Differentially Private 2D Human Pose Estimation
Not on the map. Why?
Abstract (arXiv)
Human pose estimation (HPE) has become essential in numerous applications including healthcare, activity recognition, and human-computer interaction. However, the privacy implications of processing sensitive visual data present significant deployment barriers in critical domains. While traditional anonymization techniques offer limited protection and often compromise data utility for broader motion analysis, Differential Privacy (DP) provides formal privacy guarantees but typically degrades model performance when applied naively. In this work, we present the first comprehensive framework for differentially private 2D human pose estimation (2D-HPE) by applying Differentially Private Stochastic Gradient Descent (DP-SGD) to this task. To effectively balance privacy with performance, we adopt Projected DP-SGD (PDP-SGD), which projects the noisy gradients to a low-dimensional subspace. Next, we incorporate Feature Differential Privacy(FDP) to selectively privatize only sensitive features while retaining public visual cues. Finally, we propose a hybrid feature-projective DP framework that combines both approaches to balance privacy and accuracy for HPE. We evaluate our approach on the MPII dataset across varying privacy budgets, training strategies, and clipping norms. Our combined feature-projective method consistently outperforms vanilla DP-SGD and individual baselines, achieving up to 82.61% mean [email protected] at ε = 0.8, substantially closing the gap to the non-private performance. This work lays foundation for privacy-preserving human pose estimation in real-world, sensitive applications.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 50 of its 80 references that are in the map. First posted on arXiv 14 Apr 2025.
Builds on
50 of 80 references.
References · 50
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019Searching for MobileNetV3cited by 1,994
- 2019Objects as Pointscited by 1,175
- 2019Deep Leakage from Gradientscited by 1,021
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
- 2017Renyi Differential Privacycited by 650
- 2018Simple Baselines for Human Pose Estimation and Trackingcited by 502
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2013DeepPose: Human Pose Estimation via Deep Neural Networkscited by 305
- 2022TinyViT: Fast Pretraining Distillation for Small Vision Transformerscited by 234
38 more
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2020Deep Learning-Based Human Pose Estimation: A Surveycited by 207
- 2015A Dataset for Movie Descriptioncited by 195
- 2019Distribution-Aware Coordinate Representation for Human Pose Estimationcited by 165
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2022Reconstructing Training Data from Trained Neural Networkscited by 133
- 2021Human Pose Regression with Residual Log-likelihood Estimationcited by 131
- 2014Joint Training of a Convolutional Network and a Graphical Model for Human Pose Estimationcited by 129
- 2021TokenPose: Learning Keypoint Tokens for Human Pose Estimationcited by 107
- 2019Single-Stage Multi-Person Pose Machinescited by 95
- 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 90
- 2019Differentially Private Model Publishing for Deep Learningcited by 71
- 2021SimCC: a Simple Coordinate Classification Perspective for Human Pose Estimationcited by 68
- 2023Human-Art: A Versatile Human-Centric Dataset Bridging Natural and Artificial Scenescited by 68
- 2021Selective Differential Privacy for Language Modelingcited by 62
- 2021Online Knowledge Distillation for Efficient Pose Estimationcited by 55
- 2022Mixed Differential Privacy in Computer Visioncited by 54
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2020UniPose: Unified Human Pose Estimation in Single Images and Videoscited by 49
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2022Do Gradient Inversion Attacks Make Federated Learning Unsafe?cited by 44
- 2022Poseur: Direct Human Pose Regression with Transformerscited by 43
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2023RTMO: Towards High-Performance One-Stage Real-Time Multi-Person Pose Estimationcited by 34
- 2021Test-Time Personalization with a Transformer for Human Pose Estimationcited by 33
- 2022Learning to Generate Image Embeddings with User-level Differential Privacycited by 23
- 2019DP-LSSGD: A Stochastic Optimization Method to Lift the Utility in Privacy-Preserving ERMcited by 15
- 2022Realistic Full-Body Anonymization with Surface-Guided GANscited by 15
- 2023Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Informationcited by 13
- 2023DistilPose: Tokenized Pose Regression with Heatmap Distillationcited by 12
- 2023Does Image Anonymization Impact Computer Vision Training?cited by 12
- 2021Low-resolution Human Pose Estimationcited by 10
- 2021Towards Understanding the Impact of Model Size on Differential Private Classificationcited by 10
- 2024ProbPose: A Probabilistic Approach to 2D Human Pose Estimationcited by 9
- 2024Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Taskscited by 5
- 2022Towards Efficient Active Learning of PDFAcited by 3
- 2024On the Privacy of Selection Mechanisms with Gaussian Noisecited by 3
- 2024Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognitioncited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.