Face De-identification: State-of-the-art Methods and Comparative Studies
Not on the map. Why?
Abstract (arXiv)
The widespread use of image acquisition technologies, along with advances in facial recognition, has raised serious privacy concerns. Face de-identification usually refers to the process of concealing or replacing personal identifiers, which is regarded as an effective means to protect the privacy of facial images. A significant number of methods for face de-identification have been proposed in recent years. In this survey, we provide a comprehensive review of state-of-the-art face de-identification methods, categorized into three levels: pixel-level, representation-level, and semantic-level techniques. We systematically evaluate these methods based on two key criteria, the effectiveness of privacy protection and preservation of image utility, highlighting their advantages and limitations. Our analysis includes qualitative and quantitative comparisons of the main algorithms, demonstrating that deep learning-based approaches, particularly those using Generative Adversarial Networks (GANs) and diffusion models, have achieved significant advancements in balancing privacy and utility. Experimental results reveal that while recent methods demonstrate strong privacy protection, trade-offs remain in visual fidelity and computational complexity. This survey not only summarizes the current landscape but also identifies key challenges and future research directions in face de-identification.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 92 of its 209 references that are in the map. First posted on arXiv 15 Nov 2024.
Builds on
92 of 209 references.
References · 92
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
- 2016Deep Learning with Differential Privacycited by 2,682
38 more
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
- 2016Adversarial examples in the physical worldcited by 1,762
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2021Alias-Free Generative Adversarial Networkscited by 1,181
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
- 2020Encoding in Style: a StyleGAN Encoder for Image-to-Image Translationcited by 727
- 2020First Order Motion Model for Image Animationcited by 698
- 2019Accurate 3D Face Reconstruction with Weakly-Supervised Learning: From Single Image to Image Setcited by 481
- 2018Video-to-Video Synthesiscited by 388
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2017AttGAN: Facial Attribute Editing by Only Changing What You Wantcited by 241
- 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
- 2021More Control for Free! Image Synthesis with Semantic Diffusion Guidancecited by 211
- 2021General Facial Representation Learning in a Visual-Linguistic Mannercited by 193
- 2019Efficient Decision-based Black-box Adversarial Attacks on Face Recognitioncited by 173
- 2017Fine-Grained Head Pose Estimation Without Keypointscited by 163
- 2014Deep Learning Face Representation by Joint Identification-Verificationcited by 162
- 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 161
- 2019Consistency Regularization for Generative Adversarial Networkscited by 134
- 2019STGAN: A Unified Selective Transfer Network for Arbitrary Image Attribute Editingcited by 119
- 2023Collaborative Diffusion for Multi-Modal Face Generation and Editingcited by 116
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2021Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognitioncited by 95
- 2021HifiFace: 3D Shape and Semantic Prior Guided High Fidelity Face Swappingcited by 92
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2020Towards Transferable Adversarial Attack against Deep Face Recognitioncited by 79
- 2022Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfercited by 77
- 2022DiffFace: Diffusion-based Face Swapping with Facial Guidancecited by 77
- 2014Differential Privacy and Machine Learning: a Survey and Reviewcited by 66
- 2018Learning to Anonymize Faces for Privacy Preserving Action Detectioncited by 63
- 2015DeepID3: Face Recognition with Very Deep Neural Networkscited by 62
50 most cited of 92 All 92 (JSON)
Built on by
Citing papers per year: 2025: 6; 2026: 3.
9 papers.
- 2025NullFace: Training-Free Localized Face Anonymizationcited by 4
- 2025Reverse Personalizationcited by 1
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentationcited by 0
- 2025Patch-based Automatic Rosacea Detection Using the ResNet Deep Learning Frameworkcited by 0
- 2025PerFace: Metric Learning in Perceptual Facial Similarity for Enhanced Face Anonymizationcited by 0
- 2025Investigating Adversarial Robustness against Preprocessing used in Blackbox Face Recognitioncited by 0
- 2026Face anonymization preserving facial expressions and photometric realismcited by 0
- 2026Seeing Without Exposing: Adaptive Privacy Control for Open-World, Context-Hungry MLLMscited by 0
- 2026Face De-Identification: A Domain-Centric Survey from Capture to Processingcited by 0
- 2026Face De-Identification: A Domain-Centric Survey from Capture to Processing28 Jul 2026
- 2026Seeing Without Exposing: Adaptive Privacy Control for Open-World, Context-Hungry MLLMs5 Jun 2026
- 2026Face anonymization preserving facial expressions and photometric realism18 Mar 2026
- 2025Reverse Personalization28 Dec 2025
- 2025Investigating Adversarial Robustness against Preprocessing used in Blackbox Face Recognition20 Oct 2025
- 2025PerFace: Metric Learning in Perceptual Facial Similarity for Enhanced Face Anonymization24 Sep 2025
- 2025Patch-based Automatic Rosacea Detection Using the ResNet Deep Learning Framework11 Sep 2025
- 2025On the Importance of Conditioning for Privacy-Preserving Data Augmentation8 Apr 2025
- 2025NullFace: Training-Free Localized Face Anonymization11 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2023Disguise without Disruption: Utility-Preserving Face De-Identification
- 2025Enhancing Facial Privacy Protection via Weakening Diffusion Purification
- 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
- 2025Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection
- 2025Facial Attribute Based Text Guided Face Anonymization
- 2025FaceMe: Robust Blind Face Restoration with Personal Identification
- 2024DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection
- 2024Modeling Spoof Noise by De-spoofing Diffusion and its Application in Face Anti-spoofing