{"total":36,"rows":[{"id":"2103.06191","title":"A Study of Face Obfuscation in ImageNet","created":"2021-03-10","cited_by_count":83,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27,"area":null},{"id":"2103.01745","title":"IdentityDP: Differential Private Identification Protection for Face Images","created":"2021-03-02","cited_by_count":24,"area":null},{"id":"2103.07073","title":"DP-Image: Differential Privacy for Image Data in Feature Space","created":"2021-03-12","cited_by_count":23,"area":null},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2211.01361","title":"My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization","created":"2022-11-02","cited_by_count":14,"area":null},{"id":"2306.05135","title":"Does Image Anonymization Impact Computer Vision Training?","created":"2023-06-08","cited_by_count":12,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2111.09137","title":"Two-Face: Adversarial Audit of Commercial Face Recognition Systems","created":"2021-11-17","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2209.15304","title":"Hiding Visual Information via Obfuscating Adversarial Perturbations","created":"2022-09-30","cited_by_count":7,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2112.05634","title":"Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks","created":"2021-12-10","cited_by_count":4,"area":null},{"id":"2203.09121","title":"DRAG: Dynamic Region-Aware GCN for Privacy-Leaking Image Detection","created":"2022-03-17","cited_by_count":4,"area":null},{"id":"2408.00950","title":"PrivateGaze: Preserving User Privacy in Black-box Mobile Gaze Tracking Services","created":"2024-08-01","cited_by_count":4,"area":null},{"id":"2306.02488","title":"Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacy","created":"2023-06-04","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2412.11066","title":"Learning Robust and Privacy-Preserving Representations via Information Theory","created":"2024-12-15","cited_by_count":3,"area":null},{"id":"2201.03353","title":"GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservation","created":"2022-01-10","cited_by_count":2,"area":null},{"id":"2212.02611","title":"StyleGAN as a Utility-Preserving Face De-identification Method","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2309.02820","title":"Roulette: A Semantic Privacy-Preserving Device-Edge Collaborative Inference Framework for Deep Learning Classification Tasks","created":"2023-09-06","cited_by_count":2,"area":null},{"id":"2501.06533","title":"DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy","created":"2025-01-11","cited_by_count":2,"area":null},{"id":"2603.03665","title":"Machine Pareidolia: Protecting Facial Image with Emotional Editing","created":"2026-03-04","cited_by_count":1,"area":null},{"id":"2110.01676","title":"Deep Learning Approach Protecting Privacy in Camera-Based Critical Applications","created":"2021-10-04","cited_by_count":0,"area":null},{"id":"2210.15529","title":"Learning Location from Shared Elevation Profiles in Fitness Apps: A Privacy Perspective","created":"2022-10-27","cited_by_count":0,"area":null},{"id":"2307.09146","title":"PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flow","created":"2023-07-18","cited_by_count":0,"area":null},{"id":"2402.13771","title":"Mask-up: Investigating Biases in Face Re-identification for Masked Faces","created":"2024-02-21","cited_by_count":0,"area":null},{"id":"2505.06860","title":"DP-TRAE: A Dual-Phase Merging Transferable Reversible Adversarial Example for Image Privacy Protection","created":"2025-05-11","cited_by_count":0,"area":null},{"id":"2605.01217","title":"Asymmetric Invertible Threat: Learning Reversible Privacy Defense for Face Recognition","created":"2026-05-02","cited_by_count":0,"area":null}],"next_cursor":null}