A Systematical Solution for Face De-identification
Not on the map. Why?
Abstract (arXiv)
With the identity information in face data more closely related to personal credit and property security, people pay increasing attention to the protection of face data privacy. In different tasks, people have various requirements for face de-identification (De-ID), so we propose a systematical solution compatible for these De-ID operations. Firstly, an attribute disentanglement and generative network is constructed to encode two parts of the face, which are the identity (facial features like mouth, nose and eyes) and expression (including expression, pose and illumination). Through face swapping, we can remove the original ID completely. Secondly, we add an adversarial vector mapping network to perturb the latent code of the face image, different from previous traditional adversarial methods. Through this, we can construct unrestricted adversarial image to decrease ID similarity recognized by model. Our method can flexibly de-identify the face data in various ways and the processed images have high image quality.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 15 of its 24 references that are in the map. First posted on arXiv 19 Jul 2021.
Builds on
15 of 24 references.
References · 15
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 903
- 2016InfoGAN: Interpretable Representation Learning by Information Maximizing Generative Adversarial Netscited by 860
- 2021GAN Inversion: A Surveycited by 367
- 2019FSGAN: Subject Agnostic Face Swapping and Reenactmentcited by 320
- 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
- 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 163
- 2020Adversarial Latent Autoencoderscited by 155
- 2018Constructing Unrestricted Adversarial Examples with Generative Modelscited by 135
Built on by
Citing papers per year: 2021: 1; 2022: 2; 2023: 0; 2024: 3; 2025: 0; 2026: 2.
8 papers.
- 2021SoK: Anti-Facial Recognition Technologycited by 16
- 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
- 2022Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Modelscited by 3
- 2022StyleGAN as a Utility-Preserving Face De-identification Methodcited by 2
- 2024Beyond Inserting: Learning Identity Embedding for Semantic-Fidelity Personalized Diffusion Generationcited by 2
- 2026FDeID-Toolbox: Face De-Identification Toolboxcited by 1
- 2024Counterfactual Explanations for Face Forgery Detection via Adversarial Removal of Artifactscited by 0
- 2026Face De-Identification: A Domain-Centric Survey from Capture to Processingcited by 0
- 2026Face De-Identification: A Domain-Centric Survey from Capture to Processing28 Jul 2026
- 2026FDeID-Toolbox: Face De-Identification Toolbox13 Mar 2026
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
- 2024Counterfactual Explanations for Face Forgery Detection via Adversarial Removal of Artifacts12 Apr 2024
- 2024Beyond Inserting: Learning Identity Embedding for Semantic-Fidelity Personalized Diffusion Generation31 Jan 2024
- 2022StyleGAN as a Utility-Preserving Face De-identification Method5 Dec 2022
- 2022Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Models30 May 2022
- 2021SoK: Anti-Facial Recognition Technology8 Dec 2021