mlsanityData to 14 Oct 2026

Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition

arXiv 2404.02696 ↗First posted 3 Apr 2024cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

In this study, we apply the information-theoretic Privacy Funnel (PF) model to face recognition and develop a method for privacy-preserving representation learning within an end-to-end trainable framework. Our approach addresses the trade-off between utility and obfuscation of sensitive information under logarithmic loss. We study the integration of information-theoretic privacy principles with representation learning, with a particular focus on face recognition systems. We also highlight the compatibility of the proposed framework with modern face recognition networks such as AdaFace and ArcFace. In addition, we introduce the Generative Privacy Funnel (mathsfGenPF) model, which extends the traditional discriminative PF formulation, referred to here as the Discriminative Privacy Funnel (mathsfDisPF). The proposed mathsfGenPF model extends the privacy-funnel framework to generative formulations under information-theoretic and estimation-theoretic criteria. Complementing these developments, we present the deep variational PF (DVPF) model, which yields a tractable variational bound for measuring information leakage and enables optimization in deep representation-learning settings. The DVPF framework, associated with both the mathsfDisPF and mathsfGenPF models, also clarifies connections with generative models such as variational autoencoders (VAEs), generative adversarial networks (GANs), and diffusion models. Finally, we validate the framework on modern face recognition systems and show that it provides a controllable privacy--utility trade-off while substantially reducing leakage about sensitive attributes. To support reproducibility, we also release a PyTorch implementation of the proposed framework.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 89 of its 259 references that are in the map. First posted on arXiv 3 Apr 2024.

Builds on

89 of 259 references.

References · 89

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  3. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  4. 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,845
  5. 2019Advances and Open Problems in Federated Learningcited by 3,046
  6. 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,849
  7. 2016Deep Learning with Differential Privacycited by 2,728
  8. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  9. 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 971
  10. 2016Deep Variational Information Bottleneckcited by 930
  11. 2016Practical Black-Box Attacks against Machine Learningcited by 903
  12. 2015Deep Learning and the Information Bottleneck Principlecited by 802
38 more
  1. 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 737
  2. 2018MINE: Mutual Information Neural Estimationcited by 683
  3. 2017Renyi Differential Privacycited by 650
  4. 2016Stealing Machine Learning Models via Prediction APIscited by 619
  5. 2020Deep Learning for Person Re-identification: A Survey and Outlookcited by 549
  6. 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
  7. 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 536
  8. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
  9. 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
  10. 2017Wasserstein Auto-Encoderscited by 373
  11. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  12. 2023Poisoning Web-Scale Training Datasets is Practicalcited by 290
  13. 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 271
  14. 2019Simple Black-box Adversarial Attackscited by 251
  15. 2021WebFace260M: A Benchmark Unveiling the Power of Million-Scale Deep Face Recognitioncited by 223
  16. 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
  17. 2020Learning Robust Representations via Multi-View Information Bottleneckcited by 191
  18. 2016Person Re-identification: Past, Present and Futurecited by 181
  19. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
  20. 2021CrypTen: Secure Multi-Party Computation Meets Machine Learningcited by 131
  21. 2018Protection Against Reconstruction and Its Applications in Private Federated Learningcited by 130
  22. 2017Fader Networks: Manipulating Images by Sliding Attributescited by 118
  23. 2018Stealing Hyperparameters in Machine Learningcited by 118
  24. 2016Minimax Optimal Procedures for Locally Private Estimationcited by 107
  25. 2017Towards a Visual Privacy Advisor: Understanding and Predicting Privacy Risks in Imagescited by 101
  26. 2018Exploring Connections Between Active Learning and Model Extractioncited by 85
  27. 2018GenAttack: Practical Black-box Attacks with Gradient-Free Optimizationcited by 82
  28. 2020The Conditional Entropy Bottleneckcited by 75
  29. 2018Learning Representations for Neural Network-Based Classification Using the Information Bottleneck Principlecited by 70
  30. 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
  31. 2020The Information Bottleneck Problem and Its Applications in Machine Learningcited by 66
  32. 2020Improved Residual Networks for Image and Video Recognitioncited by 52
  33. 2022Discover and Mitigate Unknown Biases with Debiasing Alternate Networkscited by 47
  34. 2022Unbalanced Optimal Transport, from Theory to Numericscited by 46
  35. 2016The deterministic information bottleneckcited by 42
  36. 2023A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networkscited by 42
  37. 2019Explaining a black-box using Deep Variational Information Bottleneck Approachcited by 36
  38. 2018Caveats for information bottleneck in deterministic scenarioscited by 34

50 most cited of 89 All 89 (JSON)

Built on by

Cited by year

Citing papers per year: 2024: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Facial Attribute Based Text Guided Face Anonymization
  2. 2024Enhancing User-Centric Privacy Protection: An Interactive Framework through Diffusion Models and Machine Unlearning
  3. 2023Diff-Privacy: Diffusion-based Face Privacy Protection
  4. 2024Enhancing Generalization of Invisible Facial Privacy Cloak via Gradient Accumulation
  5. 2026Realistic Face Reconstruction from Facial Embeddings via Diffusion Models
  6. 2026Bodhi VLM: Privacy-Alignment Modeling for Hierarchical Visual Representations in Vision Backbones and VLM Encoders via Bottom-Up and Top-Down Feature Search
  7. 2023Disguise without Disruption: Utility-Preserving Face De-Identification
  8. 2025Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection