Latent Diffusion Models for Attribute-Preserving Image Anonymization
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Generative techniques for image anonymization have great potential to generate datasets that protect the privacy of those depicted in the images, while achieving high data fidelity and utility. Existing methods have focused extensively on preserving facial attributes, but failed to embrace a more comprehensive perspective that considers the scene and background into the anonymization process. This paper presents, to the best of our knowledge, the first approach to image anonymization based on Latent Diffusion Models (LDMs). Every element of a scene is maintained to convey the same meaning, yet manipulated in a way that makes re-identification difficult. We propose two LDMs for this purpose: CAMOUFLaGE-Base exploits a combination of pre-trained ControlNets, and a new controlling mechanism designed to increase the distance between the real and anonymized images. CAMOFULaGE-Light is based on the Adapter technique, coupled with an encoding designed to efficiently represent the attributes of different persons in a scene. The former solution achieves superior performance on most metrics and benchmarks, while the latter cuts the inference time in half at the cost of fine-tuning a lightweight module. We show through extensive experimental comparison that the proposed method is competitive with the state-of-the-art concerning identity obfuscation whilst better preserving the original content of the image and tackling unresolved challenges that current solutions fail to address.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 37 of its 53 references that are in the map. First posted on arXiv 21 Mar 2024.
Builds on
37 of 53 references.
References · 37
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2022Elucidating the Design Space of Diffusion-Based Generative Modelscited by 2,994
25 more
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2019Towards Robust Monocular Depth Estimation: Mixing Datasets for Zero-shot Cross-dataset Transfercited by 1,484
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2016Realtime Multi-Person 2D Pose Estimation using Part Affinity Fieldscited by 1,061
- 2022eDiff-I: Text-to-Image Diffusion Models with an Ensemble of Expert Denoiserscited by 921
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2014Learning Face Representation from Scratchcited by 451
- 2015WIDER FACE: A Face Detection Benchmarkcited by 297
- 2017GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibriumcited by 208
- 2021General Facial Representation Learning in a Visual-Linguistic Mannercited by 193
- 2021Estimating and Exploiting the Aleatoric Uncertainty in Surface Normal Estimationcited by 116
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2022Synthetic Data -- what, why and how?cited by 66
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2019AnonymousNet: Natural Face De-Identification with Measurable Privacycited by 50
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2018Privacy-Protective-GAN for Face De-identificationcited by 14
- 2023Visual DNA: Representing and Comparing Images using Distributions of Neuron Activationscited by 7
Built on by
Citing papers per year: 2024: 2; 2025: 2; 2026: 3.
7 papers.
- 2024Rendering-Refined Stable Diffusion for Privacy Compliant Synthetic Datacited by 2
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videoscited by 2
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognitioncited by 2
- 2024For a semiotic AI: Bridging computer vision and visual semiotics for computational observation of large scale facial image archivescited by 1
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videoscited by 0
- 2025Controllable Localized Face Anonymization Via Diffusion Inpaintingcited by 0
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approachcited by 0
- 2026HYDRO: Towards Non-Reversible Face De-Identification Using a High-Fidelity Hybrid Diffusion and Target-Oriented Approach22 Sep 2026
- 2026From Pixels to Privacy: Temporally Consistent Video Anonymization via Token Pruning for Privacy Preserving Action Recognition27 Mar 2026
- 2026Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos14 Jan 2026
- 2025Controllable Localized Face Anonymization Via Diffusion Inpainting18 Sep 2025
- 2025Assessing the Use of Face Swapping Methods as Face Anonymizers in Videos27 May 2025
- 2024Rendering-Refined Stable Diffusion for Privacy Compliant Synthetic Data9 Dec 2024
- 2024For a semiotic AI: Bridging computer vision and visual semiotics for computational observation of large scale facial image archives3 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentation
- 2025NullFace: Training-Free Localized Face Anonymization
- 2025Reverse Personalization
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Models
- 2025Facial Attribute Based Text Guided Face Anonymization
- 2023DP-LDMs: Differentially Private Latent Diffusion Models
- 2024Face Anonymization Made Simple
- 2025Beyond Inference Intervention: Identity-Decoupled Diffusion for Face Anonymization