FLUID: Training-Free Face De-identification via Latent Identity Substitution
On the map: Diffusion models → Image generation, text-to-image and editing
Abstract (arXiv)
Current face de-identification methods that replace identifiable cues in the face region with other sacrifices utilities contributing to realism, such as age and gender. To retrieve the damaged realism, we present FLUID (Face de-identification in the Latent space via Utility-preserving Identity Displacement), a single-input face de-identification framework that directly replaces identity features in the latent space of a pretrained diffusion model without affecting the model's weights. We reinterpret face de-identification as an image editing task in the latent h-space of a pretrained unconditional diffusion model. Our framework estimates identity-editing directions through optimization guided by loss functions that encourage attribute preservation while suppressing identity signals. We further introduce both linear and geodesic (tangent-based) editing schemes to effectively navigate the latent manifold. Experiments on CelebA-HQ and FFHQ show that FLUID achieves a superior balance between identity suppression and attribute preservation, outperforming existing de-identification approaches in both qualitative and quantitative evaluations.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Image generation, text-to-image and editing, one of 14 directions in Diffusion models. Builds on 52 of its 75 references that are in the map. First posted on arXiv 21 Nov 2025.
Builds on
52 of 75 references.
Closest ancestors · 7
Same direction, newest first
- 2023Effective Real Image Editing with Accelerated Iterative Diffusion Inversion10 Sep
- 2023DCFace: Synthetic Face Generation with Dual Condition Diffusion Model14 Apr
- 2023Training-free Content Injection using h-space in Diffusion Models27 Mar
- 2023Uncovering Bias in Face Generation Models22 Feb
- 2023Boundary Guided Learning-Free Semantic Control with Diffusion Models16 Feb
- 2021Blended Diffusion for Text-driven Editing of Natural Images29 Nov
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulation6 Oct
Other references · 45
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2014Going Deeper with Convolutionscited by 4,231
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
- 2022RePaint: Inpainting using Denoising Diffusion Probabilistic Modelscited by 1,419
33 more
- 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
- 2016Training Deep Nets with Sublinear Memory Costcited by 825
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
- 2020GANSpace: Discovering Interpretable GAN Controlscited by 612
- 2020InterFaceGAN: Interpreting the Disentangled Face Representation Learned by GANscited by 393
- 2020StyleFlow: Attribute-conditioned Exploration of StyleGAN-Generated Images using Conditional Continuous Normalizing Flowscited by 348
- 2021MagFace: A Universal Representation for Face Recognition and Quality Assessmentcited by 332
- 2020StyleSpace Analysis: Disentangled Controls for StyleGAN Image Generationcited by 331
- 2022Diffusion Models already have a Semantic Latent Spacecited by 324
- 2022Perception Prioritized Training of Diffusion Modelscited by 301
- 2018MobileFaceNets: Efficient CNNs for Accurate Real-Time Face Verification on Mobile Devicescited by 180
- 2023Diffused Heads: Diffusion Models Beat GANs on Talking-Face Generationcited by 142
- 2020SER-FIQ: Unsupervised Estimation of Face Image Quality Based on Stochastic Embedding Robustnesscited by 111
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2022Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfercited by 77
- 2023Discovering Interpretable Directions in the Semantic Latent Space of Diffusion Modelscited by 60
- 2022DeepPrivacy2: Towards Realistic Full-Body Anonymizationcited by 51
- 2021Data Poisoning Won't Save You From Facial Recognitioncited by 45
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2023CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Searchcited by 42
- 2023SwinFace: A Multi-task Transformer for Face Recognition, Expression Recognition, Age Estimation and Attribute Estimationcited by 38
- 2024FaceXFormer: A Unified Transformer for Facial Analysiscited by 34
- 2024DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protectioncited by 31
- 2016Faceless Person Recognition; Privacy Implications in Social Mediacited by 27
- 2023Diff-Privacy: Diffusion-based Face Privacy Protectioncited by 25
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2024Isometric Representation Learning for Disentangled Latent Space of Diffusion Modelscited by 22
- 2023RiDDLE: Reversible and Diversified De-identification with Latent Encryptorcited by 21
- 2023Adv-Diffusion: Imperceptible Adversarial Face Identity Attack via Latent Diffusion Modelcited by 21
- 2024G2Face: High-Fidelity Reversible Face Anonymization via Generative and Geometric Priorscited by 20
- 2023Disguise without Disruption: Utility-Preserving Face De-Identificationcited by 8
- 2019Covering up bias in CelebA-like datasets with Markov blankets: A post-hoc cure for attribute prior avoidancecited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2023Controllable Inversion of Black-Box Face Recognition Models via Diffusion
- 2025Robust ID-Specific Face Restoration via Alignment Learning
- 2026Face inpainting with Identity Preserving Latent Diffusion Models
- 2025High-Fidelity Diffusion Face Swapping with ID-Constrained Facial Conditioning
- 2025FaceMe: Robust Blind Face Restoration with Personal Identification
- 2025Beyond Inference Intervention: Identity-Decoupled Diffusion for Face Anonymization
- 2026AdaptDiff: Adaptive Guidance in Diffusion Models for Diverse and Identity-Consistent Face Synthesis (Student Abstract)
- 2026Diff-ID: Identity Consistent Facial Image Generation and Morphing via Diffusion Models