mlsanityData to 7 Oct 2026

Face De-identification: State-of-the-art Methods and Comparative Studies

arXiv 2411.09863 ↗First posted 15 Nov 2024cs.CV cs.CRcited by 9

Not on the map. Why?

Abstract (arXiv)

The widespread use of image acquisition technologies, along with advances in facial recognition, has raised serious privacy concerns. Face de-identification usually refers to the process of concealing or replacing personal identifiers, which is regarded as an effective means to protect the privacy of facial images. A significant number of methods for face de-identification have been proposed in recent years. In this survey, we provide a comprehensive review of state-of-the-art face de-identification methods, categorized into three levels: pixel-level, representation-level, and semantic-level techniques. We systematically evaluate these methods based on two key criteria, the effectiveness of privacy protection and preservation of image utility, highlighting their advantages and limitations. Our analysis includes qualitative and quantitative comparisons of the main algorithms, demonstrating that deep learning-based approaches, particularly those using Generative Adversarial Networks (GANs) and diffusion models, have achieved significant advancements in balancing privacy and utility. Experimental results reveal that while recent methods demonstrate strong privacy protection, trade-offs remain in visual fidelity and computational complexity. This survey not only summarizes the current landscape but also identifies key challenges and future research directions in face de-identification.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 92 of its 209 references that are in the map. First posted on arXiv 15 Nov 2024.

Builds on

92 of 209 references.

References · 92

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  3. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  4. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  6. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  7. 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
  8. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  9. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
  10. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
  11. 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
  12. 2016Deep Learning with Differential Privacycited by 2,682
38 more
  1. 2014Conditional Generative Adversarial Netscited by 2,152
  2. 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
  3. 2016Adversarial examples in the physical worldcited by 1,762
  4. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  5. 2021Alias-Free Generative Adversarial Networkscited by 1,181
  6. 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
  7. 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
  8. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
  9. 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
  10. 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
  11. 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
  12. 2020Encoding in Style: a StyleGAN Encoder for Image-to-Image Translationcited by 727
  13. 2020First Order Motion Model for Image Animationcited by 698
  14. 2019Accurate 3D Face Reconstruction with Weakly-Supervised Learning: From Single Image to Image Setcited by 481
  15. 2018Video-to-Video Synthesiscited by 388
  16. 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
  17. 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
  18. 2017AttGAN: Facial Attribute Editing by Only Changing What You Wantcited by 241
  19. 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
  20. 2021More Control for Free! Image Synthesis with Semantic Diffusion Guidancecited by 211
  21. 2021General Facial Representation Learning in a Visual-Linguistic Mannercited by 193
  22. 2019Efficient Decision-based Black-box Adversarial Attacks on Face Recognitioncited by 173
  23. 2017Fine-Grained Head Pose Estimation Without Keypointscited by 163
  24. 2014Deep Learning Face Representation by Joint Identification-Verificationcited by 162
  25. 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 161
  26. 2019Consistency Regularization for Generative Adversarial Networkscited by 134
  27. 2019STGAN: A Unified Selective Transfer Network for Arbitrary Image Attribute Editingcited by 119
  28. 2023Collaborative Diffusion for Multi-Modal Face Generation and Editingcited by 116
  29. 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
  30. 2021Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognitioncited by 95
  31. 2021HifiFace: 3D Shape and Semantic Prior Guided High Fidelity Face Swappingcited by 92
  32. 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
  33. 2020Towards Transferable Adversarial Attack against Deep Face Recognitioncited by 79
  34. 2022Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfercited by 77
  35. 2022DiffFace: Diffusion-based Face Swapping with Facial Guidancecited by 77
  36. 2014Differential Privacy and Machine Learning: a Survey and Reviewcited by 66
  37. 2018Learning to Anonymize Faces for Privacy Preserving Action Detectioncited by 63
  38. 2015DeepID3: Face Recognition with Very Deep Neural Networkscited by 62

50 most cited of 92 All 92 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 6; 2026: 3.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Disguise without Disruption: Utility-Preserving Face De-Identification
  2. 2025Enhancing Facial Privacy Protection via Weakening Diffusion Purification
  3. 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
  4. 2025Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection
  5. 2025Facial Attribute Based Text Guided Face Anonymization
  6. 2025FaceMe: Robust Blind Face Restoration with Personal Identification
  7. 2024DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection
  8. 2024Modeling Spoof Noise by De-spoofing Diffusion and its Application in Face Anti-spoofing