure Computing , 21(6):5526–5537, 2024

    2024

  120. [136]

    Once and for All: Universal transferable adversarial perturbation against deep hashing-based facial image retrieval

    Long Tang, Dengpan Ye, Yunna Lv, Chuanxi Chen, and Yunming Zhang. Once and for All: Universal transferable adversarial perturbation against deep hashing-based facial image retrieval. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 38, pages 5136–5144, 2024

    2024

  121. [137]

    Black-box adversarial attacks on video recognition models

    Linxi Jiang, Xingjun Ma, Shaoxiang Chen, James Bailey, and Yu-Gang Jiang. Black-box adversarial attacks on video recognition models. In Proceedings of the 27th ACM International Conference on Multimedia , pages 864–872, 2019

    2019

  122. [138]

    Detecting pulse from head motions in video

    Guha Balakrishnan, Fredo Durand, and John Guttag. Detecting pulse from head motions in video. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , pages 3430–3437, 2013

    2013

  123. [139]

    PulseEdit: Editing physiological signals in facial videos for privacy protection

    Mingliang Chen, Xin Liao, and Min Wu. PulseEdit: Editing physiological signals in facial videos for privacy protection. IEEE Transactions on Information Forensics and Security , 17:457–471, 2022

    2022

  124. [140]

    Privacy-phys: Facial video-based physiological modification for privacy protection

    Zhaodong Sun and Xiaobai Li. Privacy-phys: Facial video-based physiological modification for privacy protection. IEEE Signal Processing Letters , 29:1507–1511, 2022

    2022

  125. [141]

    3D-Aware adversarial makeup generation for facial privacy protection

    Yueming Lyu, Yue Jiang, Ziwen He, Bo Peng, Yunfan Liu, and Jing Dong. 3D-Aware adversarial makeup generation for facial privacy protection. IEEE Transactions on Pattern Analysis and Machine Intelligence , 45(11):13438–13453, 2023

    2023

  126. [142]

    Clip2protect: Protecting facial privacy using text- guided makeup via adversarial latent search

    Fahad Shamshad, Muzammal Naseer, and Karthik Nandakumar. Clip2protect: Protecting facial privacy using text- guided makeup via adversarial latent search. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 20595–20605, 2023

    2023

  127. [143]

    Face image de-identification by feature space adversarial perturbation

    Hanyu Xue, Bo Liu, Xin Yuan, Ming Ding, and Tianqing Zhu. Face image de-identification by feature space adversarial perturbation. Concurrency and Computation: Practice and Experience , 35(5):e7554, 2023

    2023

Pith tools

Reviewed August 11, 2026 · model on record in the stance chip above.