mlsanityData to 7 Oct 2026

LDFA: Latent Diffusion Face Anonymization for Self-driving Applications

arXiv 2302.08931 ↗First posted 17 Feb 2023cs.CVcited by 21

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

In order to protect vulnerable road users (VRUs), such as pedestrians or cyclists, it is essential that intelligent transportation systems (ITS) accurately identify them. Therefore, datasets used to train perception models of ITS must contain a significant number of vulnerable road users. However, data protection regulations require that individuals are anonymized in such datasets. In this work, we introduce a novel deep learning-based pipeline for face anonymization in the context of ITS. In contrast to related methods, we do not use generative adversarial networks (GANs) but build upon recent advances in diffusion models. We propose a two-stage method, which contains a face detection model followed by a latent diffusion model to generate realistic face in-paintings. To demonstrate the versatility of anonymized images, we train segmentation methods on anonymized data and evaluate them on non-anonymized data. Our experiment reveal that our pipeline is better suited to anonymize data for segmentation than naive methods and performes comparably with recent GAN-based methods. Moreover, face detectors achieve higher mAP scores for faces anonymized by our method compared to naive or recent GAN-based methods.

Key facts. Cited by 21 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 36 references that are in the map. First posted on arXiv 17 Feb 2023.

Builds on

27 of 36 references.

References · 27

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2020End-to-End Object Detection with Transformerscited by 7,384
  5. 2017Mask R-CNNcited by 7,259
  6. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  7. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  8. 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,510
  9. 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,427
  10. 2021Zero-Shot Text-to-Image Generationcited by 4,276
  11. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  12. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
15 more
  1. 2016Pyramid Scene Parsing Networkcited by 2,472
  2. 2021Masked-attention Mask Transformer for Universal Image Segmentationcited by 2,338
  3. 2022RePaint: Inpainting using Denoising Diffusion Probabilistic Modelscited by 1,419
  4. 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,339
  5. 2021Diffusion Probabilistic Models for 3D Point Cloud Generationcited by 734
  6. 2023Argoverse 2: Next Generation Datasets for Self-Driving Perception and Forecastingcited by 701
  7. 2020A2D2: Audi Autonomous Driving Datasetcited by 189
  8. 2019RetinaFace: Single-stage Dense Face Localisation in the Wildcited by 164
  9. 2018DSFD: Dual Shot Face Detectorcited by 115
  10. 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
  11. 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
  12. 2020Continuous Surface Embeddingscited by 79
  13. 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
  14. 2019Vulnerable road user detection: state-of-the-art and open challengescited by 3
  15. 2021Safe Fakes: Evaluating Face Anonymizers for Face Detectorscited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 3; 2024: 6; 2025: 6; 2026: 6.

21 papers.

Sort:

By area:

  1. 2023Self-Consuming Generative Models Go MADcited by 239
  2. 2024Dataset Enhancement with Instance-Level Augmentationscited by 23
  3. 2023EgoBlur: Responsible Innovation in Ariacited by 12
  4. 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
  5. 2025NullFace: Training-Free Localized Face Anonymizationcited by 4
  6. 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Modelscited by 3
  7. 2024My Body My Choice: Human-Centric Full-Body Anonymizationcited by 2
  8. 2025Bounding Box-Guided Diffusion for Synthesizing Industrial Images and Segmentation Mapcited by 2
  9. 2024Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generationcited by 1
  10. 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentificationcited by 1
  11. 2025SVIA: A Street View Image Anonymization Framework for Self-Driving Applicationscited by 1
  12. 2025Reverse Personalizationcited by 1
9 more
  1. 2026Towards Context-Aware Image Anonymization with Multi-Agent Reasoningcited by 1
  2. 2023Trustworthy Large Models in Vision: A Surveycited by 0
  3. 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videoscited by 0
  4. 2025Facial Attribute Based Text Guided Face Anonymizationcited by 0
  5. 2026Face anonymization preserving facial expressions and photometric realismcited by 0
  6. 2026Generative Anonymization in Event Streamscited by 0
  7. 2026ReGenHuman: Re-Generating Human Appearances for Realistic Full-Body Video Anonymizationcited by 0
  8. 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approachcited by 0
  9. 2026Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Studycited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Controllable Localized Face Anonymization Via Diffusion Inpainting
  2. 2024Latent Diffusion Models for Attribute-Preserving Image Anonymization
  3. 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
  4. 2024LDFaceNet: Latent Diffusion-based Network for High-Fidelity Deepfake Generation
  5. 2025Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection
  6. 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentation
  7. 2025Secure and reversible face anonymization with diffusion models
  8. 2023Diff-Privacy: Diffusion-based Face Privacy Protection