Defeating Image Obfuscation with Deep Learning
Not on the map. Why?
Abstract (arXiv)
We demonstrate that modern image recognition methods based on artificial neural networks can recover hidden information from images protected by various forms of obfuscation. The obfuscation techniques considered in this paper are mosaicing (also known as pixelation), blurring (as used by YouTube), and P3, a recently proposed system for privacy-preserving photo sharing that encrypts the significant JPEG coefficients to make images unrecognizable by humans. We empirically show how to train artificial neural networks to successfully identify faces and recognize objects and handwritten digits even if the images are protected using any of the above obfuscation techniques.
Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Sep 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 10; 2022: 9; 2023: 10; 2024: 3; 2025: 5; 2026: 6.
43 papers.
Sort:
By area:
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2021GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learningcited by 35
- 2022Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerabilitycited by 25
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2021DP-Image: Differential Privacy for Image Data in Feature Spacecited by 23
- 2023Ethical Considerations for Responsible Data Curationcited by 17
- 2021Differentially Private Imaging via Latent Space Manipulationcited by 13
- 2021DeepBlur: A Simple and Effective Method for Natural Image Obfuscationcited by 13
- 2023Does Image Anonymization Impact Computer Vision Training?cited by 12
- 2023Unmasking Transformers: A Theoretical Approach to Data Recovery via Attention Weightscited by 11
- 2023LDP-Feat: Image Features with Local Differential Privacycited by 10
31 more
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directionscited by 10
- 2023A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspectivecited by 9
- 2021On Generating Identifiable Virtual Facescited by 8
- 2021Temporally coherent video anonymization through GAN inpaintingcited by 7
- 2021A Review on Visual Privacy Preservation Techniques for Active and Assisted Livingcited by 6
- 2023Modeling the Trade-off of Privacy Preservation and Activity Recognition on Low-Resolution Imagescited by 6
- 2023Face Encryption via Frequency-Restricted Identity-Agnostic Attackscited by 6
- 2022Fantomas: Understanding Face Anonymization Reversibilitycited by 4
- 2023AdvCloak: Customized Adversarial Cloak for Privacy Protectioncited by 4
- 2022Content-Aware Differential Privacy with Conditional Invertible Neural Networkscited by 3
- 2022Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protectioncited by 3
- 2021Multitask Identity-Aware Image Steganography via Minimax Optimizationcited by 2
- 2022GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservationcited by 2
- 2022Practical Digital Disguises: Leveraging Face Swaps to Protect Patient Privacycited by 2
- 2022StyleGAN as a Utility-Preserving Face De-identification Methodcited by 2
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videoscited by 2
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognitioncited by 2
- 2022Lossy Compression of Noisy Data for Private and Data-Efficient Learningcited by 1
- 2024Enhancing User-Centric Privacy Protection: An Interactive Framework through Diffusion Models and Machine Unlearningcited by 1
- 2022Privacy Enhancement for Cloud-Based Few-Shot Learningcited by 0
- 2023Privacy-Preserving Medical Image Classification through Deep Learning and Matrix Decompositioncited by 0
- 2024Privacy Attack in Federated Learning is Not Easy: An Experimental Studycited by 0
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methodscited by 0
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentationcited by 0
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Taskscited by 0
- 2025A Distributed Framework for Privacy-Enhanced Vision Transformers on the Edgecited by 0
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Releasecited by 0
- 2026Amplified Patch-Level Differential Privacy for Free via Random Croppingcited by 0
- 2026Privacy-Preserving Structureless Visual Localization via Image Obfuscationcited by 0
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequencescited by 0
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformationscited by 0
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformations27 Aug 2026
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026Privacy-Preserving Structureless Visual Localization via Image Obfuscation13 Apr 2026
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognition27 Mar 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos14 Jan 2026
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Release18 Dec 2025
- 2025A Distributed Framework for Privacy-Enhanced Vision Transformers on the Edge10 Dec 2025
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Tasks23 Apr 2025
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentation8 Apr 2025
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods11 Mar 2025
- 2024Privacy Attack in Federated Learning is Not Easy: An Experimental Study28 Sep 2024
31 more
- 2024Enhancing User-Centric Privacy Protection: An Interactive Framework through Diffusion Models and Machine Unlearning5 Sep 2024
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directions6 Jun 2024
- 2023AdvCloak: Customized Adversarial Cloak for Privacy Protection22 Dec 2023
- 2023A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective27 Nov 2023
- 2023Unmasking Transformers: A Theoretical Approach to Data Recovery via Attention Weights19 Oct 2023
- 2023Privacy-Preserving Medical Image Classification through Deep Learning and Matrix Decomposition31 Aug 2023
- 2023LDP-Feat: Image Features with Local Differential Privacy22 Aug 2023
- 2023Face Encryption via Frequency-Restricted Identity-Agnostic Attacks11 Aug 2023
- 2023Does Image Anonymization Impact Computer Vision Training?8 Jun 2023
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimization20 Mar 2023
- 2023Modeling the Trade-off of Privacy Preservation and Activity Recognition on Low-Resolution Images18 Mar 2023
- 2023Ethical Considerations for Responsible Data Curation7 Feb 2023
- 2022StyleGAN as a Utility-Preserving Face De-identification Method5 Dec 2022
- 2022Fantomas: Understanding Face Anonymization Reversibility19 Oct 2022
- 2022Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability15 Oct 2022
- 2022Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection23 Aug 2022
- 2022Content-Aware Differential Privacy with Conditional Invertible Neural Networks29 Jul 2022
- 2022Privacy Enhancement for Cloud-Based Few-Shot Learning10 May 2022
- 2022Practical Digital Disguises: Leveraging Face Swaps to Protect Patient Privacy7 Apr 2022
- 2022Lossy Compression of Noisy Data for Private and Data-Efficient Learning7 Feb 2022
- 2022GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservation10 Jan 2022
- 2021A Review on Visual Privacy Preservation Techniques for Active and Assisted Living17 Dec 2021
- 2021On Generating Identifiable Virtual Faces15 Oct 2021
- 2021Multitask Identity-Aware Image Steganography via Minimax Optimization13 Jul 2021
- 2021Temporally coherent video anonymization through GAN inpainting4 Jun 2021
- 2021GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning2 May 2021
- 2021DeepBlur: A Simple and Effective Method for Natural Image Obfuscation31 Mar 2021
- 2021DP-Image: Differential Privacy for Image Data in Feature Space12 Mar 2021
- 2021A Study of Face Obfuscation in ImageNet10 Mar 2021
- 2021Differentially Private Imaging via Latent Space Manipulation8 Mar 2021
- 2021IdentityDP: Differential Private Identification Protection for Face Images2 Mar 2021
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2021GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learningcited by 35
- 2022Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerabilitycited by 25
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2021DP-Image: Differential Privacy for Image Data in Feature Spacecited by 23
- 2023Ethical Considerations for Responsible Data Curationcited by 17
- 2021Differentially Private Imaging via Latent Space Manipulationcited by 13
- 2021DeepBlur: A Simple and Effective Method for Natural Image Obfuscationcited by 13
- 2023Does Image Anonymization Impact Computer Vision Training?cited by 12
- 2023Unmasking Transformers: A Theoretical Approach to Data Recovery via Attention Weightscited by 11
- 2023LDP-Feat: Image Features with Local Differential Privacycited by 10
12 most cited of 41 All 41 (JSON)
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformations27 Aug 2026
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026Privacy-Preserving Structureless Visual Localization via Image Obfuscation13 Apr 2026
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognition27 Mar 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos14 Jan 2026
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Release18 Dec 2025
- 2025A Distributed Framework for Privacy-Enhanced Vision Transformers on the Edge10 Dec 2025
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Tasks23 Apr 2025
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods11 Mar 2025
- 2024Privacy Attack in Federated Learning is Not Easy: An Experimental Study28 Sep 2024
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directions6 Jun 2024
12 newest of 41 All 41 (JSON)