Learning to Anonymize Faces for Privacy Preserving Action Detection
Not on the map. Why?
Abstract (arXiv)
There is an increasing concern in computer vision devices invading users' privacy by recording unwanted videos. On the one hand, we want the camera systems to recognize important events and assist human daily lives by understanding its videos, but on the other hand we want to ensure that they do not intrude people's privacy. In this paper, we propose a new principled approach for learning a video face anonymizer. We use an adversarial training setting in which two competing systems fight: (1) a video anonymizer that modifies the original video to remove privacy-sensitive information while still trying to maximize spatial action detection performance, and (2) a discriminator that tries to extract privacy-sensitive information from the anonymized videos. The end result is a video anonymizer that performs pixel-level modifications to anonymize each person's face, with minimal effect on action detection performance. We experimentally confirm the benefits of our approach compared to conventional hand-crafted anonymization methods including masking, blurring, and noise adding. Code, demo, and more results can be found on our project page https://jason718.github.io/project/privacy/main.html.
Key facts. Cited by 63 papers in the map (data through 7 Oct 2026). First posted on arXiv 30 Mar 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 13; 2022: 9; 2023: 14; 2024: 11; 2025: 11; 2026: 5.
63 papers.
Sort:
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2022SPAct: Self-supervised Privacy Preservation for Action Recognitioncited by 47
- 2023STPrivacy: Spatio-Temporal Privacy-Preserving Action Recognitioncited by 29
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2023TeD-SPAD: Temporal Distinctiveness for Self-supervised Privacy-preservation for video Anomaly Detectioncited by 23
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptorcited by 21
- 2021Perceptual Indistinguishability-Net (PI-Net): Facial Image Obfuscation with Manipulable Semanticscited by 20
- 2023Bullying10K: A Large-Scale Neuromorphic Dataset towards Privacy-Preserving Bullying Recognitioncited by 17
- 2022PrivHAR: Recognizing Human Actions From Privacy-preserving Lenscited by 16
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applicationscited by 15
38 more
- 2022Privacy-Preserving Action Recognition via Motion Difference Quantizationcited by 14
- 2022My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymizationcited by 14
- 2021Differentially Private Imaging via Latent Space Manipulationcited by 13
- 2021CFA-Net: Controllable Face Anonymization Network with Identity Representation Manipulationcited by 12
- 2023Does Image Anonymization Impact Computer Vision Training?cited by 12
- 2023FIVA: Facial Image and Video Anonymization and Anonymization Defensecited by 12
- 2021Privacy-Preserving Video Classification with Convolutional Neural Networkscited by 10
- 2021Analysis and Mitigations of Reverse Engineering Attacks on Local Feature Descriptorscited by 10
- 2023Differentially Private Video Activity Recognitioncited by 9
- 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
- 2024Selective, Interpretable, and Motion Consistent Privacy Attribute Obfuscation for Action Recognitioncited by 8
- 2021Temporally coherent video anonymization through GAN inpaintingcited by 7
- 2022Privacy-Preserving Person Detection Using Low-Resolution Infrared Camerascited by 7
- 2022Learnable Privacy-Preserving Anonymization for Pedestrian Imagescited by 6
- 2023Deep Learning Approaches for Seizure Video Analysis: A Reviewcited by 6
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detectioncited by 6
- 2021Anonymization for Skeleton Action Recognitioncited by 5
- 2023Learning Human Action Recognition Representations Without Real Humanscited by 5
- 2023Privacy-Preserving Remote Heart Rate Estimation from Facial Videoscited by 4
- 2024Medical Manifestation-Aware De-Identificationcited by 4
- 2025Balancing Privacy and Action Performance: A Penalty-Driven Approach to Image Anonymizationcited by 4
- 2025EgoPrivacy: What Your First-Person Camera Says About You?cited by 4
- 2024Activity Recognition on Avatar-Anonymized Datasets with Masked Differential Privacycited by 3
- 2025Video-DPRP: A Differentially Private Approach for Visual Privacy-Preserving Video Human Activity Recognitioncited by 3
- 2025Empirical Privacy Variancecited by 3
- 2022StyleGAN as a Utility-Preserving Face De-identification Methodcited by 2
- 2023Sparse and Privacy-enhanced Representation for Human Pose Estimationcited by 2
- 2024My Body My Choice: Human-Centric Full-Body Anonymizationcited by 2
- 2024Recoverable Anonymization for Pose Estimation: A Privacy-Enhancing Approachcited by 2
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognitioncited by 2
- 2021Privacy-preserving Object Detectioncited by 1
- 2021Privacy Aware Person Detection in Surveillance Datacited by 1
- 2024Region of Interest Loss for Anonymizing Learned Image Compressioncited by 1
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentificationcited by 1
- 2025Editing Physiological Signals in Videos Using Latent Representationscited by 1
- 2025Privacy Beyond Pixels: Latent Anonymization for Privacy-Preserving Video Understandingcited by 1
- 2025StegaVAR: Privacy-Preserving Video Action Recognition via Steganographic Domain Analysiscited by 1
- 2022To show or not to show: Redacting sensitive text from videos of electronic displayscited by 0
50 most cited of 63 All 63 (JSON)
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approach22 Sep 2026
- 2026Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition19 May 2026
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognition27 Mar 2026
- 2026PPEDCRF: Privacy-Preserving Enhanced Dynamic CRF for Location-Privacy Protection for Sequence Videos with Minimal Detection Degradation2 Mar 2026
- 2025StegaVAR: Privacy-Preserving Video Action Recognition via Steganographic Domain Analysis14 Dec 2025
- 2025Privacy Beyond Pixels: Latent Anonymization for Privacy-Preserving Video Understanding11 Nov 2025
- 2025Editing Physiological Signals in Videos Using Latent Representations29 Sep 2025
- 2025Generative Adversarial Networks Applied for Privacy Preservation in Biometric-Based Authentication and Identification24 Sep 2025
- 2025EgoPrivacy: What Your First-Person Camera Says About You?13 Jun 2025
- 2025Balancing Privacy and Action Performance: A Penalty-Driven Approach to Image Anonymization19 Apr 2025
- 2025Empirical Privacy Variance16 Mar 2025
38 more
- 2025Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representations12 Mar 2025
- 2025FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods11 Mar 2025
- 2025Video-DPRP: A Differentially Private Approach for Visual Privacy-Preserving Video Human Activity Recognition3 Mar 2025
- 2025Secure Visual Data Processing via Federated Learning9 Feb 2025
- 2024Medical Manifestation-Aware De-Identification14 Dec 2024
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
- 2024Low-Latency Video Anonymization for Crowd Anomaly Detection: Privacy Versus Performance24 Oct 2024
- 2024Activity Recognition on Avatar-Anonymized Datasets with Masked Differential Privacy22 Oct 2024
- 2024Recoverable Anonymization for Pose Estimation: A Privacy-Enhancing Approach1 Sep 2024
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentification6 Aug 2024
- 2024IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detection3 Aug 2024
- 2024Forbes: Face Obfuscation Rendering via Backpropagation Refinement Scheme19 Jul 2024
- 2024My Body My Choice: Human-Centric Full-Body Anonymization13 Jun 2024
- 2024Region of Interest Loss for Anonymizing Learned Image Compression9 Jun 2024
- 2024Selective, Interpretable, and Motion Consistent Privacy Attribute Obfuscation for Action Recognition19 Mar 2024
- 2023Deep Learning Approaches for Seizure Video Analysis: A Review18 Dec 2023
- 2023VerA: Versatile Anonymization Applicable to Clinical Facial Photographs4 Dec 2023
- 2023Disentangle Before Anonymize: A Two-stage Framework for Attribute-preserved and Occlusion-robust De-identification15 Nov 2023
- 2023Learning Human Action Recognition Representations Without Real Humans10 Nov 2023
- 2023Sparse and Privacy-enhanced Representation for Human Pose Estimation18 Sep 2023
- 2023FIVA: Facial Image and Video Anonymization and Anonymization Defense8 Sep 2023
- 2023TeD-SPAD: Temporal Distinctiveness for Self-supervised Privacy-preservation for video Anomaly Detection21 Aug 2023
- 2023Differentially Private Video Activity Recognition27 Jun 2023
- 2023Data-Driven but Privacy-Conscious: Pedestrian Dataset De-identification via Full-Body Person Synthesis20 Jun 2023
- 2023Bullying10K: A Large-Scale Neuromorphic Dataset towards Privacy-Preserving Bullying Recognition20 Jun 2023
- 2023Does Image Anonymization Impact Computer Vision Training?8 Jun 2023
- 2023Privacy-Preserving Remote Heart Rate Estimation from Facial Videos1 Jun 2023
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptor9 Mar 2023
- 2023STPrivacy: Spatio-Temporal Privacy-Preserving Action Recognition8 Jan 2023
- 2022StyleGAN as a Utility-Preserving Face De-identification Method5 Dec 2022
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymization17 Nov 2022
- 2022My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization2 Nov 2022
- 2022Privacy-Preserving Person Detection Using Low-Resolution Infrared Cameras22 Sep 2022
- 2022To show or not to show: Redacting sensitive text from videos of electronic displays19 Aug 2022
- 2022Privacy-Preserving Action Recognition via Motion Difference Quantization4 Aug 2022
- 2022Learnable Privacy-Preserving Anonymization for Pedestrian Images24 Jul 2022
- 2022PrivHAR: Recognizing Human Actions From Privacy-preserving Lens8 Jun 2022
- 2022SPAct: Self-supervised Privacy Preservation for Action Recognition29 Mar 2022
50 newest of 63 All 63 (JSON)
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2022SPAct: Self-supervised Privacy Preservation for Action Recognitioncited by 47
- 2023STPrivacy: Spatio-Temporal Privacy-Preserving Action Recognitioncited by 29
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2023TeD-SPAD: Temporal Distinctiveness for Self-supervised Privacy-preservation for video Anomaly Detectioncited by 23
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptorcited by 21
- 2021Perceptual Indistinguishability-Net (PI-Net): Facial Image Obfuscation with Manipulable Semanticscited by 20
- 2023Bullying10K: A Large-Scale Neuromorphic Dataset towards Privacy-Preserving Bullying Recognitioncited by 17
- 2022PrivHAR: Recognizing Human Actions From Privacy-preserving Lenscited by 16
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applicationscited by 15
12 most cited of 63 All 63 (JSON)
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approach22 Sep 2026
- 2026Lens Privacy Sealing: A New Benchmark and Method for Physical Privacy-Preserving Action Recognition19 May 2026
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognition27 Mar 2026
- 2026PPEDCRF: Privacy-Preserving Enhanced Dynamic CRF for Location-Privacy Protection for Sequence Videos with Minimal Detection Degradation2 Mar 2026
- 2025StegaVAR: Privacy-Preserving Video Action Recognition via Steganographic Domain Analysis14 Dec 2025
- 2025Privacy Beyond Pixels: Latent Anonymization for Privacy-Preserving Video Understanding11 Nov 2025
- 2025Editing Physiological Signals in Videos Using Latent Representations29 Sep 2025
- 2025Generative Adversarial Networks Applied for Privacy Preservation in Biometric-Based Authentication and Identification24 Sep 2025
- 2025EgoPrivacy: What Your First-Person Camera Says About You?13 Jun 2025
- 2025Balancing Privacy and Action Performance: A Penalty-Driven Approach to Image Anonymization19 Apr 2025
- 2025Empirical Privacy Variance16 Mar 2025
12 newest of 63 All 63 (JSON)