Natural and Effective Obfuscation by Head Inpainting
Not on the map. Why?
Abstract (arXiv)
As more and more personal photos are shared online, being able to obfuscate identities in such photos is becoming a necessity for privacy protection. People have largely resorted to blacking out or blurring head regions, but they result in poor user experience while being surprisingly ineffective against state of the art person recognizers. In this work, we propose a novel head inpainting obfuscation technique. Generating a realistic head inpainting in social media photos is challenging because subjects appear in diverse activities and head orientations. We thus split the task into two sub-tasks: (1) facial landmark generation from image context (e.g. body pose) for seamless hypothesis of sensible head pose, and (2) facial landmark conditioned head inpainting. We verify that our inpainting method generates realistic person images, while achieving superior obfuscation performance against automatic person recognizers.
Key facts. Cited by 60 papers in the map (data through 14 Oct 2026). First posted on arXiv 24 Nov 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 11; 2023: 12; 2024: 10; 2025: 7; 2026: 4.
60 papers.
Sort:
By area:
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2021Data Poisoning Won't Save You From Facial Recognitioncited by 45
- 2024Deep Learning-based Image and Video Inpainting: A Surveycited by 44
- 2023CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Searchcited by 43
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 41
- 2023Diff-Privacy: Diffusion-based Face Privacy Protectioncited by 26
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2021DP-Image: Differential Privacy for Image Data in Feature Spacecited by 23
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptorcited by 21
- 2021Perceptual Indistinguishability-Net (PI-Net): Facial Image Obfuscation with Manipulable Semanticscited by 20
38 more
- 2024Face Anonymization Made Simplecited by 18
- 2021Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Frameworkcited by 17
- 2023Ethical Considerations for Responsible Data Curationcited by 17
- 2021Teacher Model Fingerprinting Attacks Against Transfer Learningcited by 16
- 2022Realistic Full-Body Anonymization with Surface-Guided GANscited by 15
- 2022My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymizationcited by 14
- 2021Differentially Private Imaging via Latent Space Manipulationcited by 13
- 2021CFA-Net: Controllable Face Anonymization Network with Identity Representation Manipulationcited by 12
- 2023Does Image Anonymization Impact Computer Vision Training?cited by 12
- 2021Graph-based Generative Face Anonymisation with Pose Preservationcited by 9
- 2023GANonymization: A GAN-based Face Anonymization Framework for Preserving Emotional Expressionscited by 9
- 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
- 2024View-consistent Object Removal in Radiance Fieldscited by 7
- 2021FICGAN: Facial Identity Controllable GAN for De-identificationcited by 6
- 2021A Review on Visual Privacy Preservation Techniques for Active and Assisted Livingcited by 6
- 2022Learnable Privacy-Preserving Anonymization for Pedestrian Imagescited by 6
- 2023Face Encryption via Frequency-Restricted Identity-Agnostic Attackscited by 6
- 2022Facial Expression Translation using Landmark Guided GANscited by 4
- 2024Video-to-Text Pedestrian Monitoring (VTPM): Leveraging Computer Vision and Large Language Models for Privacy-Preserve Pedestrian Activity Monitoring at Intersectionscited by 4
- 2025NullFace: Training-Free Localized Face Anonymizationcited by 4
- 2021Safe Fakes: Evaluating Face Anonymizers for Face Detectorscited by 3
- 2022A comprehensive survey on semantic facial attribute editing using generative adversarial networkscited by 3
- 2023Introducing Explicit Gaze Constraints to Face Swappingcited by 3
- 2022GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservationcited by 2
- 2022Practical Digital Disguises: Leveraging Face Swaps to Protect Patient Privacycited by 2
- 2022StyleGAN as a Utility-Preserving Face De-identification Methodcited by 2
- 2024My Body My Choice: Human-Centric Full-Body Anonymizationcited by 2
- 2025DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategycited by 2
- 2025BLANKET: Anonymizing Faces in Infant Video Recordingscited by 2
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videoscited by 2
- 2021Privacy-preserving Object Detectioncited by 1
- 2022PrivPAS: A real time Privacy-Preserving AI System and applied ethicscited by 1
- 2024Towards mitigating uncann(eye)ness in face swaps via gaze-centric loss termscited by 1
- 2024Region of Interest Loss for Anonymizing Learned Image Compressioncited by 1
- 2024SemDP: Semantic-level Differential Privacy Protection for Face Datasetscited by 1
- 2022Contextualize differential privacy in image database: a lightweight image differential privacy approach based on principle component analysis inversecited by 0
- 2023Data-Driven but Privacy-Conscious: Pedestrian Dataset De-identification via Full-Body Person Synthesiscited by 0
- 2023PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flowcited by 0
50 most cited of 60 All 60 (JSON)
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Face anonymization preserving facial expressions and photometric realism18 Mar 2026
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos14 Jan 2026
- 2025BLANKET: Anonymizing Faces in Infant Video Recordings17 Dec 2025
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Tasks23 Apr 2025
- 2025Controllable Adversarial Makeup for Privacy via Text-Guided Diffusion13 Mar 2025
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods11 Mar 2025
- 2025NullFace: Training-Free Localized Face Anonymization11 Mar 2025
- 2025An inpainting approach to manipulate asymmetry in pre-operative breast images8 Feb 2025
- 2025DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy11 Jan 2025
- 2024SemDP: Semantic-level Differential Privacy Protection for Face Datasets20 Dec 2024
38 more
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
- 2024Face Anonymization Made Simple1 Nov 2024
- 2024Video-to-Text Pedestrian Monitoring (VTPM): Leveraging Computer Vision and Large Language Models for Privacy-Preserve Pedestrian Activity Monitoring at Intersections21 Aug 2024
- 2024View-consistent Object Removal in Radiance Fields4 Aug 2024
- 2024Forbes: Face Obfuscation Rendering via Backpropagation Refinement Scheme19 Jul 2024
- 2024My Body My Choice: Human-Centric Full-Body Anonymization13 Jun 2024
- 2024Region of Interest Loss for Anonymizing Learned Image Compression9 Jun 2024
- 2024Towards mitigating uncann(eye)ness in face swaps via gaze-centric loss terms5 Feb 2024
- 2024Deep Learning-based Image and Video Inpainting: A Survey7 Jan 2024
- 2023VerA: Versatile Anonymization Applicable to Clinical Facial Photographs4 Dec 2023
- 2023Disentangle Before Anonymize: A Two-stage Framework for Attribute-preserved and Occlusion-robust De-identification15 Nov 2023
- 2023Diff-Privacy: Diffusion-based Face Privacy Protection11 Sep 2023
- 2023Face Encryption via Frequency-Restricted Identity-Agnostic Attacks11 Aug 2023
- 2023PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flow18 Jul 2023
- 2023Data-Driven but Privacy-Conscious: Pedestrian Dataset De-identification via Full-Body Person Synthesis20 Jun 2023
- 2023CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search16 Jun 2023
- 2023Does Image Anonymization Impact Computer Vision Training?8 Jun 2023
- 2023Introducing Explicit Gaze Constraints to Face Swapping25 May 2023
- 2023GANonymization: A GAN-based Face Anonymization Framework for Preserving Emotional Expressions3 May 2023
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptor9 Mar 2023
- 2023Ethical Considerations for Responsible Data Curation7 Feb 2023
- 2022StyleGAN as a Utility-Preserving Face De-identification Method5 Dec 2022
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymization17 Nov 2022
- 2022My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization2 Nov 2022
- 2022Facial Expression Translation using Landmark Guided GANs5 Sep 2022
- 2022Learnable Privacy-Preserving Anonymization for Pedestrian Images24 Jul 2022
- 2022A comprehensive survey on semantic facial attribute editing using generative adversarial networks21 May 2022
- 2022Practical Digital Disguises: Leveraging Face Swaps to Protect Patient Privacy7 Apr 2022
- 2022Contextualize differential privacy in image database: a lightweight image differential privacy approach based on principle component analysis inverse16 Feb 2022
- 2022PrivPAS: A real time Privacy-Preserving AI System and applied ethics5 Feb 2022
- 2022GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservation10 Jan 2022
- 2022Realistic Full-Body Anonymization with Surface-Guided GANs6 Jan 2022
- 2021A Review on Visual Privacy Preservation Techniques for Active and Assisted Living17 Dec 2021
- 2021Graph-based Generative Face Anonymisation with Pose Preservation10 Dec 2021
- 2021FICGAN: Facial Identity Controllable GAN for De-identification2 Oct 2021
- 2021Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Framework20 Sep 2021
- 2021Data Poisoning Won't Save You From Facial Recognition28 Jun 2021
- 2021Teacher Model Fingerprinting Attacks Against Transfer Learning23 Jun 2021
50 newest of 60 All 60 (JSON)
- 2021Data Poisoning Won't Save You From Facial Recognitioncited by 45
- 2021Data Poisoning Won't Save You From Facial Recognition28 Jun 2021
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2024Deep Learning-based Image and Video Inpainting: A Surveycited by 44
- 2023CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Searchcited by 43
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 41
- 2023Diff-Privacy: Diffusion-based Face Privacy Protectioncited by 26
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2021DP-Image: Differential Privacy for Image Data in Feature Spacecited by 23
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptorcited by 21
- 2021Perceptual Indistinguishability-Net (PI-Net): Facial Image Obfuscation with Manipulable Semanticscited by 20
- 2024Face Anonymization Made Simplecited by 18
12 most cited of 58 All 58 (JSON)
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Face anonymization preserving facial expressions and photometric realism18 Mar 2026
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos14 Jan 2026
- 2025BLANKET: Anonymizing Faces in Infant Video Recordings17 Dec 2025
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Tasks23 Apr 2025
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods11 Mar 2025
- 2025NullFace: Training-Free Localized Face Anonymization11 Mar 2025
- 2025An inpainting approach to manipulate asymmetry in pre-operative breast images8 Feb 2025
- 2025DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy11 Jan 2025
- 2024SemDP: Semantic-level Differential Privacy Protection for Face Datasets20 Dec 2024
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
12 newest of 58 All 58 (JSON)