LDFA: Latent Diffusion Face Anonymization for Self-driving Applications
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
In order to protect vulnerable road users (VRUs), such as pedestrians or cyclists, it is essential that intelligent transportation systems (ITS) accurately identify them. Therefore, datasets used to train perception models of ITS must contain a significant number of vulnerable road users. However, data protection regulations require that individuals are anonymized in such datasets. In this work, we introduce a novel deep learning-based pipeline for face anonymization in the context of ITS. In contrast to related methods, we do not use generative adversarial networks (GANs) but build upon recent advances in diffusion models. We propose a two-stage method, which contains a face detection model followed by a latent diffusion model to generate realistic face in-paintings. To demonstrate the versatility of anonymized images, we train segmentation methods on anonymized data and evaluate them on non-anonymized data. Our experiment reveal that our pipeline is better suited to anonymize data for segmentation than naive methods and performes comparably with recent GAN-based methods. Moreover, face detectors achieve higher mAP scores for faces anonymized by our method compared to naive or recent GAN-based methods.
Key facts. Cited by 21 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 36 references that are in the map. First posted on arXiv 17 Feb 2023.
Builds on
27 of 36 references.
References · 27
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020End-to-End Object Detection with Transformerscited by 7,384
- 2017Mask R-CNNcited by 7,259
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,510
- 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,427
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
15 more
- 2016Pyramid Scene Parsing Networkcited by 2,472
- 2021Masked-attention Mask Transformer for Universal Image Segmentationcited by 2,338
- 2022RePaint: Inpainting using Denoising Diffusion Probabilistic Modelscited by 1,419
- 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,339
- 2021Diffusion Probabilistic Models for 3D Point Cloud Generationcited by 734
- 2023Argoverse 2: Next Generation Datasets for Self-Driving Perception and Forecastingcited by 701
- 2020A2D2: Audi Autonomous Driving Datasetcited by 189
- 2019RetinaFace: Single-stage Dense Face Localisation in the Wildcited by 164
- 2018DSFD: Dual Shot Face Detectorcited by 115
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2020Continuous Surface Embeddingscited by 79
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2019Vulnerable road user detection: state-of-the-art and open challengescited by 3
- 2021Safe Fakes: Evaluating Face Anonymizers for Face Detectorscited by 3
Built on by
Citing papers per year: 2023: 3; 2024: 6; 2025: 6; 2026: 6.
21 papers.
Sort:
By area:
- 2023Self-Consuming Generative Models Go MADcited by 239
- 2024Dataset Enhancement with Instance-Level Augmentationscited by 23
- 2023EgoBlur: Responsible Innovation in Ariacited by 12
- 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
- 2025NullFace: Training-Free Localized Face Anonymizationcited by 4
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Modelscited by 3
- 2024My Body My Choice: Human-Centric Full-Body Anonymizationcited by 2
- 2025Bounding Box-Guided Diffusion for Synthesizing Industrial Images and Segmentation Mapcited by 2
- 2024Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generationcited by 1
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentificationcited by 1
- 2025SVIA: A Street View Image Anonymization Framework for Self-Driving Applicationscited by 1
- 2025Reverse Personalizationcited by 1
9 more
- 2026Towards Context-Aware Image Anonymization with Multi-Agent Reasoningcited by 1
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videoscited by 0
- 2025Facial Attribute Based Text Guided Face Anonymizationcited by 0
- 2026Face anonymization preserving facial expressions and photometric realismcited by 0
- 2026Generative Anonymization in Event Streamscited by 0
- 2026ReGenHuman: Re-Generating Human Appearances for Realistic Full-Body Video Anonymizationcited by 0
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approachcited by 0
- 2026Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Studycited by 0
- 2026Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study22 Sep 2026
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approach22 Sep 2026
- 2026ReGenHuman: Re-Generating Human Appearances for Realistic Full-Body Video Anonymization12 Jun 2026
- 2026Generative Anonymization in Event Streams14 Apr 2026
- 2026Towards Context-Aware Image Anonymization with Multi-Agent Reasoning29 Mar 2026
- 2026Face anonymization preserving facial expressions and photometric realism18 Mar 2026
- 2025Reverse Personalization28 Dec 2025
- 2025Facial Attribute Based Text Guided Face Anonymization27 May 2025
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videos27 May 2025
- 2025Bounding Box-Guided Diffusion for Synthesizing Industrial Images and Segmentation Map6 May 2025
- 2025NullFace: Training-Free Localized Face Anonymization11 Mar 2025
- 2025SVIA: A Street View Image Anonymization Framework for Self-Driving Applications16 Jan 2025
9 more
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Models11 Oct 2024
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentification6 Aug 2024
- 2024My Body My Choice: Human-Centric Full-Body Anonymization13 Jun 2024
- 2024Dataset Enhancement with Instance-Level Augmentations12 Jun 2024
- 2024Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generation27 May 2024
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023EgoBlur: Responsible Innovation in Aria24 Aug 2023
- 2023Self-Consuming Generative Models Go MAD4 Jul 2023
- 2024Dataset Enhancement with Instance-Level Augmentationscited by 23
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Modelscited by 3
- 2025Bounding Box-Guided Diffusion for Synthesizing Industrial Images and Segmentation Mapcited by 2
- 2024Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generationcited by 1
- 2025Reverse Personalizationcited by 1
- 2025Reverse Personalization28 Dec 2025
- 2025Bounding Box-Guided Diffusion for Synthesizing Industrial Images and Segmentation Map6 May 2025
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Models11 Oct 2024
- 2024Dataset Enhancement with Instance-Level Augmentations12 Jun 2024
- 2024Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generation27 May 2024
- 2023Self-Consuming Generative Models Go MADcited by 239
- 2023EgoBlur: Responsible Innovation in Ariacited by 12
- 2024Face De-identification: State-of-the-art Methods and Comparative Studiescited by 9
- 2025NullFace: Training-Free Localized Face Anonymizationcited by 4
- 2024My Body My Choice: Human-Centric Full-Body Anonymizationcited by 2
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentificationcited by 1
- 2025SVIA: A Street View Image Anonymization Framework for Self-Driving Applicationscited by 1
- 2026Towards Context-Aware Image Anonymization with Multi-Agent Reasoningcited by 1
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videoscited by 0
- 2025Facial Attribute Based Text Guided Face Anonymizationcited by 0
- 2026Face anonymization preserving facial expressions and photometric realismcited by 0
12 most cited of 16 All 16 (JSON)
- 2026Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study22 Sep 2026
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approach22 Sep 2026
- 2026ReGenHuman: Re-Generating Human Appearances for Realistic Full-Body Video Anonymization12 Jun 2026
- 2026Generative Anonymization in Event Streams14 Apr 2026
- 2026Towards Context-Aware Image Anonymization with Multi-Agent Reasoning29 Mar 2026
- 2026Face anonymization preserving facial expressions and photometric realism18 Mar 2026
- 2025Facial Attribute Based Text Guided Face Anonymization27 May 2025
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videos27 May 2025
- 2025NullFace: Training-Free Localized Face Anonymization11 Mar 2025
- 2025SVIA: A Street View Image Anonymization Framework for Self-Driving Applications16 Jan 2025
- 2024Face De-identification: State-of-the-art Methods and Comparative Studies15 Nov 2024
- 2024FAKER: Full-body Anonymization with Human Keypoint Extraction for Real-time Video Deidentification6 Aug 2024
12 newest of 16 All 16 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Controllable Localized Face Anonymization Via Diffusion Inpainting
- 2024Latent Diffusion Models for Attribute-Preserving Image Anonymization
- 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
- 2024LDFaceNet: Latent Diffusion-based Network for High-Fidelity Deepfake Generation
- 2025Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentation
- 2025Secure and reversible face anonymization with diffusion models
- 2023Diff-Privacy: Diffusion-based Face Privacy Protection